network-enabled LXC containers not starting with linux-image-2.6.32-32-generic (lucid)

[Maxime Besson]

Binary package hint: linux-image-2.6.32-32-generic

Trying to start LXC container yields the following result :

$ root@lxctest:~# lxc-start -n squeeze
lxc-start: failed to clone(0x6c020000): Invalid argument
lxc-start: Invalid argument - failed to fork into a new namespace
lxc-start: failed to spawn '/sbin/init'
lxc-start: No such file or directory - failed to remove cgroup '/cgroup/squeeze'

$ cat /var/lib/lxc/squeeze/config
# Container with network virtualized using a pre-configured bridge named br0 and
# veth pair virtual network devices
lxc.utsname = squeeze
lxc.network.type = veth
lxc.network.flags = up
lxc.network.hwaddr = 00:11:22:33:44:d
lxc.network.ipv4 = 192.168.122.13/24
lxc.network.link = virbr0
lxc.rootfs = /lxc/squeeze
lxc.mount = /var/lib/lxc/squeeze/fstab
lxc.tty = 8

# cat /var/lib/lxc/squeeze/fstab
none /lxc/squeeze/dev/pts devpts defaults 0 0
none /lxc/squeeze/proc proc defaults 0 0
none /lxc/squeeze/sys sysfs defaults 0 0
none /lxc/squeeze/dev/shm tmpfs defaults 0 0

# lxc-checkconfig
Kernel config /proc/config.gz not found, looking in other places...
Found kernel config file /boot/config-2.6.32-32-generic
--- Namespaces ---
Namespaces: enabled
Utsname namespace: enabled
Ipc namespace: enabled
Pid namespace: enabled
User namespace: enabled
Network namespace: disabled
Multiple /dev/pts instances: enabled

--- Control groups ---
Cgroup: enabled
Cgroup namespace: enabled
Cgroup device: enabled
Cgroup sched: enabled
Cgroup cpu account: enabled
Cgroup memory controller: enabled
Cgroup cpuset: enabled

--- Misc ---
Veth pair device: enabled
Macvlan: enabled
Vlan: enabled
File capabilities: enabled

# grep NET_NS /lib/modules/*/build/.config
/lib/modules/2.6.32-31-generic/build/.config:CONFIG_NET_NS=y
/lib/modules/2.6.32-32-generic/build/.config:# CONFIG_NET_NS is not set

On previous kernel versions, these containers had been working fine for several month now.

ProblemType: Bug
DistroRelease: Ubuntu 10.04
Package: linux-image-2.6.32-32-generic 2.6.32-32.62
Regression: Yes
Reproducible: Yes
ProcVersionSignature: Ubuntu 2.6.32-32.62-generic 2.6.32.38+drm33.16
Uname: Linux 2.6.32-32-generic x86_64
AlsaVersion: Advanced Linux Sound Architecture Driver Version 1.0.21.
AplayDevices:
 **** List of PLAYBACK Hardware Devices ****
 card 0: I82801AAICH [Intel 82801AA-ICH], device 0: Intel ICH [Intel 82801AA-ICH]
   Subdevices: 1/1
   Subdevice #0: subdevice #0
Architecture: amd64
AudioDevicesInUse:
 USER PID ACCESS COMMAND
 /dev/snd/controlC0: vobe 1591 F.... pulseaudio
CRDA: Error: [Errno 2] No such file or directory
Card0.Amixer.info:
 Card hw:0 'I82801AAICH'/'Intel 82801AA-ICH with STAC9700,83,84 at irq 21'
   Mixer name : 'SigmaTel STAC9700,83,84'
   Components : 'AC97a:83847600'
   Controls : 34
   Simple ctrls : 24
Date: Tue May 31 10:44:34 2011
HibernationDevice: RESUME=UUID=2b349ee1-dde6-4685-9fbc-b4765c97412e
Lsusb:
 Bus 001 Device 002: ID 80ee:0021
 Bus 001 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
MachineType: innotek GmbH VirtualBox
ProcCmdLine: BOOT_IMAGE=/boot/vmlinuz-2.6.32-32-generic root=UUID=2257ee15-e199-494c-9525-0c07a1341b2f ro splash quiet
ProcEnviron:
 LANG=en_US.utf8
 SHELL=/bin/bash
RelatedPackageVersions: linux-firmware 1.34.7
RfKill:

SourcePackage: linux
dmi.bios.date: 12/01/2006
dmi.bios.vendor: innotek GmbH
dmi.bios.version: VirtualBox
dmi.modalias: dmi:bvninnotekGmbH:bvrVirtualBox:bd12/01/2006:svninnotekGmbH:pnVirtualBox:pvr1.2:
dmi.product.name: VirtualBox
dmi.product.version: 1.2
dmi.sys.vendor: innotek GmbH

[Michael Crump (mcrump001)]

I am seeing this same problem with the pae kernel as well and lxc version 0.7.4. When I run lxc-checkconfig it shows the following:

--- Namespaces ---
Namespaces: enabled
Utsname namespace: enabled
Ipc namespace: enabled
Pid namespace: enabled
User namespace: enabled
Network namespace: missing
Multiple /dev/pts instances: enabled

--- Control groups ---
Cgroup: enabled
Cgroup namespace: enabled
Cgroup device: enabled
Cgroup sched: enabled
Cgroup cpu account: enabled
Cgroup memory controller: enabled
Cgroup cpuset: enabled

--- Misc ---
Veth pair device: enabled
Macvlan: enabled
Vlan: enabled
File capabilities: enabled
enabled

[Benjamin Fry (bfry)]

This is definitely a kernel issue, probably some options were changed for the recompile. I downgraded to 2.6.32-31 to get things functioning again.