centos 7 needs setpcap capability

[Chaskiel Grundman]

creating a centos 7 container mostly worked using the template, but when it was launched, it was really slow to run through most of the sysinit tasks, and neither systemd-journald nor systemd-logind could start. The error was something like "Error at step CAPABILITIES". I found things like

CapabilityBoundingSet=CAP_SYS_ADMIN CAP_AUDIT_CONTROL CAP_CHOWN CAP_KILL CAP_DAC_READ_SEARCH CAP_DAC_OVERRIDE CAP_FOWNER CAP_SYS_TTY_CONFIG

in fedora's service files, and tried not dropping SETPCAP in centos.common.conf. That allowed the container to boot with no further issues. (the lack of SETFCAP may cause problems with updates down the line, I don't know yet)

ProblemType: Bug
DistroRelease: Ubuntu 14.04
Package: lxc 1.0.4-0ubuntu0.1 [modified: usr/share/lxc/config/centos.common.conf]
ProcVersionSignature: Ubuntu 3.13.0-30.55-generic 3.13.11.2
Uname: Linux 3.13.0-30-generic x86_64
NonfreeKernelModules: openafs
ApportVersion: 2.14.1-0ubuntu3.2
Architecture: amd64
CurrentDesktop: XFCE
Date: Wed Jul 9 11:48:42 2014
SourcePackage: lxc
UpgradeStatus: Upgraded to trusty on 2014-06-16 (22 days ago)
defaults.conf:
 lxc.network.type = veth
 lxc.network.link = lxcbr0
 lxc.network.flags = up
 lxc.network.hwaddr = 00:16:3e:xx:xx:xx

[Serge Hallyn (serge-hallyn)]

As discussed on lxc-devel (July 10), the centos template has not been adjusted to support systemd. Michael Warfield will be working on it.

[Trent Lloyd (lathiat)]

Upstream Bug:
https://github.com/lxc/lxc/issues/340

Seems patches are floating around, no movement for a bit.

[Serge Hallyn (serge-hallyn)]

Thanks, patch merged upstream.