workspace-new fails with permission errors

[Stuart Bishop]

workspace-new is attempting to read lxc config files, but does not have permission to do so. /var/lib/lxc is only accessible to root:

stub@belch:~/src/canonical-mojo-specs$ mojo workspace-new /home/stub/src/canonical-mojo-specs/is/mojo-is-postgresql test-wip
Traceback (most recent call last):
  File "/usr/bin/mojo", line 9, in <module>
    load_entry_point('mojo==0.1.7', 'console_scripts', 'mojo')()
  File "/usr/lib/python2.7/dist-packages/mojo/cli.py", line 435, in main
    run_with_args(args)
  File "/usr/lib/python2.7/dist-packages/mojo/cli.py", line 411, in run_with_args
    args.func(args)
  File "/usr/lib/python2.7/dist-packages/mojo/cli.py", line 94, in create_workspace
    project = mojo.Project(project_name, series)
  File "/usr/lib/python2.7/dist-packages/mojo/__init__.py", line 259, in __init__
    self.container = container_class(self.name, self.series)
  File "/usr/lib/python2.7/dist-packages/mojo/contain.py", line 44, in __init__
    self.load_config()
  File "/usr/lib/python2.7/dist-packages/mojo/contain.py", line 32, in wrapped
    return method(self, *args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/mojo/contain.py", line 101, in load_config
    with open(os.path.join(self.LXC_DIR, self.container_name, "config")) as cf:
IOError: [Errno 13] Permission denied: '/var/lib/lxc/mojo-is-postgresql.trusty/config'

[Haw Loeung (hloeung)]

I think this is related to LP: #1412692 (Need to manually fix permissions after install). LP: #1420379 is of interest as well to use unprivileged containers.

[Robert Bruce Park (robru)]

This worked for me:

sudo chgrp mojo /var/lib/lxc
sudo chmod 750 /var/lib/lxc

[Paul Collins (pjdc)]

I've proposed a merge to detect and warn about this situation.

[Paul Collins (pjdc)]

My detect-and-merge branch has been merged. I'll mark this Fix Committed on the assumption that LXC is essentially in maintenance mode and that LXD is the way forward.