Nested lxd containers

[Simon Richardson]

When attempting to use focal (or eoan and greater) and targeting LXD to deploy to containers then it will fail with apparmour errors.

We've spoken with the LXD team and there isn't anything we can do atm.

See: https://discourse.juju.is/t/juju-is-not-using-existing-cloud-for-bundle-deploy-other-issues/3752

At the very least we should show better error messages about this scenario as you have to do some digging to find out why your charm/bundle won't deploy.

[Javier Añorga (javieranorgab)]

With juju version 2.9.3 and microstack cloud (ussuri 2021-05-01 (233)) nested lxd containers fail, following official Canonical's microstack installation steps and Juju integration (https://microstack.run/docs/using-juju). Note: official steps must be adapted to use focal series to get kubernetes-core deploying without editing the bundle.

Also following this (https://bugs.launchpad.net/juju/+bug/1569106) (with xenial series) I am also experiencing this issue with nested LXD containers.

[Pen Gale (pengale)]

This is an lxd issue, and not one that can be trivially resolved -- the app armor changes have their own justifications.

There's not too much we can do in Juju, other than implement the better error messaging.

Nested lxd does not work at present.