Lxc-execute doesnt work

MTL · September 16, 2021, 3:40pm

lxc-execute does not work, but with the same config file lxc-create, lxc-start, lxc-attach works.

config file:
lxc.idmap = u 0 231072 1002
lxc.idmap = g 0 231072 1003
lxc.idmap = u 1002 1002 1
lxc.idmap = g 1003 1003 1
lxc idmap = u 1004 232075 64533
lxc.idmap = g 1005 232076 64532
lxc.console.path = none
lxc.mount.auto = proc:rw sys:mixed cgroup:mixed
lxc.mount.entry = /media/lxc_poc/lxc_app_binaries /var/lib/lxc/test/media/ none ro,bind,0 0

Tried below approaches…
First approach:

Created config file
Executed lxc-create -n test -f config -P /var/lib/lxc -t none
Executed lxc-execute-n test -t config – /usr/lib/app_1

Second approach:

Created config file
lxc-execute-n test -t config – /usr/lib/app_1

Both the approaches didnt work

Lxc version is : 3.0.2[built and installed manually ]

Query:

Should lxc-execute be run on the already created container.
Because , lxc-execute(1) - Linux manual page says lxc-execute will setup the container according to the configuration previously defined with the lxc-create
I want to mount a folder from host to inside the container and access mounted folder to run the binary. Without attaching to the container how can i get into mounted directories from the container
init.lxc.static binary should be explicitly installed or is the the part make and make install?

Exact procedure to execute lxc-execute is not known

Error logs:

lxc-execute test 20210916154258.313 INFO lxc-execute test 20210916154258.313 INFO lxc-execute test 20210916154258.313 INFO lxc-execute test 20210916154258.313 INFO lxc-execute test 20210916154258.313 INFO lxc-execute test 20210916154258.313 INFO lxc-execute test 20210916154258.313 INFO lxc-execute test 20210916154258.313 INFO lxc-execute test 20210916154258.313 INFO lxc-execute test 20210916154258.313 INFO lxc-execute test 20210916154258.313 ERROR lxc-execute test 20210916154258.313 ERROR lxc-execute test 20210916154258.314 DEBUG lxc-execute test 20210916154258.314 INFO lxc-execute test 20210916154258.314 INFO lxc-execute test 20210916154258.314 INFO lxc-execute test 20210916154258.314 INFO lxc-execute test 20210916154258.314 INFO lxc-execute test 20210916154258.314 DEBUG lxc-execute test 20210916154258.314 DEBUG lxc-execute test 20210916154258.314 DEBUG lxc-execute test 20210916154258.314 DEBUG lxc-execute test 20210916154258.314 DEBUG lxc-execute test 20210916154258.314 DEBUG lxc-execute test 20210916154258.314 DEBUG lxc-execute test 20210916154258.314 DEBUG lxc-execute test 20210916154258.318 INFO lxc-execute test 20210916154258.318 DEBUG lxc-execute test 20210916154258.318 DEBUG lxc-execute test 20210916154258.318 DEBUG lxc-execute test 20210916154258.322 DEBUG lxc-execute test 20210916154258.322 ERROR lxc-execute test 20210916154258.322 NOTICE lxc-execute test 20210916154258.322 NOTICE lxc-execute test 20210916154258.322 NOTICE lxc-execute test 20210916154258.322 INFO lxc-execute test 20210916154258.323 INFO lxc-execute test 20210916154258.323 INFO lxc-execute test 20210916154258.323 ERROR lxc-execute test 20210916154258.323 ERROR lxc-execute test 20210916154258.323 ERROR lxc-execute test 20210916154258.323 DEBUG lxc-execute test 20210916154258.323 INFO lxc-execute test 20210916154258.323 ERROR lxc-execute test 20210916154258.323 INFO lxc-execute test 20210916154258.323 DEBUG lxc-execute test 20210916154258.323 DEBUG lxc-execute test 20210916154258.323 DEBUG lxc-execute test 20210916154258.332 INFO lxc-execute test 20210916154258.374 ERROR utils - utils.c:get_rundir:273 - XDG_RUNTIME_DIR isn’t set in the environment.
confile - confile.c:set_config_idmaps:1542 - Read uid map: type u nsid 0 hostid 231072 range 1002
confile - confile.c:set_config_idmaps:1542 - Read uid map: type g nsid 0 hostid 231072 range 1003
confile - confile.c:set_config_idmaps:1542 - Read uid map: type u nsid 1002 hostid 1002 range 1
confile - confile.c:set_config_idmaps:1542 - Read uid map: type g nsid 1003 hostid 1003 range 1
confile - confile.c:set_config_idmaps:1542 - Read uid map: type g nsid 1005 hostid 232076 range 64532
lsm - lsm/lsm.c:lsm_init:47 - LSM security driver nop
utils - utils.c:get_rundir:273 - XDG_RUNTIME_DIR isn’t set in the environment.
terminal - terminal.c:lxc_terminal_setup:927 - No terminal requested
start - start.c:lxc_init:866 - Container “test” is initialized
cgfsng - cgroups/cgfsng.c:create_path_for_hierarchy:1198 - The cgroup “/sys/fs/cgroup/systemd/user/appfw/0/lxc/test” already existed
cgfsng - cgroups/cgfsng.c:cgfsng_create:1287 - Failed to create cgroup “/sys/fs/cgroup/systemd/user/appfw/0/lxc/test”
cgfsng - cgroups/cgfsng.c:cg_legacy_handle_cpuset_hierarchy:613 - “cgroup.clone_children” was already set to “1”
start - start.c:lxc_spawn:1657 - Cloned CLONE_NEWUSER
start - start.c:lxc_spawn:1657 - Cloned CLONE_NEWNS
start - start.c:lxc_spawn:1657 - Cloned CLONE_NEWPID
start - start.c:lxc_spawn:1657 - Cloned CLONE_NEWUTS
start - start.c:lxc_spawn:1657 - Cloned CLONE_NEWIPC
start - start.c:lxc_try_preserve_namespaces:205 - Preserved user namespace via fd 10
start - start.c:lxc_try_preserve_namespaces:205 - Preserved mnt namespace via fd 11
start - start.c:lxc_try_preserve_namespaces:205 - Preserved pid namespace via fd 12
start - start.c:lxc_try_preserve_namespaces:205 - Preserved uts namespace via fd 13
start - start.c:lxc_try_preserve_namespaces:205 - Preserved ipc namespace via fd 14
conf - conf.c:idmaptool_on_path_and_privileged:2836 - The binary “/usr/bin/newuidmap” does have the setuid bit set
conf - conf.c:idmaptool_on_path_and_privileged:2836 - The binary “/usr/bin/newgidmap” does have the setuid bit set
conf - conf.c:lxc_map_ids:2928 - Functional newuidmap and newgidmap binary found
start - start.c:do_start:1105 - Unshared CLONE_NEWNET
conf - conf.c:idmaptool_on_path_and_privileged:2836 - The binary “/usr/bin/newuidmap” does have the setuid bit set
conf - conf.c:idmaptool_on_path_and_privileged:2836 - The binary “/usr/bin/newgidmap” does have the setuid bit set
conf - conf.c:lxc_map_ids:2928 - Functional newuidmap and newgidmap binary found
start - start.c:lxc_spawn:1711 - Preserved net namespace via fd 6
start - start.c:lxc_spawn:1716 - Operation not permitted - Failed to allocate new network namespace id
utils - utils.c:lxc_switch_uid_gid:2183 - Switched to gid 0.
utils - utils.c:lxc_switch_uid_gid:2189 - Switched to uid 0.
utils - utils.c:lxc_setgroups:2201 - Dropped additional groups.
start - start.c:do_start:1213 - Unshared CLONE_NEWCGROUP
conf - conf.c:mount_autodev:1129 - Preparing “/dev”
conf - conf.c:mount_autodev:1176 - Prepared “/dev”
conf - conf.c:lxc_setup:3574 - No such file or directory - Unable to open lxc.init.static
start - start.c:do_start:1234 - Failed to setup container “test”
sync - sync.c:__sync_wait:59 - An error occurred in another process (expected sequence number 5)
network - network.c:lxc_delete_network:3164 - Deleted network devices
utils - utils.c:get_rundir:273 - XDG_RUNTIME_DIR isn’t set in the environment.
start - start.c:__lxc_start:1910 - Failed to spawn container “test”
utils - utils.c:get_rundir:273 - XDG_RUNTIME_DIR isn’t set in the environment.
conf - conf.c:idmaptool_on_path_and_privileged:2836 - The binary “/usr/bin/newuidmap” does have the setuid bit set
conf - conf.c:idmaptool_on_path_and_privileged:2836 - The binary “/usr/bin/newgidmap” does have the setuid bit set
conf - conf.c:lxc_map_ids:2928 - Functional newuidmap and newgidmap binary found
utils - utils.c:get_rundir:273 - XDG_RUNTIME_DIR isn’t set in the environment.
lxc_execute - tools/lxc_execute.c:main:240 - Failed run an application inside container

MTL · September 17, 2021, 7:05pm

Is this a known issue?

MTL · September 21, 2021, 4:41pm

Hi @brauner @stgraber
Could you please provide your feedback on this topic

stgraber · September 21, 2021, 6:08pm

Please test on a current LXC 4.0.x build. LXC 3.0.x is maintained only for security issues so even if this is determined to be a bug, it wouldn’t get fixed in that release.

MTL · December 22, 2021, 9:37am

Hi,

This time i used LXC 4.0.6 version but still got the below error

lxc-execute -n test -f config – pwd

lxc-execute: test: conf.c: lxc_setup: 3354 No such file or directory - Unable to open lxc.init.static
lxc-execute: test: start.c: do_start: 1218 Failed to setup container “test”
lxc-execute: test: sync.c: __sync_wait: 36 An error occurred in another process (expected sequence number 5)
lxc-execute: test: start.c: __lxc_start: 1999 Failed to spawn container “test”
lxc-execute: test: tools/lxc_execute.c: main: 226 Failed run an application inside container

init.lxc and init.lxc.static are available inside /usr/sbin