Following is the the lxc container journal during startup: Feb 22 01:31:18 lxc10000 systemd-journald[124]: Journal started Feb 22 01:31:18 lxc10000 mount[118]: mount: mqueue is already mounted or /dev/mqueue busy Feb 22 01:31:18 lxc10000 mount[121]: mount: permission denied Feb 22 01:31:18 lxc10000 mount[127]: mount: permission denied Feb 22 01:31:20 lxc10000 systemd[1]: Started Remount Root and Kernel File Systems. Feb 22 01:31:20 lxc10000 systemd[1]: dev-mqueue.mount: Mount process exited, code=exited status=32 Feb 22 01:31:20 lxc10000 systemd[1]: Failed to mount POSIX Message Queue File System. Feb 22 01:31:20 lxc10000 systemd[1]: dev-mqueue.mount: Unit entered failed state. Feb 22 01:31:20 lxc10000 systemd[1]: sys-kernel-debug.mount: Mount process exited, code=exited status=32 Feb 22 01:31:20 lxc10000 systemd[1]: Failed to mount Debug File System. Feb 22 01:31:20 lxc10000 systemd[1]: sys-kernel-debug.mount: Unit entered failed state. Feb 22 01:31:20 lxc10000 systemd[1]: dev-hugepages.mount: Mount process exited, code=exited status=32 Feb 22 01:31:20 lxc10000 systemd[1]: Failed to mount Huge Pages File System. Feb 22 01:31:20 lxc10000 systemd[1]: dev-hugepages.mount: Unit entered failed state. Feb 22 01:31:20 lxc10000 systemd[1]: Started Nameserver information manager. Feb 22 01:31:20 lxc10000 systemd[1]: Starting Load/Save Random Seed... Feb 22 01:31:20 lxc10000 systemd[1]: Reached target Local File Systems (Pre). Feb 22 01:31:20 lxc10000 systemd[1]: Reached target Local File Systems. Feb 22 01:31:20 lxc10000 systemd[1]: Starting Set console keymap... Feb 22 01:31:20 lxc10000 loadkeys[241]: Couldn't get a file descriptor referring to the console Feb 22 01:31:20 lxc10000 systemd[1]: Starting Raise network interfaces... Feb 22 01:31:20 lxc10000 systemd[1]: Starting Flush Journal to Persistent Storage... Feb 22 01:31:20 lxc10000 systemd[1]: Started Load/Save Random Seed. Feb 22 01:31:20 lxc10000 systemd[1]: console-setup.service: Main process exited, code=exited, status=1/FAILURE Feb 22 01:31:20 lxc10000 systemd[1]: console-setup.service: Failed to kill control group /user.slice/user-1000.slice/session-2.scope/lxc/lxc10000/system.slice/console-setup.service, ignoring: Invalid argument Feb 22 01:31:20 lxc10000 systemd[1]: console-setup.service: Failed to kill control group /user.slice/user-1000.slice/session-2.scope/lxc/lxc10000/system.slice/console-setup.service, ignoring: Invalid argument Feb 22 01:31:20 lxc10000 systemd[1]: Failed to start Set console keymap. Feb 22 01:31:20 lxc10000 systemd[1]: console-setup.service: Unit entered failed state. Feb 22 01:31:20 lxc10000 systemd[1]: console-setup.service: Failed with result 'exit-code'. Feb 22 01:31:20 lxc10000 systemd[1]: Started Flush Journal to Persistent Storage. Feb 22 01:31:20 lxc10000 dhclient[279]: Internet Systems Consortium DHCP Client 4.3.3 Feb 22 01:31:20 lxc10000 ifup[252]: Internet Systems Consortium DHCP Client 4.3.3 Feb 22 01:31:20 lxc10000 ifup[252]: Copyright 2004-2015 Internet Systems Consortium. Feb 22 01:31:20 lxc10000 ifup[252]: All rights reserved. Feb 22 01:31:20 lxc10000 ifup[252]: For info, please visit https://www.isc.org/software/dhcp/ Feb 22 01:31:20 lxc10000 dhclient[279]: Copyright 2004-2015 Internet Systems Consortium. Feb 22 01:31:20 lxc10000 dhclient[279]: All rights reserved. Feb 22 01:31:20 lxc10000 dhclient[279]: For info, please visit https://www.isc.org/software/dhcp/ Feb 22 01:31:20 lxc10000 dhclient[279]: Feb 22 01:31:20 lxc10000 dhclient[279]: Listening on LPF/public/1a:a7:eb:36:64:74 Feb 22 01:31:20 lxc10000 dhclient[279]: Sending on LPF/public/1a:a7:eb:36:64:74 Feb 22 01:31:20 lxc10000 ifup[252]: Listening on LPF/public/1a:a7:eb:36:64:74 Feb 22 01:31:20 lxc10000 ifup[252]: Sending on LPF/public/1a:a7:eb:36:64:74 Feb 22 01:31:20 lxc10000 ifup[252]: Sending on Socket/fallback Feb 22 01:31:20 lxc10000 ifup[252]: DHCPDISCOVER on public to 255.255.255.255 port 67 interval 3 (xid=0x89db8677) Feb 22 01:31:20 lxc10000 dhclient[279]: Sending on Socket/fallback Feb 22 01:31:20 lxc10000 dhclient[279]: DHCPDISCOVER on public to 255.255.255.255 port 67 interval 3 (xid=0x89db8677) Feb 22 01:31:20 lxc10000 systemd[1]: Starting Create Volatile Files and Directories... Feb 22 01:31:20 lxc10000 systemd[1]: Started Create Volatile Files and Directories. Feb 22 01:31:20 lxc10000 systemd[1]: Reached target System Time Synchronized. Feb 22 01:31:20 lxc10000 systemd[1]: Starting Update UTMP about System Boot/Shutdown... Feb 22 01:31:20 lxc10000 systemd[1]: Started Update UTMP about System Boot/Shutdown. Feb 22 01:31:20 lxc10000 systemd[1]: Reached target System Initialization. Feb 22 01:31:20 lxc10000 systemd[1]: Started Daily Cleanup of Temporary Directories. Feb 22 01:31:20 lxc10000 systemd[1]: Reached target Timers. Feb 22 01:31:20 lxc10000 systemd[1]: Started Trigger resolvconf update for networkd DNS. Feb 22 01:31:20 lxc10000 systemd[1]: Reached target Paths. Feb 22 01:31:20 lxc10000 systemd[1]: Reached target Basic System. Feb 22 01:31:20 lxc10000 systemd[1]: Starting getty on tty2-tty6 if dbus and logind are not available... Feb 22 01:31:20 lxc10000 systemd[1]: Starting LSB: Set the CPU Frequency Scaling governor to "ondemand"... Feb 22 01:31:20 lxc10000 systemd[1]: Started Regular background program processing daemon. Feb 22 01:31:20 lxc10000 cron[299]: (CRON) INFO (pidfile fd = 3) Feb 22 01:31:20 lxc10000 cron[299]: (CRON) INFO (Running @reboot jobs) Feb 22 01:31:20 lxc10000 systemd[1]: Starting Permit User Sessions... Feb 22 01:31:21 lxc10000 systemd[1]: Started Permit User Sessions. Feb 22 01:31:21 lxc10000 systemd[1]: Started LSB: Set the CPU Frequency Scaling governor to "ondemand". Feb 22 01:31:21 lxc10000 systemd[1]: Started getty on tty2-tty6 if dbus and logind are not available. Feb 22 01:31:21 lxc10000 dhclient[279]: DHCPREQUEST of 192.168.0.216 on public to 255.255.255.255 port 67 (xid=0x7786db89) Feb 22 01:31:21 lxc10000 ifup[252]: DHCPREQUEST of 192.168.0.216 on public to 255.255.255.255 port 67 (xid=0x7786db89) Feb 22 01:31:21 lxc10000 ifup[252]: DHCPOFFER of 192.168.0.216 from 192.168.0.2 Feb 22 01:31:21 lxc10000 dhclient[279]: DHCPOFFER of 192.168.0.216 from 192.168.0.2 Feb 22 01:31:21 lxc10000 ifup[252]: DHCPACK of 192.168.0.216 from 192.168.0.2 Feb 22 01:31:21 lxc10000 dhclient[279]: DHCPACK of 192.168.0.216 from 192.168.0.2 Feb 22 01:31:21 lxc10000 dhclient[279]: bound to 192.168.0.216 -- renewal in 110360 seconds. Feb 22 01:31:21 lxc10000 ifup[252]: bound to 192.168.0.216 -- renewal in 110360 seconds. Feb 22 01:31:21 lxc10000 systemd[1]: Started Raise network interfaces. Feb 22 01:31:21 lxc10000 systemd[1]: Reached target Network. Feb 22 01:31:21 lxc10000 systemd[1]: Starting OpenBSD Secure Shell server... Feb 22 01:31:21 lxc10000 sshd[363]: Server listening on 0.0.0.0 port 22. Feb 22 01:31:21 lxc10000 sshd[363]: Server listening on :: port 22. Feb 22 01:31:21 lxc10000 systemd[1]: Starting The PHP 7.0 FastCGI Process Manager... Feb 22 01:31:21 lxc10000 systemd[1]: Starting /etc/rc.local Compatibility... Feb 22 01:31:21 lxc10000 php-fpm[370]: [NOTICE] configuration file /etc/php/7.0/fpm/php-fpm.conf test is successful Feb 22 01:31:21 lxc10000 systemd[1]: Started Journal Remote Upload Service. Feb 22 01:31:21 lxc10000 systemd[1]: Started OpenBSD Secure Shell server. Feb 22 01:31:21 lxc10000 systemd[1]: Started /etc/rc.local Compatibility. Feb 22 01:31:21 lxc10000 php-fpm[378]: [NOTICE] fpm is running, pid 378 Feb 22 01:31:21 lxc10000 php-fpm[378]: [NOTICE] ready to handle connections Feb 22 01:31:21 lxc10000 php-fpm[378]: [NOTICE] systemd monitor interval set to 10000ms Feb 22 01:31:21 lxc10000 systemd[1]: Started Container Getty on /dev/pts/3. Feb 22 01:31:21 lxc10000 systemd[1]: Started Console Getty. Feb 22 01:31:21 lxc10000 systemd[1]: Started Container Getty on /dev/pts/0. Feb 22 01:31:21 lxc10000 systemd[1]: Started Container Getty on /dev/pts/1. Feb 22 01:31:21 lxc10000 systemd[1]: Started Container Getty on /dev/pts/2. Feb 22 01:31:21 lxc10000 systemd[1]: Reached target Login Prompts. Feb 22 01:31:21 lxc10000 systemd[1]: Started The PHP 7.0 FastCGI Process Manager. Feb 22 01:31:21 lxc10000 systemd[1]: Reached target Multi-User System. Feb 22 01:31:21 lxc10000 systemd[1]: Reached target Graphical Interface. Feb 22 01:31:21 lxc10000 systemd[1]: Starting Update UTMP about System Runlevel Changes... Feb 22 01:31:21 lxc10000 systemd[1]: systemd-update-utmp-runlevel.service: Failed to kill control group /user.slice/user-1000.slice/session-2.scope/lxc/lxc10000/system.slice/systemd-update-utmp-runlevel.service, ignoring: Invalid argument Feb 22 01:31:21 lxc10000 systemd[1]: systemd-update-utmp-runlevel.service: Failed to kill control group /user.slice/user-1000.slice/session-2.scope/lxc/lxc10000/system.slice/systemd-update-utmp-runlevel.service, ignoring: Invalid argument Feb 22 01:31:21 lxc10000 systemd[1]: systemd-update-utmp-runlevel.service: Failed to kill control group /user.slice/user-1000.slice/session-2.scope/lxc/lxc10000/system.slice/systemd-update-utmp-runlevel.service, ignoring: Invalid argument Feb 22 01:31:21 lxc10000 systemd[1]: systemd-update-utmp-runlevel.service: Failed to kill control group /user.slice/user-1000.slice/session-2.scope/lxc/lxc10000/system.slice/systemd-update-utmp-runlevel.service, ignoring: Invalid argument Feb 22 01:31:21 lxc10000 systemd[1]: Started Update UTMP about System Runlevel Changes. Feb 22 01:31:21 lxc10000 systemd[1]: Startup finished in 3.365s.
> On Feb 22, 2016, at 02:46, John Siu <[email protected]> wrote: > > OS: Ubuntu 16.04 > LXC: 2.0.0-rc1 > > Following are from host journal when starting up a lxc container: > > Feb 22 01:31:18 JS-HP cgmanager[2978]: cgmanager:do_create_main: pid 18926 > (uid 1000 gid 1000) may not create under > /run/cgmanager/fs/blkio/user.slice/lxc > Feb 22 01:31:18 JS-HP cgmanager[2978]: cgmanager:do_create_main: pid 18926 > (uid 1000 gid 1000) may not create under > /run/cgmanager/fs/cpuacct/user.slice/lxc > Feb 22 01:31:18 JS-HP cgmanager[2978]: cgmanager:do_create_main: pid 18926 > (uid 1000 gid 1000) may not create under /run/cgmanager/fs/cpuset/lxc > Feb 22 01:31:18 JS-HP cgmanager[2978]: cgmanager:do_create_main: pid 18926 > (uid 1000 gid 1000) may not create under > /run/cgmanager/fs/devices/user.slice/lxc > Feb 22 01:31:18 JS-HP cgmanager[2978]: cgmanager:do_create_main: pid 18926 > (uid 1000 gid 1000) may not create under /run/cgmanager/fs/hugetlb/lxc > Feb 22 01:31:18 JS-HP cgmanager[2978]: cgmanager:do_create_main: pid 18926 > (uid 1000 gid 1000) may not create under /run/cgmanager/fs/net_prio/lxc > Feb 22 01:31:18 JS-HP cgmanager[2978]: cgmanager:do_create_main: pid 18926 > (uid 1000 gid 1000) may not create under /run/cgmanager/fs/perf_event/lxc > Feb 22 01:31:18 JS-HP cgmanager[2978]: cgmanager:do_create_main: pid 18926 > (uid 1000 gid 1000) may not create under > /run/cgmanager/fs/pids/user.slice/user-1000.slice/session-2.scope/lxc > Feb 22 01:31:18 JS-HP cgmanager[2978]: cgmanager:do_create_main: pid 18930 > (uid 1000 gid 1000) may not create under > /run/cgmanager/fs/blkio/user.slice/lxc > Feb 22 01:31:18 JS-HP cgmanager[2978]: cgmanager:do_create_main: pid 18930 > (uid 1000 gid 1000) may not create under > /run/cgmanager/fs/cpuacct/user.slice/lxc > Feb 22 01:31:18 JS-HP cgmanager[2978]: cgmanager:do_create_main: pid 18930 > (uid 1000 gid 1000) may not create under /run/cgmanager/fs/cpuset/lxc > Feb 22 01:31:18 JS-HP cgmanager[2978]: cgmanager:do_create_main: pid 18930 > (uid 1000 gid 1000) may not create under > /run/cgmanager/fs/devices/user.slice/lxc > Feb 22 01:31:18 JS-HP cgmanager[2978]: cgmanager:do_create_main: pid 18930 > (uid 1000 gid 1000) may not create under /run/cgmanager/fs/hugetlb/lxc > Feb 22 01:31:18 JS-HP cgmanager[2978]: cgmanager:do_create_main: pid 18930 > (uid 1000 gid 1000) may not create under /run/cgmanager/fs/net_prio/lxc > Feb 22 01:31:18 JS-HP cgmanager[2978]: cgmanager:do_create_main: pid 18930 > (uid 1000 gid 1000) may not create under /run/cgmanager/fs/perf_event/lxc > Feb 22 01:31:18 JS-HP cgmanager[2978]: cgmanager:do_create_main: pid 18930 > (uid 1000 gid 1000) may not create under > /run/cgmanager/fs/pids/user.slice/user-1000.slice/session-2.scope/lxc > Feb 22 01:31:18 JS-HP cgmanager[2978]: cgmanager:do_create_main: pid 18936 > (uid 1000 gid 1000) may not create under > /run/cgmanager/fs/blkio/user.slice/lxc > Feb 22 01:31:18 JS-HP cgmanager[2978]: cgmanager:do_create_main: pid 18935 > (uid 1000 gid 1000) may not create under > /run/cgmanager/fs/blkio/user.slice/lxc > Feb 22 01:31:18 JS-HP cgmanager[2978]: cgmanager:do_create_main: pid 18936 > (uid 1000 gid 1000) may not create under > /run/cgmanager/fs/cpuacct/user.slice/lxc > Feb 22 01:31:18 JS-HP cgmanager[2978]: cgmanager:do_create_main: pid 18935 > (uid 1000 gid 1000) may not create under > /run/cgmanager/fs/cpuacct/user.slice/lxc > Feb 22 01:31:18 JS-HP cgmanager[2978]: cgmanager:do_create_main: pid 18936 > (uid 1000 gid 1000) may not create under /run/cgmanager/fs/cpuset/lxc > Feb 22 01:31:18 JS-HP cgmanager[2978]: cgmanager:do_create_main: pid 18935 > (uid 1000 gid 1000) may not create under /run/cgmanager/fs/cpuset/lxc > Feb 22 01:31:18 JS-HP cgmanager[2978]: cgmanager:do_create_main: pid 18936 > (uid 1000 gid 1000) may not create under > /run/cgmanager/fs/devices/user.slice/lxc > Feb 22 01:31:18 JS-HP cgmanager[2978]: cgmanager:do_create_main: pid 18935 > (uid 1000 gid 1000) may not create under > /run/cgmanager/fs/devices/user.slice/lxc > Feb 22 01:31:18 JS-HP cgmanager[2978]: cgmanager:do_create_main: pid 18936 > (uid 1000 gid 1000) may not create under /run/cgmanager/fs/hugetlb/lxc > Feb 22 01:31:18 JS-HP cgmanager[2978]: cgmanager:do_create_main: pid 18935 > (uid 1000 gid 1000) may not create under /run/cgmanager/fs/hugetlb/lxc > Feb 22 01:31:18 JS-HP cgmanager[2978]: cgmanager:do_create_main: pid 18936 > (uid 1000 gid 1000) may not create under /run/cgmanager/fs/net_prio/lxc > Feb 22 01:31:18 JS-HP cgmanager[2978]: cgmanager:do_create_main: pid 18935 > (uid 1000 gid 1000) may not create under /run/cgmanager/fs/net_prio/lxc > Feb 22 01:31:18 JS-HP cgmanager[2978]: cgmanager:do_create_main: pid 18936 > (uid 1000 gid 1000) may not create under /run/cgmanager/fs/perf_event/lxc > Feb 22 01:31:18 JS-HP cgmanager[2978]: cgmanager:do_create_main: pid 18935 > (uid 1000 gid 1000) may not create under /run/cgmanager/fs/perf_event/lxc > Feb 22 01:31:18 JS-HP cgmanager[2978]: cgmanager:do_create_main: pid 18936 > (uid 1000 gid 1000) may not create under > /run/cgmanager/fs/pids/user.slice/user-1000.slice/session-2.scope/lxc > Feb 22 01:31:18 JS-HP cgmanager[2978]: cgmanager:do_create_main: pid 18935 > (uid 1000 gid 1000) may not create under > /run/cgmanager/fs/pids/user.slice/user-1000.slice/session-2.scope/lxc > Feb 22 01:31:18 JS-HP kernel: IPv6: ADDRCONF(NETDEV_UP): vethPYRIGJ: link is > not ready > Feb 22 01:31:18 JS-HP kernel: device vethPYRIGJ entered promiscuous mode > Feb 22 01:31:18 JS-HP kernel: public: renamed from vethPYRIGJp > Feb 22 01:31:18 JS-HP kernel: IPv6: ADDRCONF(NETDEV_UP): veth9SIJ98: link is > not ready > Feb 22 01:31:18 JS-HP kernel: device veth9SIJ98 entered promiscuous mode > Feb 22 01:31:18 JS-HP kernel: mgmt: port 2(veth9SIJ98) entered forwarding > state > Feb 22 01:31:18 JS-HP kernel: mgmt: port 2(veth9SIJ98) entered forwarding > state > Feb 22 01:31:18 JS-HP kernel: mgmt: renamed from veth9SIJ98p > Feb 22 01:31:18 JS-HP systemd-udevd[19248]: Could not generate persistent MAC > address for vethM46DG6p: No such file or directory > Feb 22 01:31:18 JS-HP kernel: IPv6: ADDRCONF(NETDEV_UP): vethM46DG6: link is > not ready > Feb 22 01:31:18 JS-HP kernel: device vethM46DG6 entered promiscuous mode > Feb 22 01:31:18 JS-HP kernel: private0: port 2(vethM46DG6) entered forwarding > state > Feb 22 01:31:18 JS-HP kernel: private0: port 2(vethM46DG6) entered forwarding > state > Feb 22 01:31:18 JS-HP kernel: private: renamed from vethM46DG6p > Feb 22 01:31:18 JS-HP kernel: mgmt: port 2(veth9SIJ98) entered disabled state > Feb 22 01:31:18 JS-HP kernel: private0: port 2(vethM46DG6) entered disabled > state > Feb 22 01:31:18 JS-HP kernel: IPv6: ADDRCONF(NETDEV_CHANGE): vethPYRIGJ: link > becomes ready > Feb 22 01:31:18 JS-HP kernel: public: port 2(vethPYRIGJ) entered forwarding > state > Feb 22 01:31:18 JS-HP kernel: public: port 2(vethPYRIGJ) entered forwarding > state > Feb 22 01:31:18 JS-HP kernel: IPv6: ADDRCONF(NETDEV_CHANGE): veth9SIJ98: link > becomes ready > Feb 22 01:31:18 JS-HP kernel: mgmt: port 2(veth9SIJ98) entered forwarding > state > Feb 22 01:31:18 JS-HP kernel: mgmt: port 2(veth9SIJ98) entered forwarding > state > Feb 22 01:31:18 JS-HP kernel: IPv6: ADDRCONF(NETDEV_CHANGE): vethM46DG6: link > becomes ready > Feb 22 01:31:18 JS-HP kernel: private0: port 2(vethM46DG6) entered forwarding > state > Feb 22 01:31:18 JS-HP kernel: private0: port 2(vethM46DG6) entered forwarding > state > Feb 22 01:31:18 JS-HP audit[18945]: AVC apparmor="DENIED" operation="mount" > info="failed type match" error=-13 profile="lxc-container-default" > name="/sys/fs/cgroup/" pid=18945 comm="systemd" flags="ro, nosuid, nodev, > noexec, remount, strictatime" > Feb 22 01:31:18 JS-HP kernel: audit: type=1400 audit(1456122678.561:43): > apparmor="DENIED" operation="mount" info="failed type match" error=-13 > profile="lxc-container-default" name="/sys/fs/cgroup/" pid=18945 > comm="systemd" flags="ro, nosuid, nodev, noexec, remount, strictatime" > Feb 22 01:31:21 JS-HP audit[20333]: AVC apparmor="DENIED" operation="mount" > info="failed flags match" error=-13 profile="lxc-container-default" name="/" > pid=20333 comm="(l-upload)" flags="rw, rslave" > Feb 22 01:31:21 JS-HP kernel: audit: type=1400 audit(1456122681.413:44): > apparmor="DENIED" operation="mount" info="failed flags match" error=-13 > profile="lxc-container-default" name="/" pid=20333 comm="(l-upload)" > flags="rw, rslave" > Feb 22 01:31:27 JS-HP kernel: mgmt: port 2(veth9SIJ98) entered forwarding > state > Feb 22 01:31:27 JS-HP kernel: private0: port 2(vethM46DG6) entered forwarding > state > Feb 22 01:31:33 JS-HP kernel: public: port 2(vethPYRIGJ) entered forwarding > state > > My main concern are those cgmanager and audit messages. > > Are they normal for unprivileged container and can be ignore?? > >
_______________________________________________ lxc-users mailing list [email protected] http://lists.linuxcontainers.org/listinfo/lxc-users
