Package: lxc
Version: 0.9.0-12
Severity: normal

Hi,

I'm using lxc 0.9.0-12 from experimental on Debian sid. After having
created a container I cannot log in to it. After appending -x to the
shebang in /usr/share/lxc/templates/lxc-debconfig and using the readline
debconf-frontend (otherwise the console output would be overwritten) I
saw the following two pieces in the output:

+ chroot /var/lib/lxc/debian01/rootfs /usr/bin/env -i LC_ALL=C 
PATH=/usr/sbin:/usr/bin:/sbin:/bin TERM=rxvt-unicode DEBIAN_FRONTEND=readline 
DEBIAN_PRIORITY=critical DEBCONF_NONINTERACTIVE_SEEN=true 
DEBCONF_NOWARNINGS=true ftp_proxy= http_proxy= DEBIAN_FRONTEND=readline 
DEBIAN_PRIORITY=critical live-debconfig
chpasswd: (user josch ) pam_chauthtok() failed, error:
Authentication token manipulation error
chpasswd: (line 1, user josch ) password not changed


and


+ chroot /var/lib/lxc/debian01/rootfs /usr/bin/env -i LC_ALL=C 
PATH=/usr/sbin:/usr/bin:/sbin:/bin TERM=rxvt-unicode DEBIAN_FRONTEND=readline 
DEBIAN_PRIORITY=critical DEBCONF_NONINTERACTIVE_SEEN=true 
DEBCONF_NOWARNINGS=true ftp_proxy= http_proxy= DEBIAN_FRONTEND=readline 
DEBIAN_PRIORITY=critical live-debconfig
Usage: useradd [options] LOGIN
       useradd -D
       useradd -D [options]

Options:
  -b, --base-dir BASE_DIR       base directory for the home directory of the
                                new account
  -c, --comment COMMENT         GECOS field of the new account
  -d, --home-dir HOME_DIR       home directory of the new account
  -D, --defaults                print or change default useradd configuration
  -e, --expiredate EXPIRE_DATE  expiration date of the new account
  -f, --inactive INACTIVE       password inactivity period of the new account
  -g, --gid GROUP               name or ID of the primary group of the new
                                account
  -G, --groups GROUPS           list of supplementary groups of the new
                                account
  -h, --help                    display this help message and exit
  -k, --skel SKEL_DIR           use this alternative skeleton directory
  -K, --key KEY=VALUE           override /etc/login.defs defaults
  -l, --no-log-init             do not add the user to the lastlog and
                                faillog databases
  -m, --create-home             create the user's home directory
  -M, --no-create-home          do not create the user's home directory
  -N, --no-user-group           do not create a group with the same name as
                                the user
  -o, --non-unique              allow to create users with duplicate
                                (non-unique) UID
  -p, --password PASSWORD       encrypted password of the new account
  -r, --system                  create a system account
  -R, --root CHROOT_DIR         directory to chroot into
  -s, --shell SHELL             login shell of the new account
  -u, --uid UID                 user ID of the new account
  -U, --user-group              create a group with the same name as the user
  -Z, --selinux-user SEUSER     use a specific SEUSER for the SELinux user 
mapping



The passwd section from my preseed file reads:

live-debconfig live-debconfig/passwd/shadow boolean true
live-debconfig live-debconfig/passwd/root-password password root
live-debconfig live-debconfig/passwd/root-password-again password root
live-debconfig live-debconfig/passwd/user-name string josch
live-debconfig live-debconfig/passwd/user-fullname string josch
live-debconfig live-debconfig/passwd/user-password password secret
live-debconfig live-debconfig/passwd/user-password-again password secret


While this could just as well be a problem with live-debconfig or my
preseed file (is it?) I think that lxc should abort the container
creation process or at least output a warning to the user which informs
him that live-debconfig returned a non-zero exit status (I checked and
the first live-debconfig returns 1 while the second returns
2).

cheers, josch


-- 
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

Reply via email to