[lxc-users] Disappearing cgroups

Ben Green ben at bristolwireless.net
Thu Oct 10 10:59:29 UTC 2019

Quoting "Serge E. Hallyn" <serge at hallyn.com>:

> On Wed, Oct 09, 2019 at 08:54:54AM +0100, Ben Green wrote:
>> Quoting "Serge E. Hallyn" <serge at hallyn.com>:
>> >
>> > Actually you probably only want to chown the tasks and cgroup.procs files
>> > to lxcadmin:, as otherwise the containers can raise their limits.
>> >
>> I've made that change, rebooted and started the containers, the result is
> Can you show the script you're using?

My /home/lxcadmin/.profile now reads:

  # ~/.profile: executed by bash for login shells.


/usr/local/bin/lxccgroup-enter-container-cgroups now reads:


echo "Adding this user to the 'forcontainers' cgroup directory"
for i in $(find /sys/fs/cgroup/ -maxdepth 1 -mindepth 1 -type d | grep  
-v unified); do echo $PPID > $i/forcontainers/tasks ; done


/usr/local/sbin/lxccgroup-add-dirs now reads:


  for i in $(find /sys/fs/cgroup/ -maxdepth 1 -mindepth 1 -type d)
   mkdir -p $i/forcontainers
   echo $i/forcontainers
   chown lxcadmin:lxcadmin $i/forcontainers
   chown lxcadmin:lxcadmin $i/forcontainers/tasks
   chown lxcadmin:lxcadmin $i/forcontainers/cgroup.procs


At the moment I'm not using a systemd service file, just running the  
/usr/local/sbin/lxccgroup-add-dirs script as root after booting.


More information about the lxc-users mailing list