systemd 226 (moving pid 1 into /init.scope cgroup) breaks lxc-attach
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
cgmanager (Ubuntu) |
Fix Released
|
High
|
Unassigned | ||
Vivid |
New
|
Undecided
|
Unassigned | ||
Wily |
New
|
Undecided
|
Unassigned | ||
docker (Debian) |
Fix Released
|
Unknown
|
|||
lxc (Ubuntu) |
Fix Released
|
High
|
Unassigned | ||
Vivid |
Fix Released
|
Undecided
|
Unassigned | ||
Wily |
Fix Released
|
Undecided
|
Unassigned | ||
lxcfs (Ubuntu) |
Fix Released
|
High
|
Unassigned | ||
Vivid |
New
|
Undecided
|
Unassigned | ||
Wily |
New
|
Undecided
|
Unassigned |
Bug Description
Once systemd 226 is installed in an unprivileged Debian Sid container, lxc-attach no-longer functions:
% lxc-attach -n siddy
lxc-attach: cgmanager.c: lxc_cgmanager_
lxc-attach: cgmanager.c: cgm_attach: 1460 Failed to enter group /user.slice/
lxc-attach: attach.c: lxc_attach: 909 error communicating with child process
% journalctl -u cgmanager | tail -n 1
Sep 18 20:20:44 astoria cgmanager[1169]: cgmanager:
Full walkthrough:
% lxc-create -n siddy -t download -- -d debian -r sid -a amd64
Using image from local cache
Unpacking the rootfs
...
% lxc-start -n siddy
% lxc-attach -n siddy
root@siddy:/# apt-get update
Get:1 http://
...
Get:7 http://
Fetched 13.2 MB in 3s (3789 kB/s)
Reading package lists... Done
root@siddy:/# apt-get install systemd
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following extra packages will be installed:
libsystemd0
Suggested packages:
systemd-ui systemd-container
Recommended packages:
libpam-systemd dbus
The following packages will be upgraded:
libsystemd0 systemd
2 upgraded, 0 newly installed, 0 to remove and 47 not upgraded.
Need to get 3668 kB of archives.
After this operation, 1100 kB disk space will be freed.
Do you want to continue? [Y/n]
Get:1 http://
Get:2 http://
...
Setting up systemd (226-2) ...
Installing new version of config file /etc/X11/
Installing new version of config file /etc/dbus-
addgroup: The group `systemd-journal' already exists as a system group. Exiting.
Failed to set capabilities on file `/usr/bin/
The value of the capability argument is not permitted for a file. Or the file is not a regular (non-symlink) file
Failed to execute operation: File exists
Removing obsolete conffile /etc/dbus-
root@siddy:/# exit
% lxc-attach -n siddy
lxc-attach: cgmanager.c: lxc_cgmanager_
lxc-attach: cgmanager.c: cgm_attach: 1460 Failed to enter group /user.slice/
lxc-attach: attach.c: lxc_attach: 909 error communicating with child process
ProblemType: Bug
DistroRelease: Ubuntu 15.10
Package: lxc 1.1.3-0ubuntu1 [modified: usr/lib/
ProcVersionSign
Uname: Linux 4.2.0-10-generic x86_64
NonfreeKernelMo
ApportVersion: 2.18.1-0ubuntu1
Architecture: amd64
Date: Fri Sep 18 20:19:58 2015
SourcePackage: lxc
UpgradeStatus: Upgraded to wily on 2015-08-28 (20 days ago)
defaults.conf:
lxc.network.type = veth
lxc.network.link = lxcbr0
lxc.network.flags = up
lxc.network.hwaddr = 00:16:3e:xx:xx:xx
Changed in systemd (Debian): | |
status: | Unknown → New |
summary: |
- systemd 226-2 (debian sid) breaks lxc-attach + systemd 226 (moving pid 1 into /init.scope cgroup) breaks lxc-attach |
affects: | systemd (Ubuntu) → lxcfs (Ubuntu) |
Changed in cgmanager (Ubuntu): | |
status: | New → In Progress |
Changed in lxc (Ubuntu): | |
status: | New → Invalid |
Changed in lxcfs (Ubuntu): | |
status: | New → In Progress |
Changed in cgmanager (Ubuntu): | |
importance: | Undecided → High |
Changed in lxcfs (Ubuntu): | |
importance: | Undecided → High |
affects: | systemd (Debian) → docker (Debian) |
Changed in docker (Debian): | |
status: | New → Confirmed |
Changed in docker (Debian): | |
status: | Confirmed → Fix Released |
Changed in lxc (Ubuntu): | |
status: | Triaged → In Progress |
tags: |
added: verification-done removed: verification-needed |
tags: |
added: verification-done removed: verification-needed |
Hi,
I'm hoping to fix this with a cgmanager patch to tasks to escape
'init.scope'. I don't want the list of escapable cgroups to keep
growing, so we'll need to come up with something better long-term.