[lxc-users] LXC, Debian buster and PAM-CGFS[41830]: Failed to get list of controllers

[Dirk Geschke]

Hi all,

maybe someone has a clue for me. I just tried to setup an completely
unprivileged LXC on a Debian buster (SysV-Init) with an LXC buster
container.

But this fails (it is a download image of debian buster, so it tries
to use systemd...):

   $ lxc-start -n lxc-$USER -F
   Failed to lookup module alias 'autofs4': Function not implemented
   Failed to mount cgroup at /sys/fs/cgroup/systemd: Operation not permitted
   [!!!!!!] Failed to mount API filesystems.
   Exiting PID 1...

And I see in /var/log/auth.log a lot of this:

   PAM-CGFS[41962]: Failed to get list of controllers

Restarting lxcfs does not help, but now I get on startup a

   Segmentation fault

So probably restarting lxcfs was not a good idea at this point.

But how can an unprivileged user corrupt the cgroups on the host?

And more strange: I have such setups up and running, the problem
seems to be new...

Has anyone an idea what is going wrong and how to fix this?

Best regards

Dirk
-- 
+----------------------------------------------------------------------+
| Dr. Dirk Geschke       / Plankensteinweg 61    / 85435 Erding        |
| Telefon: 08122-559448  / Mobil: 0176-96906350 / Fax: 08122-9818106   |
| dirk at geschke-online.de / dirk at lug-erding.de  / kontakt at lug-erding.de |
+----------------------------------------------------------------------+