[lxc-users] Unable to mount 9P filesystem in unprivileged LXC container with lxc.mount.entry

[Dan Crosta]

Hi all,

I'm trying to mount a folder exported via diod (a 9P filesystem server) in
LXC. I have the following in my container configuration file:
https://pastebin.com/UPwe41qE

In the log, I see the following entries:

      lxc-start 20190624200023.825 ERROR    lxc_utils -
utils.c:safe_mount:1653 - Operation not permitted - Failed to mount
/tmp/diod.sock onto /usr/lib/x86_64-linux-gnu/lxc/tmp
      lxc-start 20190624200023.825 ERROR    lxc_conf -
conf.c:mount_entry:1858 - Operation not permitted - Failed to mount
"/tmp/diod.sock" on "/usr/lib/x86_64-linux-gnu/lxc/tmp"
      lxc-start 20190624200023.825 ERROR    lxc_conf -
conf.c:lxc_setup:3335 - failed to setup the mount entries for 'dcrosta'
      lxc-start 20190624200023.825 ERROR    lxc_start -
start.c:do_start:1248 - Failed to setup container "dcrosta".

I can mount the 9P export with eg `sudo mount -t 9p /tmp/diod.sock -o
trans=unix,version=9p2000.L,aname=/home/dcrosta/exported,uname=root
/home/dcrosta/plan9` -- using the same mount options as provided in
lxc.mount.entry. I take this to mean that the 9P export and kernel v9fs
interactions are all working correctly, and I just need to figure out how
to ask LXC nicely enough to perform the mount.

I'm running Ubuntu 16.04.6 and lxc version 2.0.11-0ubuntu1~16.04.3.

Any suggestions on what to try next or where to look?

Thanks!
--
Dan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.linuxcontainers.org/pipermail/lxc-users/attachments/20190624/c47e8787/attachment.html>