lxc version : 4.0.11
Linux version: 4.15.0-126-generic #129-Ubuntu SMP Mon Nov 23 18:53:38 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux
/sbin$ ll |grep init
lrwxrwxrwx 1 root root 20 Aug 26 19:50 init → /lib/systemd/systemd*
config file:
lxc.idmap = u 0 231072 10
lxc.idmap = g 0 231072 10
lxc.idmap = u 1003 1003 1
lxc.idmap = g 1005 1005 1
lxc.rootfs.path =dir:/var/lib/lxc/test/rootfs
lxc.uts.name = test
lxc.console.path = none
lxc.mount.auto = cgroup:mixed proc:mixed sys:rw
Command used:
lxc-start -n test -f config -l trace -o /tmp/z.txt
logfile:
lxc-start test 20211214182858.117 NOTICE utils - utils.c:lxc_switch_uid_gid:1323 - Switched to gid 0
lxc-start test 20211214182858.117 NOTICE utils - utils.c:lxc_switch_uid_gid:1332 - Switched to uid 0
lxc-start test 20211214182858.117 INFO start - start.c:do_start:1206 - Unshared CLONE_NEWCGROUP
lxc-start test 20211214182858.118 DEBUG start - start.c:lxc_try_preserve_namespace:140 - Preserved net namespace via fd 5 and stashed path as net:/proc/20959/fd/5
lxc-start test 20211214182858.118 WARN start - start.c:lxc_spawn:1829 - Operation not permitted - Failed to allocate new network namespace id
lxc-start test 20211214182858.119 DEBUG conf - conf.c:lxc_mount_rootfs:1425 - Mounted rootfs “/var/lib/lxc/test/rootfs” onto “/usr/local/lib/lxc/rootfs” with options “(null)”
lxc-start test 20211214182858.119 INFO conf - conf.c:setup_utsname:866 - Set hostname to “test”
lxc-start test 20211214182858.119 INFO conf - conf.c:mount_autodev:1206 - Preparing “/dev”
lxc-start test 20211214182858.119 DEBUG conf - conf.c:mount_autodev:1238 - Using mount options: size=500000,mode=755
lxc-start test 20211214182858.119 INFO conf - conf.c:mount_autodev:1267 - Prepared “/dev”
lxc-start test 20211214182858.119 DEBUG conf - conf.c:lxc_mount_auto_mounts:733 - Invalid argument - Tried to ensure procfs is unmounted
lxc-start test 20211214182858.119 DEBUG conf - conf.c:lxc_mount_auto_mounts:756 - Invalid argument - Tried to ensure sysfs is unmounted
lxc-start test 20211214182858.120 ERROR utils - utils.c:safe_mount:1200 - Operation not permitted - Failed to mount “(null)” onto “/usr/local/lib/lxc/rootfs/sys/devices/virtual/net”
lxc-start test 20211214182858.120 ERROR conf - conf.c:lxc_mount_auto_mounts:801 - Operation not permitted - Failed to mount “(null)” on “/usr/local/lib/lxc/rootfs/sys/devices/virtual/net” with flags 46
lxc-start test 20211214182858.120 ERROR conf - conf.c:lxc_setup:4347 - Failed to setup first automatic mounts
lxc-start test 20211214182858.120 ERROR start - start.c:do_start:1274 - Failed to setup container “test”
lxc-start test 20211214182858.122 ERROR sync - sync.c:sync_wait:34 - An error occurred in another process (expected sequence number 3)
lxc-start test 20211214182858.122 DEBUG network - network.c:lxc_delete_network:4159 - Deleted network devices
lxc-start test 20211214182858.124 ERROR start - start.c:__lxc_start:2068 - Failed to spawn container “test”
lxc-start test 20211214182858.124 WARN start - start.c:lxc_abort:1044 - No such process - Failed to send SIGKILL to 20965
lxc-start test 20211214182858.124 DEBUG conf - conf.c:idmaptool_on_path_and_privileged:3502 - The binary “/usr/bin/newuidmap” does have the setuid bit set
lxc-start test 20211214182858.124 DEBUG conf - conf.c:idmaptool_on_path_and_privileged:3502 - The binary “/usr/bin/newgidmap” does have the setuid bit set
lxc-start test 20211214182858.124 DEBUG conf - conf.c:lxc_map_ids:3587 - Functional newuidmap and newgidmap binary found
lxc-start test 20211214182858.149 NOTICE utils - utils.c:lxc_drop_groups:1347 - Dropped supplimentary groups
lxc-start test 20211214182858.203 ERROR lxc_start - tools/lxc_start.c:main:306 - The container failed to start
lxc-start test 20211214182858.204 ERROR lxc_start - tools/lxc_start.c:main:312 - Additional information can be obtained by setting the --logfile and --logpriority options
lxc-start test 20211214182922.740 INFO confile - confile.c:set_config_idmaps:2069 - Read uid map: type u nsid 0 hostid 231072 range 10
lxc-start test 20211214182922.740 INFO confile - confile.c:set_config_idmaps:2069 - Read uid map: type g nsid 0 hostid 231072 range 10
lxc-start test 20211214182922.740 INFO confile - confile.c:set_config_idmaps:2069 - Read uid map: type u nsid 1003 hostid 1003 range 1
lxc-start test 20211214182922.740 INFO confile - confile.c:set_config_idmaps:2069 - Read uid map: type g nsid 1005 hostid 1005 range 1
lxc-start test 20211214182922.743 WARN apparmor - lsm/apparmor.c:lsm_apparmor_ops_init:1275 - Per-container AppArmor profiles are disabled because the mac_admin capability is missing
lxc-start test 20211214182922.743 INFO lsm - lsm/lsm.c:lsm_init_static:38 - Initialized LSM security driver AppArmor
lxc-start test 20211214182922.743 INFO cgfsng - cgroups/cgfsng.c:legacy_hierarchy_delegated:3057 - Permission denied - Legacy hierarchy not writable, skipping
lxc-start test 20211214182922.743 INFO cgfsng - cgroups/cgfsng.c:unified_hierarchy_delegated:3044 - Permission denied - The cgroup.threads file is not writable, skipping unified hierarchy
lxc-start test 20211214182922.743 INFO start - start.c:lxc_init:883 - Container “test” is initialized
lxc-start test 20211214182922.743 WARN cgfsng - cgroups/cgfsng.c:__cgroup_tree_create:735 - File exists - Creating the final cgroup 8(lxc.monitor.test) failed
lxc-start test 20211214182922.743 WARN cgfsng - cgroups/cgfsng.c:cgroup_tree_create:795 - File exists - Failed to create monitor cgroup 8(lxc.monitor.test)
lxc-start test 20211214182922.743 DEBUG cgfsng - cgroups/cgfsng.c:cgfsng_monitor_create:1014 - Failed to create cgroup lxc.monitor.test)
lxc-start test 20211214182922.743 WARN cgfsng - cgroups/cgfsng.c:__cgroup_tree_create:735 - File exists - Creating the final cgroup 8(lxc.monitor.test-1) failed
lxc-start test 20211214182922.743 WARN cgfsng - cgroups/cgfsng.c:cgroup_tree_create:795 - File exists - Failed to create monitor cgroup 8(lxc.monitor.test-1)
lxc-start test 20211214182922.743 DEBUG cgfsng - cgroups/cgfsng.c:cgfsng_monitor_create:1014 - Failed to create cgroup lxc.monitor.test-1)
lxc-start test 20211214182922.743 WARN cgfsng - cgroups/cgfsng.c:__cgroup_tree_create:735 - File exists - Creating the final cgroup 8(lxc.monitor.test-2) failed
lxc-start test 20211214182922.743 WARN cgfsng - cgroups/cgfsng.c:cgroup_tree_create:795 - File exists - Failed to create monitor cgroup 8(lxc.monitor.test-2)
lxc-start test 20211214182922.743 DEBUG cgfsng - cgroups/cgfsng.c:cgfsng_monitor_create:1014 - Failed to create cgroup lxc.monitor.test-2)
lxc-start test 20211214182922.743 WARN cgfsng - cgroups/cgfsng.c:__cgroup_tree_create:735 - File exists - Creating the final cgroup 8(lxc.monitor.test-3) failed
lxc-start test 20211214182922.743 WARN cgfsng - cgroups/cgfsng.c:cgroup_tree_create:795 - File exists - Failed to create monitor cgroup 8(lxc.monitor.test-3)
lxc-start test 20211214182922.743 DEBUG cgfsng - cgroups/cgfsng.c:cgfsng_monitor_create:1014 - Failed to create cgroup lxc.monitor.test-3)
lxc-start test 20211214182922.743 WARN cgfsng - cgroups/cgfsng.c:__cgroup_tree_create:735 - File exists - Creating the final cgroup 8(lxc.monitor.test-4) failed
lxc-start test 20211214182922.743 WARN cgfsng - cgroups/cgfsng.c:cgroup_tree_create:795 - File exists - Failed to create monitor cgroup 8(lxc.monitor.test-4)
lxc-start test 20211214182922.743 DEBUG cgfsng - cgroups/cgfsng.c:cgfsng_monitor_create:1014 - Failed to create cgroup lxc.monitor.test-4)
lxc-start test 20211214182922.743 WARN cgfsng - cgroups/cgfsng.c:__cgroup_tree_create:735 - File exists - Creating the final cgroup 8(lxc.monitor.test-5) failed
lxc-start test 20211214182922.743 WARN cgfsng - cgroups/cgfsng.c:cgroup_tree_create:795 - File exists - Failed to create monitor cgroup 8(lxc.monitor.test-5)
lxc-start test 20211214182922.743 DEBUG cgfsng - cgroups/cgfsng.c:cgfsng_monitor_create:1014 - Failed to create cgroup lxc.monitor.test-5)
lxc-start test 20211214182922.745 INFO cgfsng - cgroups/cgfsng.c:cgfsng_monitor_create:1028 - The monitor process uses “lxc.monitor.test-6” as cgroup
lxc-start test 20211214182922.763 DEBUG storage - storage/storage.c:get_storage_by_name:209 - Detected rootfs type “dir”
lxc-start test 20211214182922.765 INFO cgfsng - cgroups/cgfsng.c:cgfsng_payload_create:1137 - The container process uses “lxc.payload.test” as inner and “lxc.payload.test” as limit cgroup
lxc-start test 20211214182922.765 ERROR utils - utils.c:lxc_can_use_pidfd:1774 - Kernel does not support pidfds
lxc-start test 20211214182922.765 INFO start - start.c:lxc_spawn:1759 - Cloned CLONE_NEWUSER
lxc-start test 20211214182922.765 INFO start - start.c:lxc_spawn:1759 - Cloned CLONE_NEWNS
lxc-start test 20211214182922.765 INFO start - start.c:lxc_spawn:1759 - Cloned CLONE_NEWPID
lxc-start test 20211214182922.765 INFO start - start.c:lxc_spawn:1759 - Cloned CLONE_NEWUTS
lxc-start test 20211214182922.765 INFO start - start.c:lxc_spawn:1759 - Cloned CLONE_NEWIPC
lxc-start test 20211214182922.770 DEBUG start - start.c:lxc_try_preserve_namespace:140 - Preserved user namespace via fd 51 and stashed path as user:/proc/21032/fd/51
lxc-start test 20211214182922.774 DEBUG start - start.c:lxc_try_preserve_namespace:140 - Preserved mnt namespace via fd 52 and stashed path as mnt:/proc/21032/fd/52
lxc-start test 20211214182922.775 DEBUG start - start.c:lxc_try_preserve_namespace:140 - Preserved pid namespace via fd 53 and stashed path as pid:/proc/21032/fd/53
lxc-start test 20211214182922.776 DEBUG start - start.c:lxc_try_preserve_namespace:140 - Preserved uts namespace via fd 54 and stashed path as uts:/proc/21032/fd/54
lxc-start test 20211214182922.788 DEBUG start - start.c:lxc_try_preserve_namespace:140 - Preserved ipc namespace via fd 55 and stashed path as ipc:/proc/21032/fd/55
lxc-start test 20211214182922.788 DEBUG conf - conf.c:idmaptool_on_path_and_privileged:3502 - The binary “/usr/bin/newuidmap” does have the setuid bit set
lxc-start test 20211214182922.788 DEBUG conf - conf.c:idmaptool_on_path_and_privileged:3502 - The binary “/usr/bin/newgidmap” does have the setuid bit set
lxc-start test 20211214182922.788 DEBUG conf - conf.c:lxc_map_ids:3587 - Functional newuidmap and newgidmap binary found
lxc-start test 20211214182922.823 DEBUG conf - conf.c:idmaptool_on_path_and_privileged:3502 - The binary “/usr/bin/newuidmap” does have the setuid bit set
lxc-start test 20211214182922.823 DEBUG conf - conf.c:idmaptool_on_path_and_privileged:3502 - The binary “/usr/bin/newgidmap” does have the setuid bit set
lxc-start test 20211214182922.823 DEBUG conf - conf.c:lxc_map_ids:3587 - Functional newuidmap and newgidmap binary found
lxc-start test 20211214182922.850 NOTICE utils - utils.c:lxc_drop_groups:1347 - Dropped supplimentary groups
lxc-start test 20211214182922.855 INFO start - start.c:do_start:1106 - Unshared CLONE_NEWNET
lxc-start test 20211214182922.855 NOTICE utils - utils.c:lxc_drop_groups:1347 - Dropped supplimentary groups
lxc-start test 20211214182922.855 NOTICE utils - utils.c:lxc_switch_uid_gid:1323 - Switched to gid 0
lxc-start test 20211214182922.855 NOTICE utils - utils.c:lxc_switch_uid_gid:1332 - Switched to uid 0
lxc-start test 20211214182922.855 INFO start - start.c:do_start:1206 - Unshared CLONE_NEWCGROUP
lxc-start test 20211214182922.856 DEBUG start - start.c:lxc_try_preserve_namespace:140 - Preserved net namespace via fd 5 and stashed path as net:/proc/21032/fd/5
lxc-start test 20211214182922.856 WARN start - start.c:lxc_spawn:1829 - Operation not permitted - Failed to allocate new network namespace id
lxc-start test 20211214182922.857 DEBUG conf - conf.c:lxc_mount_rootfs:1425 - Mounted rootfs “/var/lib/lxc/test/rootfs” onto “/usr/local/lib/lxc/rootfs” with options “(null)”
lxc-start test 20211214182922.857 INFO conf - conf.c:setup_utsname:866 - Set hostname to “test”
lxc-start test 20211214182922.857 INFO conf - conf.c:mount_autodev:1206 - Preparing “/dev”
lxc-start test 20211214182922.857 DEBUG conf - conf.c:mount_autodev:1238 - Using mount options: size=500000,mode=755
lxc-start test 20211214182922.857 INFO conf - conf.c:mount_autodev:1267 - Prepared “/dev”
lxc-start test 20211214182922.857 DEBUG conf - conf.c:lxc_mount_auto_mounts:733 - Invalid argument - Tried to ensure procfs is unmounted
lxc-start test 20211214182922.857 DEBUG conf - conf.c:lxc_mount_auto_mounts:756 - Invalid argument - Tried to ensure sysfs is unmounted
lxc-start test 20211214182922.857 INFO conf - conf.c:lxc_fill_autodev:1304 - Populating “/dev”
lxc-start test 20211214182922.857 DEBUG conf - conf.c:lxc_fill_autodev:1385 - Bind mounted host device node “/dev/full” to “/usr/local/lib/lxc/rootfs/dev/full”
lxc-start test 20211214182922.857 DEBUG conf - conf.c:lxc_fill_autodev:1385 - Bind mounted host device node “/dev/null” to “/usr/local/lib/lxc/rootfs/dev/null”
lxc-start test 20211214182922.857 DEBUG conf - conf.c:lxc_fill_autodev:1385 - Bind mounted host device node “/dev/random” to “/usr/local/lib/lxc/rootfs/dev/random”
lxc-start test 20211214182922.857 DEBUG conf - conf.c:lxc_fill_autodev:1385 - Bind mounted host device node “/dev/tty” to “/usr/local/lib/lxc/rootfs/dev/tty”
lxc-start test 20211214182922.857 DEBUG conf - conf.c:lxc_fill_autodev:1385 - Bind mounted host device node “/dev/urandom” to “/usr/local/lib/lxc/rootfs/dev/urandom”
lxc-start test 20211214182922.857 DEBUG conf - conf.c:lxc_fill_autodev:1385 - Bind mounted host device node “/dev/zero” to “/usr/local/lib/lxc/rootfs/dev/zero”
lxc-start test 20211214182922.857 INFO conf - conf.c:lxc_fill_autodev:1392 - Populated “/dev”
lxc-start test 20211214182922.857 INFO conf - conf.c:lxc_transient_proc:3757 - Caller’s PID is 1; /proc/self points to 1
lxc-start test 20211214182922.857 DEBUG conf - conf.c:lxc_setup_devpts_child:1682 - No new devpts instance will be mounted since no pts devices are required
lxc-start test 20211214182922.857 INFO conf - conf.c:lxc_setup_ttys:1063 - Finished setting up 0 /dev/tty device(s)
lxc-start test 20211214182922.881 DEBUG conf - conf.c:setup_personality:1898 - Retaining original personality
lxc-start test 20211214182922.881 DEBUG conf - conf.c:capabilities_deny:3190 - Capabilities have been setup
lxc-start test 20211214182922.881 NOTICE conf - conf.c:lxc_setup:4450 - The container “test” is set up
lxc-start test 20211214182922.881 INFO apparmor - lsm/apparmor.c:apparmor_process_label_set_at:1186 - Set AppArmor label to “lxc-container-default-cgns”
lxc-start test 20211214182922.881 INFO apparmor - lsm/apparmor.c:apparmor_process_label_set:1231 - Changed AppArmor profile to lxc-container-default-cgns
lxc-start test 20211214182922.881 DEBUG conf - conf.c:lxc_send_devpts_to_parent:1880 - No devpts file descriptor will be sent since no pts devices are requested
lxc-start test 20211214182922.882 DEBUG start - start.c:lxc_try_preserve_namespace:140 - Preserved cgroup namespace via fd 7 and stashed path as cgroup:/proc/21032/fd/7
lxc-start test 20211214182922.883 INFO terminal - terminal.c:lxc_terminal_setup:1109 - No terminal requested
lxc-start test 20211214182922.883 WARN start - start.c:do_start:1393 - Failed to ajust stdio permissions
lxc-start test 20211214182922.883 NOTICE start - start.c:start:2154 - Exec’ing “/sbin/init”
lxc-start test 20211214182922.883 ERROR start - start.c:start:2157 - No such file or directory - Failed to exec “/sbin/init”
lxc-start test 20211214182922.883 ERROR sync - sync.c:sync_wait:34 - An error occurred in another process (expected sequence number 7)
lxc-start test 20211214182922.883 DEBUG network - network.c:lxc_delete_network:4159 - Deleted network devices
lxc-start test 20211214182922.885 ERROR start - start.c:__lxc_start:2068 - Failed to spawn container “test”
lxc-start test 20211214182922.885 WARN start - start.c:lxc_abort:1044 - No such process - Failed to send SIGKILL to 21036
lxc-start test 20211214182922.886 DEBUG conf - conf.c:idmaptool_on_path_and_privileged:3502 - The binary “/usr/bin/newuidmap” does have the setuid bit set
lxc-start test 20211214182922.886 DEBUG conf - conf.c:idmaptool_on_path_and_privileged:3502 - The binary “/usr/bin/newgidmap” does have the setuid bit set
lxc-start test 20211214182922.886 DEBUG conf - conf.c:lxc_map_ids:3587 - Functional newuidmap and newgidmap binary found
lxc-start test 20211214182922.911 NOTICE utils - utils.c:lxc_drop_groups:1347 - Dropped supplimentary groups
lxc-start test 20211214182922.957 ERROR lxc_start - tools/lxc_start.c:main:306 - The container failed to start
lxc-start test 20211214182922.957 ERROR lxc_start - tools/lxc_start.c:main:312 - Additional information can be obtained by setting the --logfile and --logpriority options
Using the latest version of lxc , not able to start the containers.
Is there any other config/changes needed to use latest versions?