Indeed, there is one folder level which looks different (0100) which is the container level- but that one was created by lxc. So, what should it be? Is 0100 the normal/expected permission, or should it be 0711 or ‘more’ (during normal operation? or for the time of the shift?).
I changed it to 711 but, as soon as I try to start the container, lxc reverts it to 0100, and the container still fails to start with the same denied permission on /sbin/init.
Also, the permissions on /var/snap/lxd/common/lxd/storage-pools are slightly different from the other levels, that folder was created by lxc. Are these perms the right ones?
Here are the perms on the various folders:
drwxr-xr-x 1 1000000 1000000 122 /var/snap/lxd/common/lxd/storage-pools/default/containers/testcontainer/rootfs/
d–x------ 1 1000000 root 78 /var/snap/lxd/common/lxd/storage-pools/default/containers/testcontainer/
drwxr-xr-x 1 root root 44 /var/snap/lxd/common/lxd/storage-pools/default/containers/
drwxr-xr-x 1 root root 116 /var/snap/lxd/common/lxd/storage-pools/default
drwx–x--x 5 root root 4096 /var/snap/lxd/common/lxd/storage-pools
drwxr-xr-x 15 root root 4096 /var/snap/lxd/common/lxd
drwxr-xr-x 7 root root 4096 /var/snap/lxd/common
drwxr-xr-x 4 root root 4096 /var/snap/lxd
drwxr-xr-x 4 root root 4096 /var/snap
drwxr-xr-x 14 root root 4096 /var
drwxr-xr-x 26 root root 4096 /