Unable to start container after upgrade to Debian Bullseye

After upgrading from Debian Buster to Debian Bullseye, I’m no longer able to start any container. I’ve tried using bullseye, buster, and ubuntu20.04 containers and all have similar results. I’m running lxd from snapd (snap installed via apt, not compiled by me) with a generic, default config.

Much searching here and elsewhere has provided education but no solutions. Any suggestions appreciated.

Here’s some relevant and hopefully helpful info:

cgroup mount info

# grep cgroup /proc/self/mountinfo
31 21 0:26 / /sys/fs/cgroup rw,nosuid,nodev,noexec,relatime shared:9 - cgroup2 cgroup2 rw
623 31 0:42 / /sys/fs/cgroup/net_cls rw,relatime shared:352 - cgroup none rw,net_cls

lxc info

# lxc info
config: {}
api_extensions:
- storage_zfs_remove_snapshots
- container_host_shutdown_timeout
- container_stop_priority
- container_syscall_filtering
- auth_pki
- container_last_used_at
- etag
- patch
- usb_devices
- https_allowed_credentials
- image_compression_algorithm
- directory_manipulation
- container_cpu_time
- storage_zfs_use_refquota
- storage_lvm_mount_options
- network
- profile_usedby
- container_push
- container_exec_recording
- certificate_update
- container_exec_signal_handling
- gpu_devices
- container_image_properties
- migration_progress
- id_map
- network_firewall_filtering
- network_routes
- storage
- file_delete
- file_append
- network_dhcp_expiry
- storage_lvm_vg_rename
- storage_lvm_thinpool_rename
- network_vlan
- image_create_aliases
- container_stateless_copy
- container_only_migration
- storage_zfs_clone_copy
- unix_device_rename
- storage_lvm_use_thinpool
- storage_rsync_bwlimit
- network_vxlan_interface
- storage_btrfs_mount_options
- entity_description
- image_force_refresh
- storage_lvm_lv_resizing
- id_map_base
- file_symlinks
- container_push_target
- network_vlan_physical
- storage_images_delete
- container_edit_metadata
- container_snapshot_stateful_migration
- storage_driver_ceph
- storage_ceph_user_name
- resource_limits
- storage_volatile_initial_source
- storage_ceph_force_osd_reuse
- storage_block_filesystem_btrfs
- resources
- kernel_limits
- storage_api_volume_rename
- macaroon_authentication
- network_sriov
- console
- restrict_devlxd
- migration_pre_copy
- infiniband
- maas_network
- devlxd_events
- proxy
- network_dhcp_gateway
- file_get_symlink
- network_leases
- unix_device_hotplug
- storage_api_local_volume_handling
- operation_description
- clustering
- event_lifecycle
- storage_api_remote_volume_handling
- nvidia_runtime
- container_mount_propagation
- container_backup
- devlxd_images
- container_local_cross_pool_handling
- proxy_unix
- proxy_udp
- clustering_join
- proxy_tcp_udp_multi_port_handling
- network_state
- proxy_unix_dac_properties
- container_protection_delete
- unix_priv_drop
- pprof_http
- proxy_haproxy_protocol
- network_hwaddr
- proxy_nat
- network_nat_order
- container_full
- candid_authentication
- backup_compression
- candid_config
- nvidia_runtime_config
- storage_api_volume_snapshots
- storage_unmapped
- projects
- candid_config_key
- network_vxlan_ttl
- container_incremental_copy
- usb_optional_vendorid
- snapshot_scheduling
- snapshot_schedule_aliases
- container_copy_project
- clustering_server_address
- clustering_image_replication
- container_protection_shift
- snapshot_expiry
- container_backup_override_pool
- snapshot_expiry_creation
- network_leases_location
- resources_cpu_socket
- resources_gpu
- resources_numa
- kernel_features
- id_map_current
- event_location
- storage_api_remote_volume_snapshots
- network_nat_address
- container_nic_routes
- rbac
- cluster_internal_copy
- seccomp_notify
- lxc_features
- container_nic_ipvlan
- network_vlan_sriov
- storage_cephfs
- container_nic_ipfilter
- resources_v2
- container_exec_user_group_cwd
- container_syscall_intercept
- container_disk_shift
- storage_shifted
- resources_infiniband
- daemon_storage
- instances
- image_types
- resources_disk_sata
- clustering_roles
- images_expiry
- resources_network_firmware
- backup_compression_algorithm
- ceph_data_pool_name
- container_syscall_intercept_mount
- compression_squashfs
- container_raw_mount
- container_nic_routed
- container_syscall_intercept_mount_fuse
- container_disk_ceph
- virtual-machines
- image_profiles
- clustering_architecture
- resources_disk_id
- storage_lvm_stripes
- vm_boot_priority
- unix_hotplug_devices
- api_filtering
- instance_nic_network
- clustering_sizing
- firewall_driver
- projects_limits
- container_syscall_intercept_hugetlbfs
- limits_hugepages
- container_nic_routed_gateway
- projects_restrictions
- custom_volume_snapshot_expiry
- volume_snapshot_scheduling
- trust_ca_certificates
- snapshot_disk_usage
- clustering_edit_roles
- container_nic_routed_host_address
- container_nic_ipvlan_gateway
- resources_usb_pci
- resources_cpu_threads_numa
- resources_cpu_core_die
- api_os
- container_nic_routed_host_table
- container_nic_ipvlan_host_table
- container_nic_ipvlan_mode
- resources_system
- images_push_relay
- network_dns_search
- container_nic_routed_limits
- instance_nic_bridged_vlan
- network_state_bond_bridge
- usedby_consistency
- custom_block_volumes
- clustering_failure_domains
- resources_gpu_mdev
- console_vga_type
- projects_limits_disk
- network_type_macvlan
- network_type_sriov
- container_syscall_intercept_bpf_devices
- network_type_ovn
- projects_networks
- projects_networks_restricted_uplinks
- custom_volume_backup
- backup_override_name
- storage_rsync_compression
- network_type_physical
- network_ovn_external_subnets
- network_ovn_nat
- network_ovn_external_routes_remove
- tpm_device_type
- storage_zfs_clone_copy_rebase
- gpu_mdev
- resources_pci_iommu
- resources_network_usb
- resources_disk_address
- network_physical_ovn_ingress_mode
- network_ovn_dhcp
- network_physical_routes_anycast
- projects_limits_instances
- network_state_vlan
- instance_nic_bridged_port_isolation
- instance_bulk_state_change
- network_gvrp
- instance_pool_move
- gpu_sriov
- pci_device_type
- storage_volume_state
- network_acl
- migration_stateful
- disk_state_quota
- storage_ceph_features
- projects_compression
- projects_images_remote_cache_expiry
- certificate_project
- network_ovn_acl
- projects_images_auto_update
- projects_restricted_cluster_target
- images_default_architecture
- network_ovn_acl_defaults
- gpu_mig
- project_usage
- network_bridge_acl
- warnings
- projects_restricted_backups_and_snapshots
- clustering_join_token
- clustering_description
- server_trusted_proxy
- clustering_update_cert
- storage_api_project
- server_instance_driver_operational
- server_supported_storage_drivers
- event_lifecycle_requestor_address
- resources_gpu_usb
- clustering_evacuation
- network_ovn_nat_address
- network_bgp
- network_forward
- custom_volume_refresh
- network_counters_errors_dropped
- metrics
- image_source_project
- clustering_config
- network_peer
- linux_sysctl
- network_dns
- ovn_nic_acceleration
api_status: stable
api_version: "1.0"
auth: trusted
public: false
auth_methods:
- tls
environment:
  addresses: []
  architectures:
  - x86_64
  - i686
  certificate: |
    -----BEGIN CERTIFICATE-----
    MIICDTCCAZKgAwIBAgIQbPyOduSvSwPXGqll8uwIjTAKBggqhkjOPQQDAzA3MRww
    GgYDVQQKExNsaW51eGNvbnRhaW5lcnMub3JnMRcwFQYDVQQDDA5yb290QGFzbWl0
    aC1ocDAeFw0yMTEyMDEyMDU0MjVaFw0zMTExMjkyMDU0MjVaMDcxHDAaBgNVBAoT
    E2xpbnV4Y29udGFpbmVycy5vcmcxFzAVBgNVBAMMDnJvb3RAYXNtaXRoLWhwMHYw
    EAYHKoZIzj0CAQYFK4EEACIDYgAEDXG/w0gnTXxmExPqX33tOatWaC+u9djyDAdU
    xknhHPeofIQJr3Nu6v5zewMQRXD6hepv1XrKDOvyDKTDaYb7EMxFgKV1hKPLcJRF
    d4g4D9hmrGTXthQ+S0e1j+RMLwCRo2MwYTAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0l
    BAwwCgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADAsBgNVHREEJTAjgglhc21pdGgt
    aHCHBH8AAAGHEAAAAAAAAAAAAAAAAAAAAAEwCgYIKoZIzj0EAwMDaQAwZgIxAJaT
    2dWWLwRlPHSWK8kF07B4SZG7XhC/tDChHb7QXpB8xb8ywZ1Ef3ELfnTvxsYIQwIx
    ANkd4y2B0dC0NoKk6+oVIG1f+zz8FWU9mSqflB0Y3MLH9hBqix6Lpc4sgrc7ucUb
    pQ==
    -----END CERTIFICATE-----
  certificate_fingerprint: b491fa645a5354f9b5d9f3ee8ddd56c46ece0bc28d6b0daffbd871ea32593425
  driver: qemu | lxc
  driver_version: 6.1.0 | 4.0.11
  firewall: nftables
  kernel: Linux
  kernel_architecture: x86_64
  kernel_features:
    netnsid_getifaddrs: "true"
    seccomp_listener: "true"
    seccomp_listener_continue: "true"
    shiftfs: "false"
    uevent_injection: "true"
    unpriv_fscaps: "true"
  kernel_version: 5.10.0-9-amd64
  lxc_features:
    cgroup2: "true"
    core_scheduling: "true"
    devpts_fd: "true"
    idmapped_mounts_v2: "true"
    mount_injection_file: "true"
    network_gateway_device_route: "true"
    network_ipvlan: "true"
    network_l2proxy: "true"
    network_phys_macvlan_mtu: "true"
    network_veth_router: "true"
    pidfd: "true"
    seccomp_allow_deny_syntax: "true"
    seccomp_notify: "true"
    seccomp_proxy_send_notify_fd: "true"
  os_name: Debian GNU/Linux
  os_version: "11"
  project: default
  server: lxd
  server_clustered: false
  server_name: asmith-hp
  server_pid: 24611
  server_version: "4.20"
  storage: btrfs
  storage_version: 5.4.1
  storage_supported_drivers:
  - name: dir
    version: "1"
    remote: false
  - name: lvm
    version: 2.03.07(2) (2019-11-30) / 1.02.167 (2019-11-30) / 4.43.0
    remote: false
  - name: ceph
    version: 15.2.14
    remote: true
  - name: btrfs
    version: 5.4.1
    remote: false
  - name: cephfs
    version: 15.2.14
    remote: true

lxc console log

# lxc config set plex raw.lxc=lxc.log.level=trace
# lxc start plex
# lxc console --show-log plex          

Console log:

Failed to mount cgroup at /sys/fs/cgroup/systemd: Operation not permitted
[!!!!!!] Failed to mount API filesystems.
Exiting PID 1...

lxc trace log

# lxc info --show-log plex  
Name: plex
Status: STOPPED
Type: container
Architecture: x86_64
Created: 2021/12/01 13:39 PST
Last Used: 2021/12/01 16:34 PST

Log:

lxc plex 20211202003430.920 TRACE    commands - commands.c:lxc_cmd:509 - Connection refused - Command "get_state" failed to connect command socket
lxc plex 20211202003430.920 TRACE    start - start.c:lxc_init_handler:741 - Created anonymous pair {3,7} of unix sockets
lxc plex 20211202003430.921 TRACE    commands - commands.c:lxc_server_init:2069 - Created abstract unix socket "/var/snap/lxd/common/lxd/containers/plex/command"
lxc plex 20211202003430.921 TRACE    start - start.c:lxc_init_handler:757 - Unix domain socket 9 for command server is ready
lxc plex 20211202003430.922 INFO     lxccontainer - lxccontainer.c:do_lxcapi_start:987 - Set process title to [lxc monitor] /var/snap/lxd/common/lxd/containers plex
lxc plex 20211202003430.922 INFO     start - start.c:lxc_check_inherited:328 - Closed inherited fd 4
lxc plex 20211202003430.922 INFO     start - start.c:lxc_check_inherited:328 - Closed inherited fd 5
lxc plex 20211202003430.922 INFO     start - start.c:lxc_check_inherited:328 - Closed inherited fd 6
lxc plex 20211202003430.922 INFO     start - start.c:lxc_check_inherited:328 - Closed inherited fd 15
lxc plex 20211202003430.922 TRACE    start - start.c:lxc_start:2188 - Doing lxc_start
lxc plex 20211202003430.923 INFO     lsm - lsm/lsm.c:lsm_init_static:38 - Initialized LSM security driver AppArmor
lxc plex 20211202003430.923 TRACE    start - start.c:lxc_init:781 - Initialized LSM
lxc plex 20211202003430.923 TRACE    start - start.c:lxc_serve_state_clients:486 - Set container state to STARTING
lxc plex 20211202003430.923 TRACE    start - start.c:lxc_serve_state_clients:489 - No state clients registered
lxc plex 20211202003430.923 DEBUG    lxccontainer - lxccontainer.c:wait_on_daemonized_start:848 - First child 66042 exited
lxc plex 20211202003430.923 TRACE    start - start.c:lxc_init:787 - Set container state to "STARTING"
lxc plex 20211202003430.923 TRACE    start - start.c:lxc_init:843 - Set environment variables
lxc plex 20211202003430.923 INFO     conf - conf.c:run_script_argv:340 - Executing script "/proc/24611/exe callhook /var/snap/lxd/common/lxd "default" "plex" start" for container "plex"
lxc plex 20211202003430.923 TRACE    conf - conf.c:run_script_argv:383 - Set environment variable: LXC_HOOK_TYPE=pre-start
lxc plex 20211202003430.923 TRACE    conf - conf.c:run_script_argv:388 - Set environment variable: LXC_HOOK_SECTION=lxc
lxc plex 20211202003431.106 TRACE    start - start.c:lxc_init:848 - Ran pre-start hooks
lxc plex 20211202003431.107 TRACE    start - start.c:setup_signal_fd:373 - Created signal file descriptor 5
lxc plex 20211202003431.107 TRACE    start - start.c:lxc_init:861 - Set up signal fd
lxc plex 20211202003431.109 TRACE    cgfsng - cgroups/cgfsng.c:cgroup_hierarchy_add:456 - Adding cgroup hierarchy mounted at net_cls and base cgroup (null)
lxc plex 20211202003431.109 TRACE    cgfsng - cgroups/cgfsng.c:cgroup_hierarchy_add:459 - The hierarchy contains the net_cls controller
lxc plex 20211202003431.110 TRACE    cgfsng - cgroups/cgfsng.c:cgroup_hierarchy_add:456 - Adding cgroup hierarchy mounted at  and base cgroup (null)
lxc plex 20211202003431.111 TRACE    cgfsng - cgroups/cgfsng.c:cgroup_hierarchy_add:459 - The hierarchy contains the cpuset controller
lxc plex 20211202003431.111 TRACE    cgfsng - cgroups/cgfsng.c:cgroup_hierarchy_add:459 - The hierarchy contains the cpu controller
lxc plex 20211202003431.111 TRACE    cgfsng - cgroups/cgfsng.c:cgroup_hierarchy_add:459 - The hierarchy contains the io controller
lxc plex 20211202003431.111 TRACE    cgfsng - cgroups/cgfsng.c:cgroup_hierarchy_add:459 - The hierarchy contains the memory controller
lxc plex 20211202003431.111 TRACE    cgfsng - cgroups/cgfsng.c:cgroup_hierarchy_add:459 - The hierarchy contains the hugetlb controller
lxc plex 20211202003431.111 TRACE    cgfsng - cgroups/cgfsng.c:cgroup_hierarchy_add:459 - The hierarchy contains the pids controller
lxc plex 20211202003431.111 TRACE    cgfsng - cgroups/cgfsng.c:cgroup_hierarchy_add:459 - The hierarchy contains the rdma controller
lxc plex 20211202003431.111 TRACE    cgroup - cgroups/cgroup.c:cgroup_init:40 - Initialized cgroup driver cgfsng
lxc plex 20211202003431.112 TRACE    cgroup - cgroups/cgroup.c:cgroup_init:45 - Hybrid cgroup layout
lxc plex 20211202003431.112 TRACE    start - start.c:lxc_init:868 - Initialized cgroup driver
lxc plex 20211202003431.114 DEBUG    seccomp - seccomp.c:parse_config_v2:656 - Host native arch is [3221225534]
lxc plex 20211202003431.115 TRACE    seccomp - seccomp.c:get_new_ctx:470 - Added arch 2 to main seccomp context
lxc plex 20211202003431.115 TRACE    seccomp - seccomp.c:get_new_ctx:478 - Removed native arch from main seccomp context
lxc plex 20211202003431.115 TRACE    seccomp - seccomp.c:get_new_ctx:470 - Added arch 3 to main seccomp context
lxc plex 20211202003431.115 TRACE    seccomp - seccomp.c:get_new_ctx:478 - Removed native arch from main seccomp context
lxc plex 20211202003431.115 TRACE    seccomp - seccomp.c:get_new_ctx:483 - Arch 4 already present in main seccomp context
lxc plex 20211202003431.116 INFO     seccomp - seccomp.c:parse_config_v2:807 - Processing "[all]"
lxc plex 20211202003431.116 INFO     seccomp - seccomp.c:parse_config_v2:807 - Processing "reject_force_umount  # comment this to allow umount -f;  not recommended"
lxc plex 20211202003431.116 INFO     seccomp - seccomp.c:do_resolve_add_rule:524 - Set seccomp rule to reject force umounts
lxc plex 20211202003431.117 INFO     seccomp - seccomp.c:do_resolve_add_rule:524 - Set seccomp rule to reject force umounts
lxc plex 20211202003431.117 INFO     seccomp - seccomp.c:do_resolve_add_rule:524 - Set seccomp rule to reject force umounts
lxc plex 20211202003431.118 INFO     seccomp - seccomp.c:parse_config_v2:807 - Processing "[all]"
lxc plex 20211202003431.118 INFO     seccomp - seccomp.c:parse_config_v2:807 - Processing "kexec_load errno 38"
lxc plex 20211202003431.118 INFO     seccomp - seccomp.c:do_resolve_add_rule:564 - Adding native rule for syscall[246:kexec_load] action[327718:errno] arch[0]
lxc plex 20211202003431.118 INFO     seccomp - seccomp.c:do_resolve_add_rule:564 - Adding compat rule for syscall[246:kexec_load] action[327718:errno] arch[1073741827]
lxc plex 20211202003431.119 INFO     seccomp - seccomp.c:do_resolve_add_rule:564 - Adding compat rule for syscall[246:kexec_load] action[327718:errno] arch[1073741886]
lxc plex 20211202003431.119 INFO     seccomp - seccomp.c:parse_config_v2:807 - Processing "open_by_handle_at errno 38"
lxc plex 20211202003431.119 INFO     seccomp - seccomp.c:do_resolve_add_rule:564 - Adding native rule for syscall[304:open_by_handle_at] action[327718:errno] arch[0]
lxc plex 20211202003431.119 INFO     seccomp - seccomp.c:do_resolve_add_rule:564 - Adding compat rule for syscall[304:open_by_handle_at] action[327718:errno] arch[1073741827]
lxc plex 20211202003431.119 INFO     seccomp - seccomp.c:do_resolve_add_rule:564 - Adding compat rule for syscall[304:open_by_handle_at] action[327718:errno] arch[1073741886]
lxc plex 20211202003431.120 INFO     seccomp - seccomp.c:parse_config_v2:807 - Processing "init_module errno 38"
lxc plex 20211202003431.120 INFO     seccomp - seccomp.c:do_resolve_add_rule:564 - Adding native rule for syscall[175:init_module] action[327718:errno] arch[0]
lxc plex 20211202003431.120 INFO     seccomp - seccomp.c:do_resolve_add_rule:564 - Adding compat rule for syscall[175:init_module] action[327718:errno] arch[1073741827]
lxc plex 20211202003431.121 INFO     seccomp - seccomp.c:do_resolve_add_rule:564 - Adding compat rule for syscall[175:init_module] action[327718:errno] arch[1073741886]
lxc plex 20211202003431.121 INFO     seccomp - seccomp.c:parse_config_v2:807 - Processing "finit_module errno 38"
lxc plex 20211202003431.121 INFO     seccomp - seccomp.c:do_resolve_add_rule:564 - Adding native rule for syscall[313:finit_module] action[327718:errno] arch[0]
lxc plex 20211202003431.121 INFO     seccomp - seccomp.c:do_resolve_add_rule:564 - Adding compat rule for syscall[313:finit_module] action[327718:errno] arch[1073741827]
lxc plex 20211202003431.121 INFO     seccomp - seccomp.c:do_resolve_add_rule:564 - Adding compat rule for syscall[313:finit_module] action[327718:errno] arch[1073741886]
lxc plex 20211202003431.122 INFO     seccomp - seccomp.c:parse_config_v2:807 - Processing "delete_module errno 38"
lxc plex 20211202003431.122 INFO     seccomp - seccomp.c:do_resolve_add_rule:564 - Adding native rule for syscall[176:delete_module] action[327718:errno] arch[0]
lxc plex 20211202003431.122 INFO     seccomp - seccomp.c:do_resolve_add_rule:564 - Adding compat rule for syscall[176:delete_module] action[327718:errno] arch[1073741827]
lxc plex 20211202003431.122 INFO     seccomp - seccomp.c:do_resolve_add_rule:564 - Adding compat rule for syscall[176:delete_module] action[327718:errno] arch[1073741886]
lxc plex 20211202003431.122 INFO     seccomp - seccomp.c:parse_config_v2:1017 - Merging compat seccomp contexts into main context
lxc plex 20211202003431.123 TRACE    seccomp - seccomp.c:parse_config_v2:1027 - Merged first compat seccomp context into main context
lxc plex 20211202003431.123 TRACE    seccomp - seccomp.c:parse_config_v2:1043 - Merged second compat seccomp context into main context
lxc plex 20211202003431.123 TRACE    start - start.c:lxc_init:875 - Read seccomp policy
lxc plex 20211202003431.123 TRACE    start - start.c:lxc_init:882 - Initialized LSM
lxc plex 20211202003431.124 INFO     start - start.c:lxc_init:884 - Container "plex" is initialized
lxc plex 20211202003431.124 TRACE    cgfsng - cgroups/cgfsng.c:__cgroup_tree_create:715 - Created 10(lxc.monitor.plex) cgroup
lxc plex 20211202003431.458 TRACE    cgfsng - cgroups/cgfsng.c:__cgroup_tree_create:715 - Created 11(lxc.monitor.plex) cgroup
lxc plex 20211202003431.459 INFO     cgfsng - cgroups/cgfsng.c:cgfsng_monitor_create:1028 - The monitor process uses "lxc.monitor.plex" as cgroup
lxc plex 20211202003431.460 TRACE    cgfsng - cgroups/cgfsng.c:cgfsng_monitor_enter:1178 - Moved monitor into cgroup 12
lxc plex 20211202003431.460 TRACE    cgfsng - cgroups/cgfsng.c:cgfsng_monitor_enter:1187 - Moved transient process into cgroup 12
lxc plex 20211202003431.461 TRACE    cgfsng - cgroups/cgfsng.c:cgfsng_monitor_enter:1178 - Moved monitor into cgroup 13
lxc plex 20211202003431.463 TRACE    cgfsng - cgroups/cgfsng.c:cgfsng_monitor_enter:1187 - Moved transient process into cgroup 13
lxc plex 20211202003431.464 DEBUG    storage - storage/storage.c:get_storage_by_name:209 - Detected rootfs type "dir"
lxc plex 20211202003431.464 TRACE    conf - conf.c:lxc_rootfs_init:555 - Not pinning because container runs in user namespace
lxc plex 20211202003431.464 DEBUG    storage - storage/storage.c:get_storage_by_name:209 - Detected rootfs type "dir"
lxc plex 20211202003431.464 TRACE    sync - sync.c:lxc_sync_init:139 - Initialized synchronization infrastructure
lxc plex 20211202003431.465 TRACE    cgfsng - cgroups/cgfsng.c:__cgroup_tree_create:715 - Created 10(lxc.payload.plex) cgroup
lxc plex 20211202003431.467 TRACE    cgfsng - cgroups/cgfsng.c:__cgroup_tree_create:715 - Created 11(lxc.payload.plex) cgroup
lxc plex 20211202003431.467 INFO     cgfsng - cgroups/cgfsng.c:cgfsng_payload_create:1136 - The container process uses "lxc.payload.plex" as inner and "lxc.payload.plex" as limit cgroup
lxc plex 20211202003431.480 TRACE    start - start.c:lxc_spawn:1705 - Spawned container directly into target cgroup via cgroup2 fd 18
lxc plex 20211202003431.480 TRACE    start - start.c:lxc_spawn:1745 - Cloned child process 66059
lxc plex 20211202003431.480 TRACE    start - start.c:core_scheduling:1563 - No new core scheduling domain requested
lxc plex 20211202003431.480 TRACE    utils - utils.c:lxc_can_use_pidfd:1801 - Kernel supports pidfds
lxc plex 20211202003431.481 INFO     start - start.c:lxc_spawn:1765 - Cloned CLONE_NEWUSER
lxc plex 20211202003431.481 INFO     start - start.c:lxc_spawn:1765 - Cloned CLONE_NEWNS
lxc plex 20211202003431.481 INFO     start - start.c:lxc_spawn:1765 - Cloned CLONE_NEWPID
lxc plex 20211202003431.481 INFO     start - start.c:lxc_spawn:1765 - Cloned CLONE_NEWUTS
lxc plex 20211202003431.481 INFO     start - start.c:lxc_spawn:1765 - Cloned CLONE_NEWIPC
lxc plex 20211202003431.480 TRACE    start - start.c:lxc_spawn:1705 - Spawned container directly into target cgroup via cgroup2 fd 18
lxc plex 20211202003431.481 DEBUG    start - start.c:lxc_try_preserve_namespace:139 - Preserved user namespace via fd 20 and stashed path as user:/proc/66043/fd/20
lxc plex 20211202003431.481 DEBUG    start - start.c:lxc_try_preserve_namespace:139 - Preserved mnt namespace via fd 21 and stashed path as mnt:/proc/66043/fd/21
lxc plex 20211202003431.482 DEBUG    start - start.c:lxc_try_preserve_namespace:139 - Preserved pid namespace via fd 22 and stashed path as pid:/proc/66043/fd/22
lxc plex 20211202003431.482 DEBUG    start - start.c:lxc_try_preserve_namespace:139 - Preserved uts namespace via fd 23 and stashed path as uts:/proc/66043/fd/23
lxc plex 20211202003431.482 DEBUG    start - start.c:lxc_try_preserve_namespace:139 - Preserved ipc namespace via fd 24 and stashed path as ipc:/proc/66043/fd/24
lxc plex 20211202003431.483 WARN     conf - conf.c:lxc_map_ids:3579 - newuidmap binary is missing
lxc plex 20211202003431.483 TRACE    sync - sync.c:lxc_sync_wait_parent:110 - Child waiting for parent with sequence startup
lxc plex 20211202003431.483 WARN     conf - conf.c:lxc_map_ids:3585 - newgidmap binary is missing
lxc plex 20211202003431.483 DEBUG    conf - conf.c:lxc_map_ids:3600 - No newuidmap and newgidmap binary found. Trying to write directly with euid 0
lxc plex 20211202003431.484 TRACE    conf - conf.c:lxc_map_ids:3665 - Wrote mapping "0 1000000 1000000000
"
lxc plex 20211202003431.484 TRACE    conf - conf.c:lxc_map_ids:3665 - Wrote mapping "0 1000000 1000000000
"
lxc plex 20211202003431.484 TRACE    cgfsng - cgroups/cgfsng.c:cgfsng_payload_enter:1237 - Moved container into /sys/fs/cgroup/net_cls/lxc.payload.plex cgroup via 17
lxc plex 20211202003431.484 TRACE    conf - conf.c:get_minimal_idmap:4984 - Allocated minimal idmapping for ns uid 0 and ns gid 0
lxc plex 20211202003431.490 TRACE    conf - conf.c:userns_exec_1:5048 - Establishing uid mapping for "66060" in new user namespace: nsuid 1000000000 - hostid 0 - range 1
lxc plex 20211202003431.490 TRACE    conf - conf.c:userns_exec_1:5048 - Establishing uid mapping for "66060" in new user namespace: nsuid 0 - hostid 1000000 - range 1000000000
lxc plex 20211202003431.490 TRACE    conf - conf.c:userns_exec_1:5048 - Establishing gid mapping for "66060" in new user namespace: nsuid 1000000000 - hostid 0 - range 1
lxc plex 20211202003431.490 TRACE    conf - conf.c:userns_exec_1:5048 - Establishing gid mapping for "66060" in new user namespace: nsuid 0 - hostid 1000000 - range 1000000000
lxc plex 20211202003431.491 WARN     conf - conf.c:lxc_map_ids:3579 - newuidmap binary is missing
lxc plex 20211202003431.491 WARN     conf - conf.c:lxc_map_ids:3585 - newgidmap binary is missing
lxc plex 20211202003431.491 INFO     conf - conf.c:lxc_map_ids:3590 - Caller maps host root. Writing mapping directly
lxc plex 20211202003431.491 TRACE    conf - conf.c:lxc_map_ids:3665 - Wrote mapping "1000000000 0 1
0 1000000 1000000000
"
lxc plex 20211202003431.492 TRACE    conf - conf.c:lxc_map_ids:3665 - Wrote mapping "1000000000 0 1
0 1000000 1000000000
"
lxc plex 20211202003431.492 TRACE    conf - conf.c:run_userns_fn:4850 - Calling function "chown_cgroup_wrapper"
lxc plex 20211202003431.495 NOTICE   utils - utils.c:lxc_drop_groups:1347 - Dropped supplimentary groups
lxc plex 20211202003431.511 TRACE    sync - sync.c:lxc_sync_barrier_child:97 - Parent waking child with sequence startup and waiting with sequence configure
lxc plex 20211202003431.523 INFO     start - start.c:do_start:1107 - Unshared CLONE_NEWNET
lxc plex 20211202003431.523 NOTICE   utils - utils.c:lxc_drop_groups:1347 - Dropped supplimentary groups
lxc plex 20211202003431.523 NOTICE   utils - utils.c:lxc_switch_uid_gid:1323 - Switched to gid 0
lxc plex 20211202003431.524 NOTICE   utils - utils.c:lxc_switch_uid_gid:1332 - Switched to uid 0
lxc plex 20211202003431.524 TRACE    sync - sync.c:lxc_sync_wake_parent:104 - Child waking parent with sequence configure
lxc plex 20211202003431.525 INFO     start - start.c:do_start:1207 - Unshared CLONE_NEWCGROUP
lxc plex 20211202003431.525 TRACE    sync - sync.c:lxc_sync_wait_parent:110 - Child waiting for parent with sequence post-configure
lxc plex 20211202003431.526 DEBUG    start - start.c:lxc_try_preserve_namespace:139 - Preserved net namespace via fd 4 and stashed path as net:/proc/66043/fd/4
lxc plex 20211202003431.526 TRACE    start - start.c:lxc_spawn:1837 - Allocated new network namespace id
lxc plex 20211202003431.529 DEBUG    network - network.c:netdev_configure_server_phys:1222 - Instantiated phys "vethfa74037e" with ifindex "25"
lxc plex 20211202003431.598 TRACE    network - network.c:create_transient_name:3487 - Created transient name physbQNxiV for network device
lxc plex 20211202003431.122 DEBUG    network - network.c:lxc_network_move_created_netdev_priv:3538 - Moved network device "vethfa74037e" with ifindex 25 to network namespace of 66059 and renamed to physbQNxiV
lxc plex 20211202003431.122 TRACE    sync - sync.c:lxc_sync_wake_child:122 - Parent waking child with sequence post-configure
lxc plex 20211202003431.122 TRACE    network - network.c:lxc_network_send_to_child:4046 - Sent network device name "physbQNxiV" to child
lxc plex 20211202003431.122 TRACE    sync - sync.c:lxc_sync_wait_child:116 - Parent waiting for child with sequence idmapped-mounts
lxc plex 20211202003431.123 TRACE    conf - conf.c:turn_into_dependent_mounts:3910 - Turned all mount table entries into dependent mount
lxc plex 20211202003431.123 TRACE    mount_utils - mount_utils.c:can_use_mount_api:582 - Kernel supports mount api
lxc plex 20211202003431.123 TRACE    dir - storage/dir.c:dir_mount:196 - Mounted "/var/snap/lxd/common/lxd/containers/plex/rootfs" onto "/var/snap/lxd/common/lxc/"
lxc plex 20211202003431.123 DEBUG    conf - conf.c:lxc_mount_rootfs:1423 - Mounted rootfs "/var/snap/lxd/common/lxd/containers/plex/rootfs" onto "/var/snap/lxd/common/lxc/" with options "(null)"
lxc plex 20211202003431.123 TRACE    conf - conf.c:lxc_mount_rootfs:1431 - Container uses separate rootfs. Opened container's rootfs
lxc plex 20211202003431.123 INFO     conf - conf.c:setup_utsname:866 - Set hostname to "plex"
lxc plex 20211202003431.123 TRACE    network - network.c:lxc_network_recv_from_parent:4071 - Received network device name "physbQNxiV" from parent
lxc plex 20211202003431.146 TRACE    network - network.c:__netdev_configure_container_common:1290 - Renamed network device from "physbQNxiV" to "eth0"
lxc plex 20211202003431.146 DEBUG    network - network.c:lxc_network_setup_in_child_namespaces_common:3948 - Network device "eth0" has been setup
lxc plex 20211202003431.146 INFO     network - network.c:lxc_setup_network_in_child_namespaces:4005 - Finished setting up network devices with caller assigned names
lxc plex 20211202003431.146 INFO     conf - conf.c:mount_autodev:1206 - Preparing "/dev"
lxc plex 20211202003431.146 TRACE    mount_utils - mount_utils.c:__fs_prepare:177 - Finished initializing new tmpfs filesystem context 21
lxc plex 20211202003431.146 TRACE    mount_utils - mount_utils.c:fs_set_property:215 - Set "mode" to "0755" on filesystem context 21
lxc plex 20211202003431.146 TRACE    mount_utils - mount_utils.c:fs_set_property:215 - Set "size" to "500000" on filesystem context 21
lxc plex 20211202003431.146 TRACE    mount_utils - mount_utils.c:fs_attach:266 - Mounted 23 onto 22
lxc plex 20211202003431.146 INFO     conf - conf.c:mount_autodev:1267 - Prepared "/dev"
lxc plex 20211202003431.146 DEBUG    conf - conf.c:lxc_mount_auto_mounts:733 - Invalid argument - Tried to ensure procfs is unmounted
lxc plex 20211202003431.146 TRACE    conf - conf.c:lxc_mount_auto_mounts:740 - Created procfs mountpoint under 20
lxc plex 20211202003431.147 DEBUG    conf - conf.c:lxc_mount_auto_mounts:756 - Invalid argument - Tried to ensure sysfs is unmounted
lxc plex 20211202003431.147 TRACE    conf - conf.c:lxc_mount_auto_mounts:763 - Created sysfs mountpoint under 20
lxc plex 20211202003431.147 TRACE    conf - conf.c:lxc_mount_auto_mounts:810 - Mounted automount "proc" on "/var/snap/lxd/common/lxc//proc" read-write with flags 14
lxc plex 20211202003431.147 TRACE    conf - conf.c:lxc_mount_auto_mounts:810 - Mounted automount "sysfs" on "/var/snap/lxd/common/lxc//sys" read-write with flags 0
lxc plex 20211202003431.147 DEBUG    conf - conf.c:mount_entry:2403 - Remounting "/dev/fuse" on "/var/snap/lxd/common/lxc//dev/fuse" to respect bind or remount options
lxc plex 20211202003431.147 DEBUG    conf - conf.c:mount_entry:2422 - Flags for "/dev/fuse" were 4098, required extra flags are 2
lxc plex 20211202003431.147 DEBUG    conf - conf.c:mount_entry:2466 - Mounted "/dev/fuse" on "/var/snap/lxd/common/lxc//dev/fuse" with filesystem type "none"
lxc plex 20211202003431.148 DEBUG    conf - conf.c:mount_entry:2403 - Remounting "/dev/net/tun" on "/var/snap/lxd/common/lxc//dev/net/tun" to respect bind or remount options
lxc plex 20211202003431.148 DEBUG    conf - conf.c:mount_entry:2422 - Flags for "/dev/net/tun" were 4098, required extra flags are 2
lxc plex 20211202003431.148 DEBUG    conf - conf.c:mount_entry:2466 - Mounted "/dev/net/tun" on "/var/snap/lxd/common/lxc//dev/net/tun" with filesystem type "none"
lxc plex 20211202003431.148 DEBUG    conf - conf.c:mount_entry:2403 - Remounting "/proc/sys/fs/binfmt_misc" on "/var/snap/lxd/common/lxc//proc/sys/fs/binfmt_misc" to respect bind or remount options
lxc plex 20211202003431.148 DEBUG    conf - conf.c:mount_entry:2422 - Flags for "/proc/sys/fs/binfmt_misc" were 4110, required extra flags are 14
lxc plex 20211202003431.148 DEBUG    conf - conf.c:mount_entry:2466 - Mounted "/proc/sys/fs/binfmt_misc" on "/var/snap/lxd/common/lxc//proc/sys/fs/binfmt_misc" with filesystem type "none"
lxc plex 20211202003431.148 DEBUG    conf - conf.c:mount_entry:2403 - Remounting "/sys/fs/fuse/connections" on "/var/snap/lxd/common/lxc//sys/fs/fuse/connections" to respect bind or remount options
lxc plex 20211202003431.148 DEBUG    conf - conf.c:mount_entry:2422 - Flags for "/sys/fs/fuse/connections" were 4110, required extra flags are 14
lxc plex 20211202003431.148 DEBUG    conf - conf.c:mount_entry:2466 - Mounted "/sys/fs/fuse/connections" on "/var/snap/lxd/common/lxc//sys/fs/fuse/connections" with filesystem type "none"
lxc plex 20211202003431.148 DEBUG    conf - conf.c:mount_entry:2403 - Remounting "/sys/fs/pstore" on "/var/snap/lxd/common/lxc//sys/fs/pstore" to respect bind or remount options
lxc plex 20211202003431.148 DEBUG    conf - conf.c:mount_entry:2422 - Flags for "/sys/fs/pstore" were 4110, required extra flags are 14
lxc plex 20211202003431.148 DEBUG    conf - conf.c:mount_entry:2466 - Mounted "/sys/fs/pstore" on "/var/snap/lxd/common/lxc//sys/fs/pstore" with filesystem type "none"
lxc plex 20211202003431.148 DEBUG    conf - conf.c:mount_entry:2403 - Remounting "/sys/kernel/config" on "/var/snap/lxd/common/lxc//sys/kernel/config" to respect bind or remount options
lxc plex 20211202003431.148 DEBUG    conf - conf.c:mount_entry:2422 - Flags for "/sys/kernel/config" were 4110, required extra flags are 14
lxc plex 20211202003431.148 DEBUG    conf - conf.c:mount_entry:2466 - Mounted "/sys/kernel/config" on "/var/snap/lxd/common/lxc//sys/kernel/config" with filesystem type "none"
lxc plex 20211202003431.148 DEBUG    conf - conf.c:mount_entry:2403 - Remounting "/sys/kernel/debug" on "/var/snap/lxd/common/lxc//sys/kernel/debug" to respect bind or remount options
lxc plex 20211202003431.148 DEBUG    conf - conf.c:mount_entry:2422 - Flags for "/sys/kernel/debug" were 4110, required extra flags are 14
lxc plex 20211202003431.148 DEBUG    conf - conf.c:mount_entry:2466 - Mounted "/sys/kernel/debug" on "/var/snap/lxd/common/lxc//sys/kernel/debug" with filesystem type "none"
lxc plex 20211202003431.148 DEBUG    conf - conf.c:mount_entry:2403 - Remounting "/sys/kernel/security" on "/var/snap/lxd/common/lxc//sys/kernel/security" to respect bind or remount options
lxc plex 20211202003431.148 DEBUG    conf - conf.c:mount_entry:2422 - Flags for "/sys/kernel/security" were 4110, required extra flags are 14
lxc plex 20211202003431.149 DEBUG    conf - conf.c:mount_entry:2466 - Mounted "/sys/kernel/security" on "/var/snap/lxd/common/lxc//sys/kernel/security" with filesystem type "none"
lxc plex 20211202003431.149 DEBUG    conf - conf.c:mount_entry:2403 - Remounting "/sys/kernel/tracing" on "/var/snap/lxd/common/lxc//sys/kernel/tracing" to respect bind or remount options
lxc plex 20211202003431.149 DEBUG    conf - conf.c:mount_entry:2422 - Flags for "/sys/kernel/tracing" were 4110, required extra flags are 14
lxc plex 20211202003431.149 DEBUG    conf - conf.c:mount_entry:2466 - Mounted "/sys/kernel/tracing" on "/var/snap/lxd/common/lxc//sys/kernel/tracing" with filesystem type "none"
lxc plex 20211202003431.149 DEBUG    conf - conf.c:mount_entry:2403 - Remounting "/dev/mqueue" on "/var/snap/lxd/common/lxc//dev/mqueue" to respect bind or remount options
lxc plex 20211202003431.149 DEBUG    conf - conf.c:mount_entry:2422 - Flags for "/dev/mqueue" were 4110, required extra flags are 14
lxc plex 20211202003431.149 DEBUG    conf - conf.c:mount_entry:2466 - Mounted "/dev/mqueue" on "/var/snap/lxd/common/lxc//dev/mqueue" with filesystem type "none"
lxc plex 20211202003431.149 DEBUG    conf - conf.c:mount_entry:2403 - Remounting "/var/snap/lxd/common/lxd/devlxd" on "/var/snap/lxd/common/lxc//dev/lxd" to respect bind or remount options
lxc plex 20211202003431.149 DEBUG    conf - conf.c:mount_entry:2422 - Flags for "/var/snap/lxd/common/lxd/devlxd" were 4096, required extra flags are 0
lxc plex 20211202003431.149 DEBUG    conf - conf.c:mount_entry:2431 - Mountflags already were 4096, skipping remount
lxc plex 20211202003431.149 DEBUG    conf - conf.c:mount_entry:2466 - Mounted "/var/snap/lxd/common/lxd/devlxd" on "/var/snap/lxd/common/lxc//dev/lxd" with filesystem type "none"
lxc plex 20211202003431.149 DEBUG    conf - conf.c:mount_entry:2403 - Remounting "/var/snap/lxd/common/lxd/shmounts/plex" on "/var/snap/lxd/common/lxc//dev/.lxd-mounts" to respect bind or remount options
lxc plex 20211202003431.149 DEBUG    conf - conf.c:mount_entry:2422 - Flags for "/var/snap/lxd/common/lxd/shmounts/plex" were 4096, required extra flags are 0
lxc plex 20211202003431.149 DEBUG    conf - conf.c:mount_entry:2431 - Mountflags already were 4096, skipping remount
lxc plex 20211202003431.149 DEBUG    conf - conf.c:mount_entry:2466 - Mounted "/var/snap/lxd/common/lxd/shmounts/plex" on "/var/snap/lxd/common/lxc//dev/.lxd-mounts" with filesystem type "none"
lxc plex 20211202003431.149 TRACE    sync - sync.c:lxc_sync_wake_parent:104 - Child waking parent with sequence idmapped-mounts
lxc plex 20211202003431.149 TRACE    conf - conf.c:lxc_idmapped_mounts_child:3087 - Finished setting up idmapped mounts
lxc plex 20211202003431.150 TRACE    cgfsng - cgroups/cgfsng.c:cgfsng_mount:1611 - Mixed cgroup mounts requested
lxc plex 20211202003431.150 TRACE    conf - conf.c:lxc_idmapped_mounts_parent:4110 - Finished receiving idmapped mount file descriptors from child
lxc plex 20211202003431.150 TRACE    cgfsng - cgroups/cgfsng.c:cgfsng_mount:1654 - Mounting cgroups not requested or needed
lxc plex 20211202003431.150 TRACE    sync - sync.c:lxc_sync_wait_child:116 - Parent waiting for child with sequence cgroup-limits
lxc plex 20211202003431.150 INFO     conf - conf.c:run_script_argv:340 - Executing script "/snap/lxd/current/lxcfs/lxc.mount.hook" for container "plex"
lxc plex 20211202003431.150 TRACE    conf - conf.c:run_script_argv:383 - Set environment variable: LXC_HOOK_TYPE=mount
lxc plex 20211202003431.150 TRACE    conf - conf.c:run_script_argv:388 - Set environment variable: LXC_HOOK_SECTION=lxc
lxc plex 20211202003431.248 INFO     conf - conf.c:lxc_fill_autodev:1304 - Populating "/dev"
lxc plex 20211202003431.249 TRACE    mount_utils - mount_utils.c:move_detached_mount:328 - Attach detached mount 23 to filesystem at 24
lxc plex 20211202003431.249 DEBUG    conf - conf.c:lxc_fill_autodev:1388 - Bind mounted host device 19(dev/full) to 21(full)
lxc plex 20211202003431.249 TRACE    mount_utils - mount_utils.c:move_detached_mount:328 - Attach detached mount 23 to filesystem at 24
lxc plex 20211202003431.249 DEBUG    conf - conf.c:lxc_fill_autodev:1388 - Bind mounted host device 19(dev/null) to 21(null)
lxc plex 20211202003431.249 TRACE    mount_utils - mount_utils.c:move_detached_mount:328 - Attach detached mount 23 to filesystem at 24
lxc plex 20211202003431.249 DEBUG    conf - conf.c:lxc_fill_autodev:1388 - Bind mounted host device 19(dev/random) to 21(random)
lxc plex 20211202003431.249 TRACE    mount_utils - mount_utils.c:move_detached_mount:328 - Attach detached mount 23 to filesystem at 24
lxc plex 20211202003431.249 DEBUG    conf - conf.c:lxc_fill_autodev:1388 - Bind mounted host device 19(dev/tty) to 21(tty)
lxc plex 20211202003431.249 TRACE    mount_utils - mount_utils.c:move_detached_mount:328 - Attach detached mount 23 to filesystem at 24
lxc plex 20211202003431.249 DEBUG    conf - conf.c:lxc_fill_autodev:1388 - Bind mounted host device 19(dev/urandom) to 21(urandom)
lxc plex 20211202003431.249 TRACE    mount_utils - mount_utils.c:move_detached_mount:328 - Attach detached mount 23 to filesystem at 24
lxc plex 20211202003431.249 DEBUG    conf - conf.c:lxc_fill_autodev:1388 - Bind mounted host device 19(dev/zero) to 21(zero)
lxc plex 20211202003431.249 INFO     conf - conf.c:lxc_fill_autodev:1392 - Populated "/dev"
lxc plex 20211202003431.249 INFO     conf - conf.c:lxc_transient_proc:3762 - Caller's PID is 1; /proc/self points to 1
lxc plex 20211202003431.249 TRACE    conf - conf.c:lxc_transient_proc:3770 - Correct procfs instance mounted
lxc plex 20211202003431.249 TRACE    mount_utils - mount_utils.c:__fs_prepare:177 - Finished initializing new devpts filesystem context 22
lxc plex 20211202003431.249 TRACE    mount_utils - mount_utils.c:fs_set_property:215 - Set "source" to "devpts" on filesystem context 22
lxc plex 20211202003431.249 TRACE    mount_utils - mount_utils.c:fs_set_property:215 - Set "gid" to "5" on filesystem context 22
lxc plex 20211202003431.249 TRACE    mount_utils - mount_utils.c:fs_set_flag:227 - Set "newinstance" flag on filesystem context 22
lxc plex 20211202003431.249 TRACE    mount_utils - mount_utils.c:fs_set_property:215 - Set "ptmxmode" to "0666" on filesystem context 22
lxc plex 20211202003431.249 TRACE    mount_utils - mount_utils.c:fs_set_property:215 - Set "mode" to "0620" on filesystem context 22
lxc plex 20211202003431.249 TRACE    mount_utils - mount_utils.c:fs_set_property:215 - Set "max" to "1024" on filesystem context 22
lxc plex 20211202003431.249 TRACE    conf - conf.c:lxc_setup_devpts_child:1732 - Created detached devpts mount 23
lxc plex 20211202003431.249 DEBUG    conf - conf.c:lxc_setup_devpts_child:1738 - Attached detached devpts mount 23 to 21/pts
lxc plex 20211202003431.249 DEBUG    conf - conf.c:lxc_setup_devpts_child:1824 - Created "/dev/ptmx" file as bind mount target
lxc plex 20211202003431.249 TRACE    mount_utils - mount_utils.c:mount_at:663 - Mounted "/proc/self/fd/24" to "/proc/self/fd/25"
lxc plex 20211202003431.249 DEBUG    conf - conf.c:lxc_setup_devpts_child:1831 - Bind mounted "/dev/pts/ptmx" to "/dev/ptmx"
lxc plex 20211202003431.250 TRACE    mount_utils - mount_utils.c:move_detached_mount:328 - Attach detached mount 27 to filesystem at 25
lxc plex 20211202003431.250 TRACE    conf - conf.c:lxc_setup_dev_console:1990 - Setup console "/dev/pts/0"
lxc plex 20211202003431.250 INFO     conf - conf.c:lxc_setup_ttys:1063 - Finished setting up 0 /dev/tty<N> device(s)
lxc plex 20211202003431.251 TRACE    conf - conf.c:lxc_pivot_root:1610 - Changed into new rootfs "/var/snap/lxd/common/lxc/"
lxc plex 20211202003431.251 INFO     conf - conf.c:setup_personality:1904 - Set personality to "0lx0"
lxc plex 20211202003431.251 DEBUG    conf - conf.c:capabilities_deny:3190 - Capabilities have been setup
lxc plex 20211202003431.251 NOTICE   conf - conf.c:lxc_setup:4455 - The container "plex" is set up
lxc plex 20211202003431.251 TRACE    apparmor - lsm/apparmor.c:__apparmor_process_label_open:403 - On-exec not supported with AppArmor
lxc plex 20211202003431.252 TRACE    apparmor - lsm/apparmor.c:apparmor_process_label_set_at:1170 - Changing AppArmor profile on exec not supported
lxc plex 20211202003431.252 INFO     apparmor - lsm/apparmor.c:apparmor_process_label_set_at:1186 - Set AppArmor label to "lxd-plex_</var/snap/lxd/common/lxd>//&:lxd-plex_<var-snap-lxd-common-lxd>:"
lxc plex 20211202003431.252 INFO     apparmor - lsm/apparmor.c:apparmor_process_label_set:1231 - Changed AppArmor profile to lxd-plex_</var/snap/lxd/common/lxd>//&:lxd-plex_<var-snap-lxd-common-lxd>:
#
# pseudo filter code start
#
# filter for arch x86_64 (3221225534)
if ($arch == 3221225534)
  # filter for syscall "finit_module" (313) [priority: 65535]
  if ($syscall == 313)
    action ERRNO(38);
  # filter for syscall "open_by_handle_at" (304) [priority: 65535]
  if ($syscall == 304)
    action ERRNO(38);
  # filter for syscall "kexec_load" (246) [priority: 65535]
  if ($syscall == 246)
    action ERRNO(38);
  # filter for syscall "delete_module" (176) [priority: 65535]
  if ($syscall == 176)
    action ERRNO(38);
  # filter for syscall "init_module" (175) [priority: 65535]
  if ($syscall == 175)
    action ERRNO(38);
  # filter for syscall "umount2" (166) [priority: 65533]
  if ($syscall == 166)
    if ($a1.hi32 & 0x00000000 == 0)
      if ($a1.lo32 & 0x00000001 == 1)
        action ERRNO(13);
  # default action
  action ALLOW;
# filter for arch x86 (1073741827)
if ($arch == 1073741827)
  # filter for syscall "finit_module" (350) [priority: 65535]
  if ($syscall == 350)
    action ERRNO(38);
  # filter for syscall "open_by_handle_at" (342) [priority: 65535]
  if ($syscall == 342)
    action ERRNO(38);
  # filter for syscall "kexec_load" (283) [priority: 65535]
  if ($syscall == 283)
    action ERRNO(38);
  # filter for syscall "delete_module" (129) [priority: 65535]
  if ($syscall == 129)
    action ERRNO(38);
  # filter for syscall "init_module" (128) [priority: 65535]
  if ($syscall == 128)
    action ERRNO(38);
  # filter for syscall "umount2" (52) [priority: 65534]
  if ($syscall == 52)
    if ($a1 & 0x00000001 == 1)
      action ERRNO(13);
  # default action
  action ALLOW;
# filter for arch x32 (3221225534)
if ($arch == 3221225534)
  # filter for syscall "kexec_load" (1073742352) [priority: 65535]
  if ($syscall == 1073742352)
    action ERRNO(38);
  # filter for syscall "finit_module" (1073742137) [priority: 65535]
  if ($syscall == 1073742137)
    action ERRNO(38);
  # filter for syscall "open_by_handle_at" (1073742128) [priority: 65535]
  if ($syscall == 1073742128)
    action ERRNO(38);
  # filter for syscall "delete_module" (1073742000) [priority: 65535]
  if ($syscall == 1073742000)
    action ERRNO(38);
  # filter for syscall "init_module" (1073741999) [priority: 65535]
  if ($syscall == 1073741999)
    action ERRNO(38);
  # filter for syscall "umount2" (1073741990) [priority: 65534]
  if ($syscall == 1073741990)
    if ($a1 & 0x00000001 == 1)
      action ERRNO(13);
  # default action
  action ALLOW;
# invalid architecture action
action KILL;
#
# pseudo filter code end
#
lxc plex 20211202003431.252 TRACE    sync - sync.c:lxc_sync_barrier_parent:90 - Child waking parent with sequence cgroup-limits and waiting for sequence fds
lxc plex 20211202003431.252 TRACE    start - start.c:lxc_spawn:1899 - Set up legacy device cgroup controller limits
lxc plex 20211202003431.252 TRACE    start - start.c:lxc_spawn:1905 - Set up cgroup2 device controller limits
lxc plex 20211202003431.252 TRACE    start - start.c:lxc_spawn:1908 - Finished setting up cgroups
lxc plex 20211202003431.252 TRACE    sync - sync.c:lxc_sync_wake_child:122 - Parent waking child with sequence fds
lxc plex 20211202003431.252 DEBUG    start - start.c:lxc_try_preserve_namespace:139 - Preserved cgroup namespace via fd 6 and stashed path as cgroup:/proc/66043/fd/6
lxc plex 20211202003431.252 TRACE    conf - conf.c:lxc_send_devpts_to_parent:1886 - Sent devpts file descriptor 23 to parent
lxc plex 20211202003431.253 TRACE    conf - conf.c:lxc_recv_devpts_from_child:1668 - Received devpts file descriptor 12 from child
lxc plex 20211202003431.253 TRACE    network - network.c:lxc_network_send_name_and_ifindex_to_parent:4101 - Sent network device eth0 with ifindex 25 to parent
lxc plex 20211202003431.253 TRACE    network - network.c:lxc_network_send_name_and_ifindex_to_parent:4105 - Sent network device names and ifindices to parent
lxc plex 20211202003431.253 TRACE    network - network.c:lxc_network_recv_name_and_ifindex_from_child:4135 - Received network device eth0 with ifindex 25 from child
lxc plex 20211202003431.253 TRACE    conf - conf.c:lxc_send_console_to_parent:4199 - Sent console to parent
lxc plex 20211202003431.253 TRACE    conf - conf.c:lxc_sync_fds_child:4287 - Finished syncing file descriptors with parent
lxc plex 20211202003431.253 TRACE    sync - sync.c:lxc_sync_wait_parent:110 - Child waiting for parent with sequence ready-start
lxc plex 20211202003431.253 TRACE    conf - conf.c:lxc_recv_console_from_child:4226 - Received console from child
lxc plex 20211202003431.253 TRACE    conf - conf.c:lxc_sync_fds_parent:4257 - Finished syncing file descriptors with child
lxc plex 20211202003431.253 DEBUG    terminal - terminal.c:lxc_terminal_peer_default:695 - No such device - The process does not have a controlling terminal
lxc plex 20211202003431.253 DEBUG    terminal - terminal.c:lxc_terminal_create_log_file:869 - Using "/var/snap/lxd/common/lxd/logs/plex/console.log" as terminal log file
lxc plex 20211202003431.253 TRACE    terminal - terminal.c:lxc_terminal_create_ringbuf:850 - Allocated 131072 byte terminal ringbuffer
lxc plex 20211202003431.253 TRACE    sync - sync.c:lxc_sync_barrier_child:97 - Parent waking child with sequence ready-start and waiting with sequence restart
lxc plex 20211202003431.253 NOTICE   start - start.c:start:2161 - Exec'ing "/sbin/init"
lxc plex 20211202003431.258 TRACE    confile_utils - confile_utils.c:lxc_log_configured_netdevs:233 - index: 0
lxc plex 20211202003431.258 TRACE    confile_utils - confile_utils.c:lxc_log_configured_netdevs:234 - ifindex: 25
lxc plex 20211202003431.258 TRACE    confile_utils - confile_utils.c:lxc_log_configured_netdevs:290 - type: phys
lxc plex 20211202003431.258 TRACE    confile_utils - confile_utils.c:lxc_log_configured_netdevs:293 - host side ifindex for phys device: 25
lxc plex 20211202003431.258 TRACE    confile_utils - confile_utils.c:lxc_log_configured_netdevs:308 - flags: up
lxc plex 20211202003431.258 TRACE    confile_utils - confile_utils.c:lxc_log_configured_netdevs:312 - link: vethfa74037e
lxc plex 20211202003431.258 TRACE    confile_utils - confile_utils.c:lxc_log_configured_netdevs:316 - l2proxy: false
lxc plex 20211202003431.258 TRACE    confile_utils - confile_utils.c:lxc_log_configured_netdevs:319 - name: eth0
lxc plex 20211202003431.258 TRACE    confile_utils - confile_utils.c:lxc_log_configured_netdevs:333 - ipv4 gateway auto: false
lxc plex 20211202003431.258 TRACE    confile_utils - confile_utils.c:lxc_log_configured_netdevs:336 - ipv4 gateway dev: false
lxc plex 20211202003431.258 TRACE    confile_utils - confile_utils.c:lxc_log_configured_netdevs:351 - ipv6 gateway auto: false
lxc plex 20211202003431.258 TRACE    confile_utils - confile_utils.c:lxc_log_configured_netdevs:354 - ipv6 gateway dev: false
lxc plex 20211202003431.258 NOTICE   start - start.c:post_start:2172 - Started "/sbin/init" with pid "66059"
lxc plex 20211202003431.258 TRACE    start - start.c:lxc_serve_state_socket_pair:547 - Sent container state "RUNNING" to 7
lxc plex 20211202003431.258 TRACE    start - start.c:lxc_serve_state_clients:486 - Set container state to RUNNING
lxc plex 20211202003431.258 TRACE    start - start.c:lxc_serve_state_clients:489 - No state clients registered
lxc plex 20211202003431.258 TRACE    lxccontainer - lxccontainer.c:wait_on_daemonized_start:872 - Container is in "RUNNING" state
lxc plex 20211202003431.258 TRACE    mainloop - mainloop.c:__epoll_open:489 - Created epoll instance
lxc plex 20211202003431.258 TRACE    mainloop - mainloop.c:__epoll_open:489 - Created epoll instance
lxc plex 20211202003431.258 TRACE    start - start.c:lxc_poll:629 - Mainloop is ready
lxc plex 20211202003431.259 TRACE    start - start.c:signal_handler:399 - Received signal ssi_signo(17) for ssi_pid(66060), si_signo(0), si_pid(0)
lxc plex 20211202003431.259 NOTICE   start - start.c:signal_handler:449 - Received 17 from pid 66060 instead of container init 66059
lxc plex 20211202003431.262 TRACE    commands - commands.c:lxc_cmd_accept:2042 - Accepted new client as fd 14 on command server fd 9
lxc plex 20211202003431.262 TRACE    commands - commands.c:lxc_cmd_handler:2005 - Processed command get_state; cleaning up client fd 14
lxc plex 20211202003431.262 TRACE    mainloop - mainloop.c:disarm_handler:61 - Disarmed 14 for "lxc_cmd_handler" handler
lxc plex 20211202003431.262 TRACE    commands - commands.c:lxc_cmd_cleanup_handler:1945 - Closing client fd 14 for "lxc_cmd_cleanup_handler"
lxc plex 20211202003431.262 TRACE    mainloop - mainloop.c:delete_handler:75 - Deleted 14 for "lxc_cmd_handler" handler
lxc plex 20211202003431.322 TRACE    start - start.c:signal_handler:399 - Received signal ssi_signo(17) for ssi_pid(66059), si_signo(17), si_pid(66059)
lxc plex 20211202003431.322 DEBUG    start - start.c:signal_handler:467 - Container init process 66059 exited
lxc plex 20211202003431.322 TRACE    start - start.c:lxc_poll:646 - Closed console mainloop
lxc plex 20211202003431.322 TRACE    start - start.c:lxc_poll:651 - Closed mainloop
lxc plex 20211202003431.322 TRACE    start - start.c:lxc_poll:654 - Closed signal file descriptor 5
lxc plex 20211202003431.323 TRACE    network - network.c:lxc_restore_phys_nics_to_netns:3745 - Moving physical network devices back to parent network namespace
lxc plex 20211202003431.358 TRACE    network - network.c:lxc_restore_phys_nics_to_netns:3774 - Moved network device "eth0" back to network namespace
lxc plex 20211202003431.358 INFO     error - error.c:lxc_error_set_and_log:31 - Child <66059> ended on error (255)
lxc plex 20211202003431.358 TRACE    start - start.c:lxc_expose_namespace_environment:909 - Set environment variable LXC_USER_NS=/proc/66043/fd/20
lxc plex 20211202003431.358 TRACE    start - start.c:lxc_expose_namespace_environment:909 - Set environment variable LXC_MNT_NS=/proc/66043/fd/21
lxc plex 20211202003431.358 TRACE    start - start.c:lxc_expose_namespace_environment:909 - Set environment variable LXC_PID_NS=/proc/66043/fd/22
lxc plex 20211202003431.358 TRACE    start - start.c:lxc_expose_namespace_environment:909 - Set environment variable LXC_UTS_NS=/proc/66043/fd/23
lxc plex 20211202003431.358 TRACE    start - start.c:lxc_expose_namespace_environment:909 - Set environment variable LXC_IPC_NS=/proc/66043/fd/24
lxc plex 20211202003431.358 TRACE    start - start.c:lxc_expose_namespace_environment:909 - Set environment variable LXC_NET_NS=/proc/66043/fd/4
lxc plex 20211202003431.358 TRACE    start - start.c:lxc_expose_namespace_environment:909 - Set environment variable LXC_CGROUP_NS=/proc/66043/fd/6
lxc plex 20211202003431.389 TRACE    network - network.c:lxc_delete_network_priv:3621 - Renamed interface with index 25 from "eth0" to its initial name "vethfa74037e"
lxc plex 20211202003431.390 TRACE    network - network.c:lxc_delete_network_priv:3632 - Restored interface "vethfa74037e" to its initial mtu "1500"
lxc plex 20211202003431.390 DEBUG    network - network.c:lxc_delete_network:4159 - Deleted network devices
lxc plex 20211202003431.390 TRACE    start - start.c:lxc_serve_state_clients:486 - Set container state to STOPPING
lxc plex 20211202003431.390 TRACE    start - start.c:lxc_serve_state_clients:489 - No state clients registered
lxc plex 20211202003431.390 TRACE    start - start.c:lxc_expose_namespace_environment:909 - Set environment variable LXC_USER_NS=/proc/66043/fd/20
lxc plex 20211202003431.390 TRACE    start - start.c:lxc_expose_namespace_environment:909 - Set environment variable LXC_MNT_NS=/proc/66043/fd/21
lxc plex 20211202003431.390 TRACE    start - start.c:lxc_expose_namespace_environment:909 - Set environment variable LXC_PID_NS=/proc/66043/fd/22
lxc plex 20211202003431.390 TRACE    start - start.c:lxc_expose_namespace_environment:909 - Set environment variable LXC_UTS_NS=/proc/66043/fd/23
lxc plex 20211202003431.390 TRACE    start - start.c:lxc_expose_namespace_environment:909 - Set environment variable LXC_IPC_NS=/proc/66043/fd/24
lxc plex 20211202003431.390 TRACE    start - start.c:lxc_expose_namespace_environment:909 - Set environment variable LXC_NET_NS=/proc/66043/fd/4
lxc plex 20211202003431.390 TRACE    start - start.c:lxc_expose_namespace_environment:909 - Set environment variable LXC_CGROUP_NS=/proc/66043/fd/6
lxc plex 20211202003431.390 INFO     conf - conf.c:run_script_argv:340 - Executing script "/snap/lxd/current/bin/lxd callhook /var/snap/lxd/common/lxd "default" "plex" stopns" for container "plex"
lxc plex 20211202003431.390 TRACE    conf - conf.c:run_script_argv:383 - Set environment variable: LXC_HOOK_TYPE=stop
lxc plex 20211202003431.390 TRACE    conf - conf.c:run_script_argv:388 - Set environment variable: LXC_HOOK_SECTION=lxc
lxc plex 20211202003431.570 TRACE    conf - conf.c:get_minimal_idmap:4984 - Allocated minimal idmapping for ns uid 0 and ns gid 0
lxc plex 20211202003431.571 TRACE    conf - conf.c:userns_exec_1:5048 - Establishing uid mapping for "66128" in new user namespace: nsuid 1000000000 - hostid 0 - range 1
lxc plex 20211202003431.571 TRACE    conf - conf.c:userns_exec_1:5048 - Establishing uid mapping for "66128" in new user namespace: nsuid 0 - hostid 1000000 - range 1000000000
lxc plex 20211202003431.571 TRACE    conf - conf.c:userns_exec_1:5048 - Establishing gid mapping for "66128" in new user namespace: nsuid 1000000000 - hostid 0 - range 1
lxc plex 20211202003431.571 TRACE    conf - conf.c:userns_exec_1:5048 - Establishing gid mapping for "66128" in new user namespace: nsuid 0 - hostid 1000000 - range 1000000000
lxc plex 20211202003431.571 WARN     conf - conf.c:lxc_map_ids:3579 - newuidmap binary is missing
lxc plex 20211202003431.571 WARN     conf - conf.c:lxc_map_ids:3585 - newgidmap binary is missing
lxc plex 20211202003431.571 INFO     conf - conf.c:lxc_map_ids:3590 - Caller maps host root. Writing mapping directly
lxc plex 20211202003431.571 TRACE    conf - conf.c:lxc_map_ids:3665 - Wrote mapping "1000000000 0 1
0 1000000 1000000000
"
lxc plex 20211202003431.571 TRACE    conf - conf.c:lxc_map_ids:3665 - Wrote mapping "1000000000 0 1
0 1000000 1000000000
"
lxc plex 20211202003431.571 TRACE    conf - conf.c:run_userns_fn:4850 - Calling function "cgroup_tree_remove_wrapper"
lxc plex 20211202003431.571 NOTICE   utils - utils.c:lxc_drop_groups:1347 - Dropped supplimentary groups
lxc plex 20211202003431.571 TRACE    cgfsng - cgroups/cgfsng.c:cgroup_tree_remove:485 - Removed cgroup tree 10(lxc.payload.plex)
lxc plex 20211202003431.572 TRACE    cgfsng - cgroups/cgfsng.c:cgroup_tree_remove:485 - Removed cgroup tree 11(lxc.payload.plex)
lxc plex 20211202003431.573 TRACE    cgfsng - cgroups/cgfsng.c:__cgroup_tree_create:715 - Reusing 10(lxc.pivot) cgroup
lxc plex 20211202003431.573 TRACE    cgfsng - cgroups/cgfsng.c:cgfsng_monitor_destroy:915 - Removed cgroup tree 10(lxc.monitor.plex)
lxc plex 20211202003431.573 TRACE    cgfsng - cgroups/cgfsng.c:__cgroup_tree_create:715 - Reusing 11(lxc.pivot) cgroup
lxc plex 20211202003431.598 TRACE    cgfsng - cgroups/cgfsng.c:cgfsng_monitor_destroy:915 - Removed cgroup tree 11(lxc.monitor.plex)
lxc plex 20211202003431.598 TRACE    start - start.c:lxc_end:966 - Closed command socket
lxc plex 20211202003431.598 TRACE    start - start.c:lxc_end:977 - Set container state to "STOPPED"
lxc plex 20211202003431.602 INFO     conf - conf.c:run_script_argv:340 - Executing script "/snap/lxd/current/lxcfs/lxc.reboot.hook" for container "plex"
lxc plex 20211202003431.602 TRACE    conf - conf.c:run_script_argv:383 - Set environment variable: LXC_HOOK_TYPE=post-stop
lxc plex 20211202003431.602 TRACE    conf - conf.c:run_script_argv:388 - Set environment variable: LXC_HOOK_SECTION=lxc
lxc plex 20211202003432.111 INFO     conf - conf.c:run_script_argv:340 - Executing script "/snap/lxd/current/bin/lxd callhook /var/snap/lxd/common/lxd "default" "plex" stop" for container "plex"
lxc plex 20211202003432.111 TRACE    conf - conf.c:run_script_argv:383 - Set environment variable: LXC_HOOK_TYPE=post-stop
lxc plex 20211202003432.111 TRACE    conf - conf.c:run_script_argv:388 - Set environment variable: LXC_HOOK_SECTION=lxc

Your container doesn’t support cgroup2 and your host distro defaults to cgroup2 causing this issue.

To avoid it, you can add systemd.unified_cgroup_hierarchy=false to your host kernel’s command line and reboot. This will make your entire system use cgroup1 again and allow that container to work normally.

@stgraber Thank you! The container does start successfully with that change.