I can’t run unprivileged LXC containers on the latest Raspberry Pi OS.
$ cat /boot/firmware/cmdline.txt
console=serial0,115200 console=tty1 root=PARTUUID=df19b463-02 rootfstype=ext4 fsck.repair=yes rootwait cfg80211.ieee80211_regdom=PL systemd.unified_cgroup_hierarchy=0
$ sudo cat /etc/systemd/system/user@.service.d/delegate.conf
[Service]
Delegate=cpu cpuset io memory pids
$ sudo cat /etc/lxc/lxc-usernet
whiteman808 veth lxcbr0 10
$ sudo cat /etc/lxc/default.conf
lxc.net.0.type = veth
lxc.net.0.link = lxcbr0
lxc.net.0.flags = up
lxc.idmap = u 0 100000 65536
lxc.idmap = g 0 100000 65536
lxc.apparmor.profile = unconfined
lxc.apparmor.allow_nesting = 0
$ lxc-unpriv-start -n test --foreground
Running as unit: run-p1352-i1652.scope; invocation ID: 1375626332c848a7888ccc583c38e062
lxc-start: test: ../src/lxc/mount_utils.c: fs_attach: 255 Permission denied - Failed to finalize filesystem context 20
lxc-start: test: ../src/lxc/cgroups/cgfsng.c: __cgroupfs_mount: 2197 Permission denied - Failed to mount cgroup2 filesystem onto 19((null))
lxc-start: test: ../src/lxc/cgroups/cgfsng.c: cgfsng_mount: 2366 Permission denied - Failed to force mount cgroup filesystem in cgroup namespace
lxc-start: test: ../src/lxc/conf.c: lxc_mount_auto_mounts: 659 Permission denied - Failed to mount "/sys/fs/cgroup"
lxc-start: test: ../src/lxc/conf.c: lxc_setup: 3944 Failed to setup remaining automatic mounts
lxc-start: test: ../src/lxc/start.c: do_start: 1273 Failed to setup container "test"
lxc-start: test: ../src/lxc/sync.c: sync_wait: 34 An error occurred in another process (expected sequence number 4)
lxc-start: test: ../src/lxc/start.c: __lxc_start: 2119 Failed to spawn container "test"
lxc-start: test: ../src/lxc/tools/lxc_start.c: lxc_start_main: 307 The container failed to start
lxc-start: test: ../src/lxc/tools/lxc_start.c: lxc_start_main: 312 Additional information can be obtained by setting the --logfile and --logpriority options