Control: reassign -1 lxc

As discussed on #debian-release, I'm going to reassign this bug report to lxc as peb has plans to add a helper script which intends to improve the user experience when running unprivileged containers under cgroupv2.
Quoting the relevant part from IRC:

my reason for asking is that I'd like to add an helper script to the package
currently, under pure CGroups v2 systemd hosts, an unprivileged container can't 
be started without running a systemd-run --user command with some tweaks
I'd like to provide the users with a lxc-unpriv-start script that'll do the 
needed work or give them hints on what to do
anymore because systemd gets in the way. Using systemd for this,


[...]


A short summary: Debian bullseye switched to cgroupv2 which now makes it necessary to run lxc-start as unprivileged user via "systemd-run -p Delegate=yes". This in turn makes the lxc processes part of the systemd --user session, not the login session. Which in turn requires "linger" to enable daemon processes to persist once a user logs out.

Maybe I missed something and linger is the only option in this case (and lxc's README.Debian could have a note about this). Or maybe there is a different way to achieve what Matt is trying to do?





Attachment: OpenPGP_signature
Description: OpenPGP digital signature

Reply via email to