Unprivileged container does not work in Ubuntu 22.04

LXC
13

I find a potential cultprit: I have umask set to 0027 via pam_umask. Everything seems to work if I remove it.

Meanwhile I’m also looking for a better solution without disabling pam_umask.

I think this could be a potential explanation of the post that you mentioned.

Looking ahead, I think it’d be great we have at least one of:

  1. LXC checks that the container root has access to all cgroup directories, just like LXC checks the setuid bit.
  2. LXC shows a hint upon cgroup mounting errors.
  3. Maybe mention this in some relevant wiki/manual.

Otherwise this issue could be very cryptic.