Help with idmap & subuid/subgid please

[Aida]

I looked at these two threads:

[SOLVED] Arch Linux: Containers only run when security.privileged=true?

If I attempt to create and run a container under Arch linux: # lxc launch ubuntu14 archon The container builds but refuses to launch, with these error messages: lxc arc 20190206200354.953 ERROR conf - conf.c:lxc_map_ids:3052 - newuidmap failed to write mapping "": newuidmap 10475 0 1000000 1000000000 lxc arc 20190206200354.954 ERROR start - start.c:lxc_spawn:1727 - Failed to set up id mapping. lxc arc 20190206200354.121 WARN network - network.c:lxc_delete_network_priv:2613 - Invalid…

Container fails to start: newuidmap failed to write mapping "newuidmap: uid range [0-1000000000) -> [1000000-1001000000) not allowed

Last time I had this problem it was solved by creating /etc/subuid and /etc/subgid files with an appropriate root entry. No such luck this time: OS: Arch Linux LXD: 4.19 I created /etc/subuid and /etc/subgid files with this content: root:100000:65536 lxd:100000:65536 I also added the following lines to /etc/lxc/default.conf: lxc.idmap = u 0 100000 65536 lxc.idmap = g 0 100000 65536 which I didn’t do last time. I tried starting the container with and without these lines in /etc/lxc/de…

However didn’t really spot anything there that helped. My Arch linux system is using 5.18.14-arch1-1 #1 SMP PREEMPT_DYNAMIC

I’ve spent two days trying to figure this out and gotten no closer.

I made sure these were set

kernel.unprivileged_userns_clone = 1
user.max_user_namespaces = 256484

and I added:

sudo tee -a /etc/lxc/default.conf <<EOF
lxc.idmap = u 0 100000 65536
lxc.idmap = g 0 100000 65536
EOF

Restarted LXD, still giving me that error.

I tried with:

printf "both 1000 1000" | sudo lxc config set docker-container raw.idmap -

ERROR conf - …/src/lxc/conf.c:lxc_map_ids:3672 - newuidmap failed to write mapping “newuidmap: uid range [1000-1001) → [1000-1001) not allowed”: newuidmap 82353 0 100000 1000 1000 1000 1 1001 101001 64535

# cat /etc/subuid
root:100000:65536
lxd:100000:65536
one:165536:65536
two:231072:65536
three:296608:65536
four:362144:65536

# cat /etc/subgid
root:100000:65536
lxd:100000:65536
one:165536:65536
two:231072:65536
three:296608:65536
four:362144:65536
shared:362145:1