I get this same behavior under Debian buster:
# cat /var/lib/lxc/foobar/config
[...]
lxc.cap.drop = sys_admin
[...]
foobar ist a container with systemd inside.
# lxc-start foobar
lxc-start foobar -F
lxc-start: foobar: conf.c: lxc_mount_auto_mounts: 770 No such file or directory -
Failed to mount "/sys/fs/cgroup"
If I comment out "lxc.cap.drop = sys_admin" then the container succeeds to
start.
Has anybody succeeded in running systemd inside an LXC container with "lxc.cap.drop = sys_admin" ?
*t
