LXC nesting broken, installing lxc package breaks under guest

[Ahmed Kamal]

I would like to run nested LXC guests. It seems this was working as per http://www.stgraber.org/2012/05/04/lxc-in-ubuntu-12-04-lts/ "container nesting" section

On a fully updated 12.04 LXC guest, trying to apt-get install lxc, breaks as so:

Unpacking lxc (from .../lxc_0.7.5-3ubuntu56_amd64.deb) ...
Selecting previously unselected package openssl.
Unpacking openssl (from .../openssl_1.0.1-4ubuntu5.2_amd64.deb) ...

dpkg: error processing /var/cache/apt/archives/openssl_1.0.1-4ubuntu5.2_amd64.deb (--unpack):
 trying to overwrite '/etc/ssl/certs', which is also in package euca2ools 2.0.0~bzr516-0ubuntu3

Selecting previously unselected package python-crypto.
Unpacking python-crypto (from .../python-crypto_2.4.1-1_amd64.deb) ...
Selecting previously unselected package python-paramiko.
Unpacking python-paramiko (from .../python-paramiko_1.7.7.1-2_all.deb) ...
Selecting previously unselected package python-yaml.
Unpacking python-yaml (from .../python-yaml_3.10-2_amd64.deb) ...
Selecting previously unselected package cgroup-lite.
Unpacking cgroup-lite (from .../cgroup-lite_1.1_all.deb) ...
Selecting previously unselected package cloud-utils.
Unpacking cloud-utils (from .../cloud-utils_0.25-0ubuntu5_all.deb) ...
Selecting previously unselected package debootstrap.
Unpacking debootstrap (from .../debootstrap_1.0.39ubuntu0.1_all.deb) ...
Processing triggers for ureadahead ...
Errors were encountered while processing:
 /var/cache/apt/archives/openssl_1.0.1-4ubuntu5.2_amd64.deb
E: Sub-process /usr/bin/dpkg returned an error code (1)

[Ahmed Kamal (kim0)]

apparmor was disabled from host system to the best of my knowledge :)

[Serge Hallyn (serge-hallyn)]

Thanks for reporting this bug. Do you see any apparmor denials in syslog? It might help to install auditd and then look through the /var/log/audit/ files.

[Stéphane Graber (stgraber)]

Unrelated to lxc, it's a bug in euca2ools which I fixed a couple of weeks ago (currently in -proposed).