Ah, You are a scholar and a gentleman Fajar. Your email just saved us untold
hours of toil. Now I see how those FS's are mounted, I wasn't aware of this
other fstab, I removed the noexec mount option and all is well now. We've
been tracking a related issues for 4 days now. Thank you!!
Incidentally, to your question, this is a 12.04 'ubuntu' template container
running under a 12.10 host (the application, cloudera/hadoop, was super
picky about versions).
David
From: Fajar A. Nugraha [mailto:l...@fajar.net]
Sent: Monday, April 22, 2013 3:02 PM
To: David Parks
Cc: LXC
Subject: Re: [Lxc-users] Can't execute a python shell script from /run/*
On Mon, Apr 22, 2013 at 2:44 PM, David Parks <davidpark...@yahoo.com> wrote:
We're running an app that installs some files to /run and needs to execute a
python script in that directory.
Even the root user is denied permission to execute the script, which tells
me that LXC (presumably AppArmor) is blocking access to running a script
under /run/*
Nope.
On my host:
tmpfs on /run type tmpfs (rw,noexec,nosuid,size=10%,mode=0755)
... which is mounted from /lib/init/fstab. noexec prevents running any
executable there.
Now what's interesting is that my ubuntu template (0.9.0-0ubuntu2)
specifically create an empty /lib/init/fstab, so you shouldn't even have a
/run mount entry in a container. What is the content of that file on your
container? Or perhaps you manually have an entry for /run on your
container's fstab?
--
Fajar
------------------------------------------------------------------------------
Precog is a next-generation analytics platform capable of advanced
analytics on semi-structured data. The platform includes APIs for building
apps and a phenomenal toolset for data science. Developers can use
our toolset for easy data analysis & visualization. Get a free account!
http://www2.precog.com/precogplatform/slashdotnewsletter
_______________________________________________
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users
