local provider deploys fail with 'install hook failed'
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
juju-core |
Fix Released
|
High
|
Tim Penhey | ||
1.16 |
Fix Released
|
High
|
Tim Penhey | ||
juju-core (Ubuntu) |
Fix Released
|
Undecided
|
Unassigned | ||
Saucy |
Fix Released
|
High
|
Unassigned | ||
Trusty |
Fix Released
|
Undecided
|
Unassigned |
Bug Description
[Impact]
Unable to deploy charms under local provider on Raring/Saucy hosts.
[Test Case]
juju bootstrap
juju deploy mysql
(fails)
[Regression Potential]
Scope limited to local provider so limited.
[Original Bug Report]
From within a LXC container, cgroup-lite failes to install. It appears that apparmor on the parent (Raring and Saucy thus far) is blocking the cgroup mount.
ubuntu@test2:~$ sudo apt-get -y install cgroup-lite
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following NEW packages will be installed:
cgroup-lite
0 upgraded, 1 newly installed, 0 to remove and 8 not upgraded.
Need to get 3,878 B of archives.
After this operation, 50.2 kB of additional disk space will be used.
Get:1 http://
Fetched 3,878 B in 0s (29.0 kB/s)
Selecting previously unselected package cgroup-lite.
(Reading database ... 47498 files and directories currently installed.)
Unpacking cgroup-lite (from .../cgroup-
Processing triggers for initramfs-tools ...
update-initramfs: Generating /boot/initrd.
Processing triggers for ureadahead ...
Setting up cgroup-lite (1.1.2) ...
<4>init: cgroup-lite pre-start process (2819) terminated with status 32
start: Job failed to start
invoke-rc.d: initscript cgroup-lite, action "start" failed.
dpkg: error processing cgroup-lite (--configure):
subprocess installed post-installation script returned error exit status 1
No apport report written because MaxReports is reached already
Errors were encountered while processing:
cgroup-lite
E: Sub-process /usr/bin/dpkg returned an error code (1)
ubuntu@test2:~$ dmesg | tail -n 10
[ 1065.404885] device vethG0iqqC left promiscuous mode
[ 1065.404887] lxcbr0: port 2(vethG0iqqC) entered disabled state
[ 1150.155838] device vethkiYHDA entered promiscuous mode
[ 1150.155892] IPv6: ADDRCONF(
[ 1150.169570] IPv6: ADDRCONF(
[ 1150.169598] lxcbr0: port 2(vethkiYHDA) entered forwarding state
[ 1150.169602] lxcbr0: port 2(vethkiYHDA) entered forwarding state
[ 1165.216112] lxcbr0: port 2(vethkiYHDA) entered forwarding state
[ 1191.444421] type=1400 audit(138334775
[ 1191.445808] type=1400 audit(138334775
Related branches
- Juju Engineering: Pending requested
-
Diff: 11 lines (+1/-0)1 file modifiedprovider/local/environ.go (+1/-0)
- Juju Engineering: Pending requested
-
Diff: 37 lines (+3/-2)3 files modifiedprovider/local/environ.go (+1/-0)
scripts/win-installer/setup.iss (+1/-1)
version/version.go (+1/-1)
summary: |
- app armor blocks cgroup-lite from mounting + aparmor blocks cgroup-lite from mounting |
summary: |
- aparmor blocks cgroup-lite from mounting + apparmor blocks cgroup-lite from mounting |
Changed in juju-core: | |
status: | New → Triaged |
importance: | Undecided → High |
tags: | added: local-provider |
Changed in juju-core: | |
milestone: | none → 1.17.0 |
Changed in juju-core: | |
status: | Triaged → In Progress |
assignee: | nobody → Tim Penhey (thumper) |
Changed in juju-core: | |
status: | In Progress → Fix Committed |
summary: |
- apparmor blocks cgroup-lite from mounting + local provider deploys fail with 'install hook failed' |
Changed in juju-core (Ubuntu Trusty): | |
status: | New → Fix Released |
description: | updated |
Changed in juju-core (Ubuntu Saucy): | |
importance: | Undecided → High |
no longer affects: | cgroup-lite (Ubuntu) |
no longer affects: | cgroup-lite (Ubuntu Saucy) |
no longer affects: | cgroup-lite (Ubuntu Trusty) |
tags: |
added: verification-done removed: verification-needed |
Changed in juju-core: | |
status: | Fix Committed → Fix Released |
This is not a bug. If you need to mount cgroups, then you must use the lxc-container- default- with-nesting profile.
(Hopefully this will all become moot with the nestable cgroup manager in the next ... short while)