Newbie here. I am experimenting with containers. This is my .config/lxc/default.conf:
lxc.include = /usr/local/etc/lxc/default.conf
lxc.idmap = u 0 100000 655536
lxc.idmap = g 0 100000 655536
Note the typo in 655536. These numbers are invalid.
I created a container, received error messages but it was still created. Now, I can’t destroy it.
$ lxc-create ct001 -t download -- -d centos -r 8 -a amd64 --no-validate
lxc 20210725083112.467 ERROR conf - conf.c:lxc_map_ids:3087 - newuidmap failed to write mapping "newuidmap: uid range [0-655536) -> [100000-755536) not allowed": newuidmap 11173 0 100000 655536 655536 1000 1
Failed to write id mapping for child process
lxc 20210725083112.468 ERROR utils - utils.c:lxc_drop_groups:1343 - Operation not permitted - Failed to drop supplimentary groups
lxc 20210725083112.468 ERROR utils - utils.c:lxc_switch_uid_gid:1318 - Invalid argument - Failed to switch to gid 0
lxc-create: ct001: lxccontainer.c: create_run_template: 1621 Failed to create container from template
lxc-create: ct001: conf.c: lxc_map_ids: 3087 newuidmap failed to write mapping "newuidmap: uid range [0-655536) -> [100000-755536) not allowed": newuidmap 11176 0 100000 655536 655536 1000 1
lxc-create: ct001: conf.c: userns_exec_full: 4734 error setting up {g,u}id mappings for child process "11176"
lxc-create: ct001: lxccontainer.c: container_destroy: 2999 Error destroying rootfs for ct001
lxc-create: ct001: tools/lxc_create.c: main: 319 Failed to create container ct001
In spite of the last message, it exists:
$ lxc-ls --fancy
NAME STATE AUTOSTART GROUPS IPV4 IPV6 UNPRIVILEGED
ct001 STOPPED 0 - - - true
Attempts to destroy it fail:
$ lxc-destroy ct001
lxc-destroy: ct001: conf.c: lxc_map_ids: 3087 newuidmap failed to write mapping "newuidmap: uid range [0-655536) -> [100000-755536) not allowed": newuidmap 11205 0 100000 655536 655536 1000 1
lxc-destroy: ct001: conf.c: userns_exec_full: 4734 error setting up {g,u}id mappings for child process "11205"
lxc-destroy: ct001: lxccontainer.c: container_destroy: 2999 Error destroying rootfs for ct001
lxc-destroy: ct001: tools/lxc_destroy.c: do_destroy: 112 Destroying ct001 failed
Even after fixing the error in the ID mapping:
student@debian:~$ vi .config/lxc/default.conf
student@debian:~$ lxc-destroy ct001
lxc-destroy: ct001: conf.c: lxc_map_ids: 3087 newuidmap failed to write mapping "newuidmap: uid range [0-655536) -> [100000-755536) not allowed": newuidmap 11301 0 100000 655536 655536 1000 1
lxc-destroy: ct001: conf.c: userns_exec_full: 4734 error setting up {g,u}id mappings for child process "11301"
lxc-destroy: ct001: lxccontainer.c: container_destroy: 2999 Error destroying rootfs for ct001
lxc-destroy: ct001: tools/lxc_destroy.c: do_destroy: 112 Destroying ct001 failed
Some structures have been set up in the filesystem, but this here is empty:
$ ls -l .local/share/lxc/ct001/rootfs
total 0
What can I do to get rid of it?