[lxc-users] Hint for CentOS 7 guests in Debian stretch with KAISER/KPTI kernel

[Harald Dunkel]

On 01/11/18 17:19, Christoph Lechleitner wrote:
> Hi everybody!
> 
> After this cost me an afternoon I thought I should share the solution
> here ;-)
> 
> We are running multiple LXC hosts with Debian jessie resp. stretch,
> using sysv-init over systemd in the host system.
> 
> 99% of the guest systems are Debian too, but we also have guests with
> CentOS 6 and 7 (one each) for development.
> 
> After upgrading the host system from Debian Jessie (with kernel 4.0.x
> from jessie-backports) to Debian stretch with kernel 4.9.65-3+deb9u2
> (includes KAISER patches AKA KPTI against meltdown), our CentOS 7 guest
> were half broken.
> 

I have a similar setup. My suggestion:

If systemd is not installed on the host, then you should consider to
install the cgmanager package, together with a backport of lxc 2.0.9.
I cannot recommend to add cgroup to your /etc/fstab.


Hope this helps
Harri