On Thursday, 30 June 2016, 11:36, Serge E. Hallyn <[email protected]> wrote:
On Thu, Jun 30, 2016 at 11:24:25AM +1000, Rob wrote:
> On 30/06/2016 10:36 AM, Serge E. Hallyn wrote:
> >Quoting Rob Edgerton ([email protected]):
> >> lxc-start 20160628155820.614 ERROR lxc_cgfsng -
> >>cgfsng.c:cgfsng_setup_limits:1662 - No such file or directory - Error
> >>setting cpuset.cpus to 1-3 for trusty_unp_ibvpn
> >ENOENT - that's unexpected...
> >
> >> lxc-start 20160628155820.615 ERROR lxc_start -
> >>start.c:lxc_spawn:1180 - failed to setup the cgroup limits for
> >>@virt-host:~$cgm --version
> >>0.29
> >Can you show 'dpkg -l | grep cgmanager' ?
> >
> >as well as cat /etc/*release
> >
> >Hi, For /proc/self/cgroup and /proc/self/mountinfo, we actually
> >need to see the contents. Can you show 'cat /proc/self/cgroup' and
> >'cat /proc/self/mountinfo'? -serge
> >_______________________________________________ lxc-users mailing
> >list [email protected]
> >http://lists.linuxcontainers.org/listinfo/lxc-users
> hi Serge,
> here is the follow up info (note that I cut the msg above in order
> to reduce size)
>
> $ dpkg -l | grep cgmanager
> ii cgmanager 0.39-2ubuntu5 amd64
> Central cgroup manager daemon
> ii libcgmanager0:amd64 0.39-2ubuntu5
> amd64 Central cgroup manager daemon (client library)
>
> $ cat /etc/*release
> DISTRIB_ID=Ubuntu
> DISTRIB_RELEASE=16.04
> DISTRIB_CODENAME=xenial
> DISTRIB_DESCRIPTION="Ubuntu 16.04 LTS"
> NAME="Ubuntu"
> VERSION="16.04 LTS (Xenial Xerus)"
> ID=ubuntu
> ID_LIKE=debian
> PRETTY_NAME="Ubuntu 16.04 LTS"
> VERSION_ID="16.04"
> HOME_URL="http://www.ubuntu.com/";
> SUPPORT_URL="http://help.ubuntu.com/";
> BUG_REPORT_URL="http://bugs.launchpad.net/ubuntu/";
> UBUNTU_CODENAME=xenial
>
>
> $ cat /proc/self/cgroup
> 11:blkio:/user.slice
> 10:hugetlb:/
> 9:freezer:/user/redger/1
> 8:pids:/user.slice/user-1000.slice
> 7:perf_event:/
> 6:cpu,cpuacct:/user.slice
> 5:net_cls,net_prio:/
> 4:devices:/user.slice
> 3:memory:/user/redger/1
> 2:cpuset:/
Oh, ok. I'm sorry, this should have been obvious to me from the start.
You need to edit /etc/pam.d/common-session and change the line that's
something like
session optional pam_cgfs.so -c freezer,memory,name=systemd
to add ",cpuset" at the end, i.e.
session optional pam_cgfs.so -c freezer,memory,name=systemd,cpuset
It has been removed from the default because on systems which do a lot
of cpu hotplugging it can be a problem: with the legacy (non-unified)
cpuset hierarchy, when you unplug a cpu that is part of /user, it gets
removed, but when you re-plug it it does not get re-added.
hi Serge,thanks for the response.
I updated pam.d/common-session# ================= RE Changed ================= #
#session optional pam_cgfs.so -c freezer,memory,name=systemd
session optional pam_cgfs.so -c freezer,memory,name=systemd,cpuset
# ================= RE Changed ================= #
then restarted, with similar result. Further, the config contains auth for
using USB devices too# USB devices
lxc.cgroup.devices.allow = c 10:200 rwm# CPU & Memory limits
lxc.cgroup.cpuset.cpus = 1-3
lxc.cgroup.cpu.shares = 256
lxc.cgroup.memory.limit_in_bytes = 4G
lxc.cgroup.blkio.weight = 500
Commenting out the first line still results in start failure, as do the other
lines. Even just uncommenting the memory.limit lines leads to failure with$
lxc-start -n trusty_unp_ibvpn -F
lxc-start: cgfsng.c: cgfsng_setup_limits: 1645 No devices cgroup setup for
trusty_unp_ibvpn
lxc-start: start.c: lxc_spawn: 1226 failed to setup the devices cgroup for
'trusty_unp_ibvpn'
lxc-start: start.c: __lxc_start: 1353 failed to spawn 'trusty_unp_ibvpn'
lxc-start: lxc_start.c: main: 344 The container failed to start.
lxc-start: lxc_start.c: main: 348 Additional information can be obtained by
setting the --logfile and --logpriority options.
here's a sample log sequence where ONLY "lxc.cgroup.memory.limit_in_bytes = 4G"
was uncommented
lxc-start 20160630023739.583 INFO lxc_conf -
conf.c:lxc_create_tty:3303 - tty's configured
lxc-start 20160630023739.583 INFO lxc_conf - conf.c:setup_tty:995 - 4
tty(s) has been setup
lxc-start 20160630023739.583 INFO lxc_conf -
conf.c:setup_personality:1393 - set personality to '0x0'
lxc-start 20160630023739.583 DEBUG lxc_conf - conf.c:setup_caps:2056 -
drop capability 'mac_admin' (33)
lxc-start 20160630023739.583 DEBUG lxc_conf - conf.c:setup_caps:2056 -
drop capability 'mac_override' (32)
lxc-start 20160630023739.583 DEBUG lxc_conf - conf.c:setup_caps:2056 -
drop capability 'sys_time' (25)
lxc-start 20160630023739.583 DEBUG lxc_conf - conf.c:setup_caps:2056 -
drop capability 'sys_module' (16)
lxc-start 20160630023739.583 DEBUG lxc_conf - conf.c:setup_caps:2056 -
drop capability 'sys_rawio' (17)
lxc-start 20160630023739.583 DEBUG lxc_conf - conf.c:setup_caps:2065 -
capabilities have been setup
lxc-start 20160630023739.583 NOTICE lxc_conf - conf.c:lxc_setup:3839 -
'trusty_unp_ibvpn' is setup.
lxc-start 20160630123739.583 ERROR lxc_cgfsng -
cgfsng.c:cgfsng_setup_limits:1645 - No devices cgroup setup for trusty_unp_ibvpn
lxc-start 20160630123739.583 ERROR lxc_start - start.c:lxc_spawn:1226
- failed to setup the devices cgroup for 'trusty_unp_ibvpn'
lxc-start 20160630123739.583 ERROR lxc_start -
start.c:__lxc_start:1353 - failed to spawn 'trusty_unp_ibvpn'
lxc-start 20160630123739.633 INFO lxc_conf -
conf.c:run_script_argv:367 - Executing script
'/usr/share/lxcfs/lxc.reboot.hook' for container 'trusty_unp_ibvpn', config
section 'lxc'
lxc-start 20160630123740.147 ERROR lxc_start_ui - lxc_start.c:main:344
- The container failed to start.
lxc-start 20160630123740.147 ERROR lxc_start_ui - lxc_start.c:main:348
- Additional information can be obtained by setting the --logfile and
--logpriority options.
_______________________________________________
lxc-users mailing list
[email protected]
http://lists.linuxcontainers.org/listinfo/lxc-users
