Unprivileged instance can not use docker after update node kernel from 5.4 to 5.15

LXD
18 
1435 387 252:32 /rootfs / rw,relatime,idmapped shared:273 master:272 - ext4 /dev/rbd2 rw,discard,stripe=16

as you can see the rootfs mount in the container is idmapped. This is what I was talking about.

So, you are using Ceph rbd device and then ext4 on top of it. Please check the container disk device options, especially the shift option.

You can try:
lxc config device override ct_name root shift=false

Alternatively, you can disable idmapped mounts at all

  • systemctl edit snap.lxd.daemon.service
  • add
[Service]
Environment=LXD_IDMAPPED_MOUNTS_DISABLE=1
  • systemctl reload snap.lxd.daemon

Until you upgrade to kernel 5.19+

3 Likes