I can't start even a priveleged container (under root). Kernel: 4.19.0-4-amd64 #1 SMP Debian 4.19.28-2 (2019-03-15) x86_64 GNU/Linux
Problem was solved by downgrade to lxc/liblxc1 1:3.1.0+really3.0.3-8. Example of debug log in attachement. -- Eugene Berdnikov
lxc-start ipsec6 20190818184124.772 INFO lxccontainer - lxccontainer.c:do_lxcapi_start:971 - Set process title to [lxc monitor] /var/lib/lxc ipsec6 lxc-start ipsec6 20190818184124.773 INFO lsm - lsm/lsm.c:lsm_init:50 - LSM security driver AppArmor lxc-start ipsec6 20190818184124.773 DEBUG terminal - terminal.c:lxc_terminal_peer_default:676 - No such device - The process does not have a controlling terminal lxc-start ipsec6 20190818184124.774 INFO start - start.c:lxc_init:926 - Container "ipsec6" is initialized lxc-start ipsec6 20190818184124.774 DEBUG cgfsng - cgroups/cgfsng.c:cg_legacy_filter_and_set_cpus:495 - No isolated or offline cpus present in cpuset lxc-start ipsec6 20190818184124.774 DEBUG cgfsng - cgroups/cgfsng.c:cg_legacy_handle_cpuset_hierarchy:612 - "cgroup.clone_children" was already set to "1" lxc-start ipsec6 20190818184124.774 ERROR cgfsng - cgroups/cgfsng.c:mkdir_eexist_on_last:1277 - File exists - Failed to create directory "/sys/fs/cgroup/cpuset//lxc.monitor/ipsec6" lxc-start ipsec6 20190818184124.774 ERROR cgfsng - cgroups/cgfsng.c:monitor_create_path_for_hierarchy:1298 - Failed to create cgroup "/sys/fs/cgroup/cpuset//lxc.monitor/ipsec6" lxc-start ipsec6 20190818184124.774 ERROR cgfsng - cgroups/cgfsng.c:cgfsng_monitor_create:1388 - Failed to create cgroup "/sys/fs/cgroup/cpuset//lxc.monitor/ipsec6" lxc-start ipsec6 20190818184124.774 DEBUG cgfsng - cgroups/cgfsng.c:cg_legacy_filter_and_set_cpus:495 - No isolated or offline cpus present in cpuset lxc-start ipsec6 20190818184124.774 DEBUG cgfsng - cgroups/cgfsng.c:cg_legacy_handle_cpuset_hierarchy:612 - "cgroup.clone_children" was already set to "1" lxc-start ipsec6 20190818184124.774 ERROR cgfsng - cgroups/cgfsng.c:mkdir_eexist_on_last:1277 - File exists - Failed to create directory "/sys/fs/cgroup/cpuset//lxc.monitor/ipsec6-1" lxc-start ipsec6 20190818184124.774 ERROR cgfsng - cgroups/cgfsng.c:monitor_create_path_for_hierarchy:1298 - Failed to create cgroup "/sys/fs/cgroup/cpuset//lxc.monitor/ipsec6-1" lxc-start ipsec6 20190818184124.775 ERROR cgfsng - cgroups/cgfsng.c:cgfsng_monitor_create:1388 - Failed to create cgroup "/sys/fs/cgroup/cpuset//lxc.monitor/ipsec6-1" lxc-start ipsec6 20190818184124.775 DEBUG cgfsng - cgroups/cgfsng.c:cg_legacy_filter_and_set_cpus:495 - No isolated or offline cpus present in cpuset lxc-start ipsec6 20190818184124.775 DEBUG cgfsng - cgroups/cgfsng.c:cg_legacy_handle_cpuset_hierarchy:612 - "cgroup.clone_children" was already set to "1" lxc-start ipsec6 20190818184124.775 INFO cgfsng - cgroups/cgfsng.c:cgfsng_monitor_create:1403 - The monitor process uses "lxc.monitor/ipsec6-2" as cgroup lxc-start ipsec6 20190818184124.775 ERROR cgfsng - cgroups/cgfsng.c:__do_cgroup_enter:1498 - No space left on device - Failed to enter cgroup "/sys/fs/cgroup/cpuset//lxc.monitor/ipsec6-2/cgroup.procs" lxc-start ipsec6 20190818184124.775 ERROR start - start.c:__lxc_start:2004 - Failed to enter monitor cgroup lxc-start ipsec6 20190818184124.775 DEBUG lxccontainer - lxccontainer.c:wait_on_daemonized_start:839 - First child 918 exited lxc-start ipsec6 20190818184124.775 ERROR lxccontainer - lxccontainer.c:wait_on_daemonized_start:851 - Received container state "STOPPING" instead of "RUNNING" lxc-start ipsec6 20190818184124.776 ERROR lxc_start - tools/lxc_start.c:main:329 - The container failed to start lxc-start ipsec6 20190818184124.776 ERROR lxc_start - tools/lxc_start.c:main:332 - To get more details, run the container in foreground mode lxc-start ipsec6 20190818184124.776 ERROR lxc_start - tools/lxc_start.c:main:335 - Additional information can be obtained by setting the --logfile and --logpriority options lxc-start ipsec6 20190818184124.776 DEBUG cgfsng - cgroups/cgfsng.c:cg_legacy_filter_and_set_cpus:495 - No isolated or offline cpus present in cpuset lxc-start ipsec6 20190818184124.776 DEBUG cgfsng - cgroups/cgfsng.c:cg_legacy_handle_cpuset_hierarchy:612 - "cgroup.clone_children" was already set to "1" lxc-start ipsec6 20190818184124.776 WARN cgfsng - cgroups/cgfsng.c:cgfsng_monitor_destroy:1178 - No space left on device - Failed to move monitor 919 to "/sys/fs/cgroup/cpuset//lxc.pivot/cgroup.procs"