lsh does not call PAM, breaking unprivileged lxc containers
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
lsh-utils (Ubuntu) |
Triaged
|
Undecided
|
Unassigned |
Bug Description
Seems like I've hit the bug #1413927 but as requested in comments I'm filing new one.
lxc-start -n asterisk -l debug -F --logfile /dev/stdout
lxc-start 1434992414.067 INFO lxc_start_ui - lxc_start.
lxc-start 1434992414.067 INFO lxc_utils - utils.c:
lxc-start 1434992414.067 WARN lxc_confile - confile.
lxc-start 1434992414.069 INFO lxc_confile - confile.
lxc-start 1434992414.069 INFO lxc_confile - confile.
lxc-start 1434992414.069 WARN lxc_log - log.c:lxc_
lxc-start 1434992414.075 WARN lxc_cgmanager - cgmanager.
lxc-start 1434992414.076 WARN lxc_start - start.c:
lxc-start 1434992414.076 INFO lxc_lsm - lsm/lsm.
lxc-start 1434992414.076 INFO lxc_seccomp - seccomp.
lxc-start 1434992414.076 INFO lxc_seccomp - seccomp.
lxc-start 1434992414.076 INFO lxc_seccomp - seccomp.
lxc-start 1434992414.076 INFO lxc_seccomp - seccomp.
lxc-start 1434992414.076 INFO lxc_seccomp - seccomp.
lxc-start 1434992414.076 INFO lxc_seccomp - seccomp.
lxc-start 1434992414.077 INFO lxc_seccomp - seccomp.
lxc-start 1434992414.077 INFO lxc_seccomp - seccomp.
lxc-start 1434992414.077 INFO lxc_seccomp - seccomp.
lxc-start 1434992414.077 INFO lxc_seccomp - seccomp.
lxc-start 1434992414.077 INFO lxc_seccomp - seccomp.
lxc-start 1434992414.077 INFO lxc_seccomp - seccomp.
lxc-start 1434992414.077 INFO lxc_seccomp - seccomp.
lxc-start 1434992414.077 INFO lxc_seccomp - seccomp.
lxc-start 1434992414.077 INFO lxc_seccomp - seccomp.
lxc-start 1434992414.077 INFO lxc_seccomp - seccomp.
lxc-start 1434992414.077 INFO lxc_seccomp - seccomp.
lxc-start 1434992414.077 INFO lxc_seccomp - seccomp.
lxc-start 1434992414.077 INFO lxc_seccomp - seccomp.
lxc-start 1434992414.077 INFO lxc_seccomp - seccomp.
lxc-start 1434992414.077 INFO lxc_seccomp - seccomp.
lxc-start 1434992414.077 INFO lxc_seccomp - seccomp.
lxc-start 1434992414.077 INFO lxc_seccomp - seccomp.
lxc-start 1434992414.077 INFO lxc_seccomp - seccomp.
lxc-start 1434992414.077 INFO lxc_seccomp - seccomp.
lxc-start 1434992414.078 INFO lxc_seccomp - seccomp.
lxc-start 1434992414.078 INFO lxc_seccomp - seccomp.
lxc-start 1434992414.078 INFO lxc_seccomp - seccomp.
lxc-start 1434992414.078 INFO lxc_utils - utils.c:
lxc-start 1434992414.078 DEBUG lxc_start - start.c:
lxc-start 1434992414.080 DEBUG lxc_console - console.
lxc-start 1434992414.081 INFO lxc_caps - caps.c:
lxc-start 1434992414.081 DEBUG lxc_console - console.
lxc-start 1434992414.081 DEBUG lxc_console - console.
lxc-start 1434992414.081 DEBUG lxc_console - console.
lxc-start 1434992414.155 INFO lxc_start - start.c:
lxc-start 1434992414.157 DEBUG lxc_start - start.c:
lxc-start 1434992414.158 INFO lxc_start - start.c:
lxc-start 1434992414.158 INFO lxc_cgroup - cgroup.
lxc-start 1434992414.176 ERROR lxc_cgmanager - cgmanager.
lxc-start: cgmanager.c: lxc_cgmanager_
lxc-start 1434992414.177 INFO lxc_utils - utils.c:
lxc-start 1434992414.197 ERROR lxc_start - start.c:
lxc-start: start.c: __lxc_start: 1164 failed to spawn 'asterisk'
lxc-start 1434992414.197 INFO lxc_utils - utils.c:
lxc-start 1434992414.197 INFO lxc_utils - utils.c:
lxc-start 1434992414.199 ERROR lxc_start_ui - lxc_start.
lxc-start: lxc_start.c: main: 344 The container failed to start.
lxc-start 1434992414.200 ERROR lxc_start_ui - lxc_start.
lxc-start: lxc_start.c: main: 348 Additional information can be obtained by setting the --logfile and --logpriority options.
I have also added bridge configured with systemdnetworkd into /etc/lxc/
x veth ibr1 4
and corresponding file /etc/systemd/
[NetDev]
Name=ibr1
Kind=bridge
The container config:
# Distribution configuration
lxc.include = /usr/share/
lxc.include = /usr/share/
lxc.arch = x86_64
# Container specific configuration
lxc.include = /etc/lxc/
lxc.id_map = u 0 100000 65536
lxc.id_map = g 0 100000 65536
lxc.rootfs = /home/x/
lxc.utsname = asterisk
# Network configuration
lxc.network.type = veth
lxc.network.link = ibr1
lxc.network.flags = up
lxc.network.name = internal
lxc.network.ipv4 = 10.1.1.2/24
lxc.network.
That happens on x86_64 ubuntu 15.04 server btw. All the latest updates installed.