[lxc-users] "lxc list" on Linux 4.18: cannot perform readlinkat() on the mount namespace file descriptor of the init process: Permission denied

[Christian Brauner]

On Wed, Aug 15, 2018 at 11:49:40AM +0000, Tomasz Chmielewski wrote:
> # lxc list
> cannot perform readlinkat() on the mount namespace file descriptor of the
> init process: Permission denied

Where is this error coming from? It's not from LX{C,D}
What does lxc info show?

> 
> # dmesg -c
> [ 1554.529049] audit: type=1400 audit(1534333565.580:49): apparmor="DENIED"
> operation="ptrace" profile="/snap/core/5145/usr/lib/snapd/snap-confine"
> pid=2636 comm="snap-confine" requested_mask="read" denied_mask="read"
> peer="unconfined"
> 
> 
> This is after upgrading the kernel to:
> 
> # uname -a
> Linux lxd05 4.18.0-041800-generic #201808122131 SMP Sun Aug 12 21:33:20 UTC
> 2018 x86_64 x86_64 x86_64 GNU/Linux
> 
> 
> # snap list
> Name  Version    Rev   Tracking  Publisher  Notes
> core  16-2.34.3  5145  stable    canonical  core
> lxd   3.3        8011  stable    canonical  -
> 
> 
> # cat /etc/issue
> Ubuntu 18.04.1 LTS \n \l
> 
> 
> 
> Expected?
> 
> 
> 
> Tomasz Chmielewski
> https://lxadm.com
> _______________________________________________
> lxc-users mailing list
> lxc-users at lists.linuxcontainers.org
> http://lists.linuxcontainers.org/listinfo/lxc-users