Does not depend on, or even recommend, libpam-cgfs

[Florian Haas]

This package sets no Depends or even Recommends field for libpam-cgfs. libpam-cgfs is practically a requirement for running unprivileged LXC containers, and the cgroup errors resulting from its absence are somewhat obscure and difficult to troubleshoot, at least for LXC novices.

My suggestion would be to make lxcfs depend on libpam-cgfs, but failing that, recommending libpam-cgfs is probably the second-best option.

[Stéphane Graber (stgraber)]

The lxc package (lxc1) recommends libpam-cgfs and it's the right place for this to happen.

lxcfs absolutely doesn't need libpam-cgfs, in fact all LXD hosts run with lxcfs and do not have nor need libpam-cgfs.

libpam-cgfs is only relevant for unprivileged containers run by unprivileged users. This is only supported by lxc1, so having lxc1 recommend libpam-cgfs is correct.

[Florian Haas (fghaas)]

"libpam-cgfs is only relevant for unprivileged containers run by unprivileged users. This is only supported by lxc1" — can you please point me to the documentation where this is spelled out?

[Stéphane Graber (stgraber)]

The lxc1 package is the package providing the "lxc-*" tools that you're using.

lxc2 points to LXD which is a daemon running as root.

[Florian Haas (fghaas)]

$ lxc-ls --version
2.0.6
$ dpkg -S `which lxc-ls`
lxc1: /usr/bin/lxc-ls

So I'm using the lxc1 package to manage LXC 2.0.6. If I were using the lxc2 package I'd be managing LXD.

(Just noting this down here in the hope it's useful to others stumbling over these issues, because quite frankly, the package naming is extremely confusing.)