[lxc-users] nesting unprivileged containers on debian jessie:

[Christopher Klinge]

Hi,

 

I'm new to LXC and cgroups in general, so please cut me some slack if I'm missing something obvious.

 

I'm trying to run nested unprivileged containers (host->unprivileged->unprivileged) on Debian Jessie. The outer container runs just fine.

 

For future reference, the outer container is called "horde" and the inner "apache". The users owning the containers have the same name as their container.

 

Executing "apache@horde:~# lxc-start -n apache --logfile log --logpriority debug" results in these error messages:

 

      lxc-start 20160507202527.752 ERROR    lxc_cgfsng - cgfsng.c:parse_hierarchies:820 - Failed to find current cgroup for controller 'name=cgmanager.lower'
      lxc-start 20160507202527.758 ERROR    lxc_cgfsng - cgfsng.c:all_controllers_found:430 - no freezer controller mountpoint found
      lxc-start 20160507202527.758 ERROR    lxc_start - start.c:lxc_spawn:1079 - failed initializing cgroup support

 

I get this for the nested container's cgroups:

 

apache@horde:~$ cat /proc/self/cgroup
9:pids:/
8:perf_event:/horde/lxc/horde
7:net_cls,net_prio:/horde/lxc/horde
6:freezer:/horde/lxc/horde
5:devices:/horde/lxc/horde
4:blkio:/horde/lxc/horde
3:cpu,cpuacct:/horde/lxc/horde
2:cpuset:/horde/lxc/horde
1:name=systemd:/user.slice/user-1001.slice/session-c3.scope/lxc/horde/user.slice/user-1000.slice/session-1.scope

 

But there exists a cgmanager.lower in the outer container's cgroups:

 

root@horde:/root# ls /sys/fs/cgroup/
blkio  cgmanager  cgmanager.lower  cpu  cpu,cpuacct  cpuacct  cpuset  devices  freezer  net_cls  net_cls,net_prio  net_prio  perf_event  pids  systemd

 

I appreciate all input.

Cyclonit

_______________________________________________
lxc-users mailing list
lxc-users@lists.linuxcontainers.org
http://lists.linuxcontainers.org/listinfo/lxc-users