Unable to start containers after upgrade to 1.0.7-0ubuntu0.6 on trusty

[Stephen]

A partial fix was made for 1501310 - this case still fails.

/home/ubuntu/xxxx/volumes/1.0.0/common/shared /var/lib/lxc/0002/rootfs/xxxx/./__shared__ none ro,bind 0 0

This line is giving the same error. With 1.0.7-0ubuntu0.6 installed.

lxc-start: utils.c: ensure_not_symlink: 1398 Mount onto /usr/lib/x86_64-linux-gnu/lxc//xxxx/./__shared__ resulted in /usr/lib/x86_64-linux-gnu/lxc/xxxx/__shared__

lxc-start: utils.c: safe_mount: 1423 Mount of '/home/ubuntu/xxxx/volumes/1.0.0/common/shared' onto '/usr/lib/x86_64-linux-gnu/lxc//XXXX/./__shared__' was onto a symlink!
lxc-start: conf.c: mount_entry: 2051 No such file or directory - failed to mount '/home/ubuntu/XXXX/volumes/1.0.0/common/shared' on '/usr/lib/x86_64-linux-gnu/lxc//XXXX/./__shared__'
lxc-start: conf.c: lxc_setup: 4160 failed to setup the mounts for '0002'
lxc-start: start.c: do_start: 688 failed to setup the container
lxc-start: sync.c: __sync_wait: 51 invalid sequence number 1. expected 2
lxc-start: start.c: __lxc_start: 1080 failed to spawn '0002'
lxc-start: lxc_start.c: main: 342 The container failed to start.
lxc-start: lxc_start.c: main: 346 Additional information can be obtained by setting the --logfile and --logpriority options.

lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 14.04.2 LTS
Release: 14.04
Codename: trusty

[Steve Beattie (sbeattie)]

Packages to address the issue in lxc are currently building in the ubuntu-security-proposed ppa: https://launchpad.net/~ubuntu-security-proposed/+archive/ubuntu/ppa/ ; please test these when they complete to verify that there aren't any additional regressions that have cropped up in this update. Thanks for your patience!

[Stephen (sajames1958)]

I loaded this on my system and both cases that failed before pass. No other
issues seen.

On Thu, Oct 1, 2015 at 3:15 AM Steve Beattie <email address hidden> wrote:

> Packages to address the issue in lxc are currently building in the
> ubuntu-security-proposed ppa: https://launchpad.net/~ubuntu-security-
> proposed/+archive/ubuntu/ppa/
> <https://launchpad.net/~ubuntu-security-proposed/+archive/ubuntu/ppa/> ;
> please test these when they complete to
> verify that there aren't any additional regressions that have cropped up
> in this update. Thanks for your patience!
>
> ** Changed in: lxc (Ubuntu)
> Importance: Undecided => High
>
> ** Changed in: lxc (Ubuntu)
> Status: New => In Progress
>
> --
> You received this bug notification because you are subscribed to the bug
> report.
> https://bugs.launchpad.net/bugs/1501491
>
> Title:
> Unable to start containers after upgrade to 1.0.7-0ubuntu0.6 on trusty
>
> Status in lxc package in Ubuntu:
> In Progress
>
> Bug description:
> A partial fix was made for 1501310 - this case still fails.
>
> /home/ubuntu/nzos/volumes/1.0.0/common/shared
> /var/lib/lxc/0002/rootfs/nzos/./__shared__ none ro,bind 0 0
>
> This line is giving the same error. With 1.0.7-0ubuntu0.6 installed.
>
> lxc-start: utils.c: ensure_not_symlink: 1398 Mount onto
> /usr/lib/x86_64-linux-gnu/lxc//nzos/./__shared__ resulted in
> /usr/lib/x86_64-linux-gnu/lxc/nzos/__shared__
>
> lxc-start: utils.c: safe_mount: 1423 Mount of
> '/home/ubuntu/nzos/volumes/1.0.0/common/shared' onto
> '/usr/lib/x86_64-linux-gnu/lxc//nzos/./__shared__' was onto a symlink!
> lxc-start: conf.c: mount_entry: 2051 No such file or directory - failed
> to mount '/home/ubuntu/nzos/volumes/1.0.0/common/shared' on
> '/usr/lib/x86_64-linux-gnu/lxc//nzos/./__shared__'
> lxc-start: conf.c: lxc_setup: 4160 failed to setup the mounts for '0002'
> lxc-start: start.c: do_start: 688 failed to setup the container
> lxc-start: sync.c: __sync_wait: 51 invalid sequence number 1. expected 2
> lxc-start: start.c: __lxc_start: 1080 failed to spawn '0002'
> lxc-start: lxc_start.c: main: 342 The container failed to start.
> lxc-start: lxc_start.c: main: 346 Additional information can be obtained
> by setting the --logfile and --logpriority options.
>
> lsb_release -a
> No LSB modules are available.
> Distributor ID: Ubuntu
> Description: Ubuntu 14.04.2 LTS
> Release: 14.04
> Codename: trusty
>
> To manage notifications about this bug go to:
> https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1501491/+subscriptions
>

[Stephen (sajames1958)]

I loaded the propsed fix on my system and both cases that failed before pass. No other issues seen.

[Tyler Hicks (tyhicks)]

The Ubuntu Security Team has produced some packages built with the proposed fix from Serge (thanks again, Serge!). They have not been tested by the Security Team yet but those affected by this bug may find the packages useful. They can be found in:

  https://launchpad.net/~ubuntu-security-proposed/+archive/ubuntu/ppa/+packages

IMPORTANT: You should not add this PPA to your apt sources.list file. Please only pull down the specific binary packages. The Security Team uploads experimental packages to this PPA and we cannot provide any guarantees regarding the contents of this PPA.

[Goacid (goacid)]

Hi

I've just installed package from ppa: and I still have error below :

    lxc-start 1444041875.028 ERROR lxc_utils - utils.c:ensure_not_symlink:1407 - Mount onto /usr/lib/x86_64-linux-gnu/lxc//var/lock resulted in /run/lock, does not match root /usr/lib/x86_64-linux-gnu/lxc

      lxc-start 1444041875.028 ERROR lxc_utils - utils.c:safe_mount:1438 - Mount of 'none' onto '/usr/lib/x86_64-linux-gnu/lxc//var/lock' was onto a symlink!
      lxc-start 1444041875.043 ERROR lxc_conf - conf.c:mount_entry:2051 - Invalid argument - failed to mount 'none' on '/usr/lib/x86_64-linux-gnu/lxc//var/lock'

No container are starting anymore

[Serge Hallyn (serge-hallyn)]

Hi,

Can you show the results of

dpkg -l | grep lxc

sudo cat /var/lib/lxc/<containername>/config

sudo lxc-start -n <containername> -l trace -o /dev/stdout -F

[Launchpad Janitor (janitor)]

This bug was fixed in the package lxc - 1.0.7-0ubuntu0.7

---------------
lxc (1.0.7-0ubuntu0.7) trusty-security; urgency=medium

  * REGRESSION FIX UPDATE:
    - Avoid /./ (LP: #1501491)

 -- Serge Hallyn <email address hidden> Wed, 30 Sep 2015 15:41:40 -0500