Skip to content

GitLab

  • Projects
  • Groups
  • Snippets
  • Help
    • Loading...
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in / Register
aports
aports
  • Project overview
    • Project overview
    • Details
    • Activity
    • Releases
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 644
    • Issues 644
    • List
    • Boards
    • Labels
    • Service Desk
    • Milestones
  • Merge Requests 166
    • Merge Requests 166
  • CI / CD
    • CI / CD
    • Pipelines
    • Jobs
    • Schedules
  • Operations
    • Operations
    • Environments
  • Analytics
    • Analytics
    • CI / CD
    • Repository
    • Value Stream
  • Members
    • Members
  • Collapse sidebar
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
  • alpine
  • aportsaports
  • Issues
  • #12281

Closed
Open
Opened Jan 08, 2021 by Gábor ADORJÁNI@adiz0r
  • Report abuse
  • New issue
Report abuse New issue

Ubuntu LXC container needs "lxc.cap.drop = sys_admin" after 3.12 -> 3.13.0_rc2 upgrade

The upgrade from 3.12 to 3.13.0_rc2 triggered 2 problems when it came to starting LXC containers. The first affected both of my containers (Alpine, Ubuntu), but it has been already solved, see #12278 (closed).

This second one only affected the Ubuntu instance. Affected, as I've already found a workaround, but I'm not sure if it's the right way to go ahead.

At startup I got the following error message:

# lxc-start -l debug CONTAINER -F 
lxc-start: CONTAINER: conf.c: lxc_mount_auto_mounts: 728 Cross-device link - Failed to mount "/sys/fs/cgroup"
                                                                                                           lxc-start: CONTAINER: conf.c: lxc_setup: 3366 Failed to setup remaining automatic mounts
      lxc-start: CONTAINER: start.c: do_start: 1218 Failed to setup container "CONTAINER"
                                                                                     lxc-start: CONTAINER: sync.c: __sync_wait: 36 An error occurred in another process (expected sequence number 5)
       lxc-start: CONTAINER: start.c: __lxc_start: 1999 Failed to spawn container "CONTAINER"
                                                                                         lxc-start: CONTAINER: tools/lxc_start.c: main: 308 The container failed to start
lxc-start: CONTAINER: tools/lxc_start.c: main: 313 Additional information can be obtained by setting the --logfile and --logpriority options

A bit of searching turned up 978065 in the Debian bug tracker, which seems related.

Indeed, adding lxc.cap.drop = sys_admin to /srv/lxc/CONTAINER/config provides a workaround the container can start. Though at stopping I get another error message which I haven't yet seen with 3.12:

         Starting Power-Off...
lxc-start: CONTAINER: utils.c: lxc_rm_rf: 1806 No such file or directory - Failed to open dir "/sys/fs/cgroup/openrc//lxc.payload.CONTAINER"
To upload designs, you'll need to enable LFS and have admin enable hashed storage. More information
Assignee
Assign to
None
Milestone
None
Assign milestone
Time tracking
None
Due date
None
0
Labels
None
Assign labels
  • View project labels
Reference: alpine/aports#12281