After comparing the sysfs data, I don't see any differences w.r.t the physical paths in sysfs for the thunder nic. I wonder if there is something that detects "xenial" and does one thing, vs "bionic" despite the xenial host using the same kernel level. The apparmor denied on the namespaces only shows up under bionic but both kernels are the same level, so we should be seeing the same errors if both stacks were use the same cgroups. Can we check charms, juju or lxd w.r.t how it those cgroups are mounted? That may not be related but we're running out of differences. On Tue, May 22, 2018 at 9:21 PM, Jason Hobbs