OCI container not booting after rebuild

Hello! Running in Rocky Linux 9.5 (NetworkManager)

incus start calibre-web

Error: Failed to run: /usr/libexec/incus/incusd forkstart calibre-web /var/lib/incus/containers /run/incus/calibre-web/lxc.conf: exit status 1
Try `incus info --show-log calibre-web` for more info

incus info --show-log calibre-web

Name: calibre-web
Description:
Status: STOPPED
Type: container (application)
Arquitectura: x86_64
Creado: 2025/04/29 14:49 CEST
Last Used: 2025/04/29 14:57 CEST

Registro:

lxc calibre-web 20250429125735.834 ERROR    conf - ../src/lxc/conf.c:setup_sysctl_parameters:3126 - Invalid argument - Failed to setup sysctl parameters net.ipv4.ping_group_range to 0 4294967295
lxc calibre-web 20250429125735.834 ERROR    conf - ../src/lxc/conf.c:lxc_setup:4011 - Failed to setup sysctl parameters
lxc calibre-web 20250429125735.834 ERROR    start - ../src/lxc/start.c:do_start:1273 - Failed to setup container "calibre-web"
lxc calibre-web 20250429125735.834 ERROR    sync - ../src/lxc/sync.c:sync_wait:34 - An error occurred in another process (expected sequence number 4)
lxc calibre-web 20250429125735.840 WARN     network - ../src/lxc/network.c:lxc_delete_network_priv:3674 - Failed to rename interface with index 0 from "eth0" to its initial name "vethe7fb74d1"
lxc calibre-web 20250429125735.840 ERROR    lxccontainer - ../src/lxc/lxccontainer.c:wait_on_daemonized_start:837 - Received container state "ABORTING" instead of "RUNNING"
lxc calibre-web 20250429125735.840 ERROR    start - ../src/lxc/start.c:__lxc_start:2114 - Failed to spawn container "calibre-web"
lxc calibre-web 20250429125735.840 WARN     start - ../src/lxc/start.c:lxc_abort:1037 - No existe el proceso - Failed to send SIGKILL via pidfd 18 for process 142982
lxc 20250429125735.921 ERROR    af_unix - ../src/lxc/af_unix.c:lxc_abstract_unix_recv_fds_iov:218 - Conexión reinicializada por la máquina remota - Failed to receive response
lxc 20250429125735.921 ERROR    commands - ../src/lxc/commands.c:lxc_cmd_rsp_recv_fds:128 - Failed to receive file descriptors for command "get_init_pid"

Incus config show calibre-web

architecture: x86_64
config:
environment.HOME: /root
environment.LANG: en_US.UTF-8
environment.LANGUAGE: en_US.UTF-8
environment.PATH: /lsiopy/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
environment.PGID: "1000"
environment.PUID: "1000"
environment.S6_CMD_WAIT_FOR_SERVICES_MAXTIME: "0"
environment.S6_STAGE2_HOOK: /docker-mods
environment.S6_VERBOSITY: "1"
environment.TERM: xterm
environment.TZ: Europe/Madrid
environment.VIRTUAL_ENV: /lsiopy
image.architecture: x86_64
image.description: docker.io/crocodilestick/calibre-web-automated (OCI)
image.id: crocodilestick/calibre-web-automated:latest
image.type: oci
oci.cwd: /
oci.entrypoint: /init
oci.gid: "0"
oci.uid: "0"
security.privileged: "true"
volatile.base_image: e602e73b6fd50c3ba389b38acb701205976a05b650898f615f93bd7e3537a827
volatile.cloud-init.instance-id: f8dfe642-5a17-44be-9d08-aa828d0b4da9
volatile.container.oci: "true"
volatile.eth0.hwaddr: 10:66:6a:de:e0:12
volatile.idmap.base: "0"
volatile.idmap.current: '[]'
volatile.idmap.next: '[]'
volatile.last_state.idmap: '[]'
volatile.last_state.power: STOPPED
volatile.last_state.ready: "false"
volatile.uuid: c9923c7c-d5e0-4df4-a55c-d6ad9b9df664
volatile.uuid.generation: c9923c7c-d5e0-4df4-a55c-d6ad9b9df664
devices:
conf:
path: /config
source: /mnt/main/conf/calibre-web
type: disk
ingest:
path: /cwa-book-ingest
source: /mnt/storage/data/media/calibre/para-importar
type: disk
library:
path: /calibre-library
source: /mnt/storage/data/media/calibre/calibre-library
type: disk
ephemeral: false
profiles:
- default
stateful: false
description: ""

It was working before rebuild. Any Idea?

What version of Incus is that?

incus --version
6.11

uname -a
Linux myserver 5.14.0-503.38.1.el9_5.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Apr 16 16:38:39 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

There’s a fix for that in Incus 6.12.
Basically unprivileged ping group in kernels prior to 6.6 was mishandled. We now have logic to skip this on those old kernels.

Thank you Stéphane. Now waiting for the maintainer of RHL9 package to update to 6.12.