Re: [Lxc-users] cgroups permission problem
Quoting John (j...@neutrondawn.com): Greetings LXC, im having problems getting my container operational on centos. cgconfig and cgred are both running. the error is as follows during startup attempts: lxc-start 1381364626.764 DEBUGlxc_cgroup - cgroup_path_get: called for subsys cpuset name lxc/GE lxc-start 1381364626.764 DEBUGlxc_cgroup - using cgroup mounted at '/cgroup/cpuset' lxc-start 1381364626.764 DEBUGlxc_cgroup - cgroup_path_get: returning /cgroup/cpuset/lxc/GE for subsystem cpuset.cpus lxc-start 1381364626.764 ERRORlxc_cgroup - Permission denied - write /cgroup/cpuset/lxc/GE/cpuset.cpus : Permission denied lxc-start 1381364626.764 ERRORlxc_conf - Error setting cpuset.cpus to 0,1,2,3,4,5,6 for lxc/GE Whatis in /cgroup/cpuset/lxc/cpuset.cpus? Are you able to manually write to that file? -- October Webinars: Code for Performance Free Intel webinars can help you accelerate application performance. Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from the latest Intel processors and coprocessors. See abstracts and register http://pubads.g.doubleclick.net/gampad/clk?id=60134071iu=/4140/ostg.clktrk ___ Lxc-users mailing list Lxc-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/lxc-users
Re: [Lxc-users] cgroups permission problem
I am in fact able to write to the file. its initial state is empty. On 2013-10-10 09:24, Serge Hallyn wrote: Quoting John (j...@neutrondawn.com): Greetings LXC, im having problems getting my container operational on centos. cgconfig and cgred are both running. the error is as follows during startup attempts: lxc-start 1381364626.764 DEBUGlxc_cgroup - cgroup_path_get: called for subsys cpuset name lxc/GE lxc-start 1381364626.764 DEBUGlxc_cgroup - using cgroup mounted at '/cgroup/cpuset' lxc-start 1381364626.764 DEBUGlxc_cgroup - cgroup_path_get: returning /cgroup/cpuset/lxc/GE for subsystem cpuset.cpus lxc-start 1381364626.764 ERRORlxc_cgroup - Permission denied - write /cgroup/cpuset/lxc/GE/cpuset.cpus : Permission denied lxc-start 1381364626.764 ERRORlxc_conf - Error setting cpuset.cpus to 0,1,2,3,4,5,6 for lxc/GE Whatis in /cgroup/cpuset/lxc/cpuset.cpus? Are you able to manually write to that file? -- October Webinars: Code for Performance Free Intel webinars can help you accelerate application performance. Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from the latest Intel processors and coprocessors. See abstracts and register http://pubads.g.doubleclick.net/gampad/clk?id=60134071iu=/4140/ostg.clktrk ___ Lxc-users mailing list Lxc-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/lxc-users
Re: [Lxc-users] cgroups permission problem
Quoting John (j...@neutrondawn.com): I am in fact able to write to the file. its initial state is empty. The initial state of which file is empty - /cgroup/cpuset/lxc/cpuset.cpus, or /cgroup/cpuset/lxc/GE/cpuset.cpus? If the former, then that's the problem. That file should have been initialized earlier. /x/y/z/ is not allowed to use cpus which are not authorized for use by /x/y. On 2013-10-10 09:24, Serge Hallyn wrote: Quoting John (j...@neutrondawn.com): Greetings LXC, im having problems getting my container operational on centos. cgconfig and cgred are both running. the error is as follows during startup attempts: lxc-start 1381364626.764 DEBUGlxc_cgroup - cgroup_path_get: called for subsys cpuset name lxc/GE lxc-start 1381364626.764 DEBUGlxc_cgroup - using cgroup mounted at '/cgroup/cpuset' lxc-start 1381364626.764 DEBUGlxc_cgroup - cgroup_path_get: returning /cgroup/cpuset/lxc/GE for subsystem cpuset.cpus lxc-start 1381364626.764 ERRORlxc_cgroup - Permission denied - write /cgroup/cpuset/lxc/GE/cpuset.cpus : Permission denied lxc-start 1381364626.764 ERRORlxc_conf - Error setting cpuset.cpus to 0,1,2,3,4,5,6 for lxc/GE Whatis in /cgroup/cpuset/lxc/cpuset.cpus? Are you able to manually write to that file? -- October Webinars: Code for Performance Free Intel webinars can help you accelerate application performance. Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from the latest Intel processors and coprocessors. See abstracts and register http://pubads.g.doubleclick.net/gampad/clk?id=60134071iu=/4140/ostg.clktrk ___ Lxc-users mailing list Lxc-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/lxc-users
Re: [Lxc-users] cgroups permission problem
Serge, Sorry for the confusion, both files have been created and are in fact empty. This is after having removed any configuration constraint on processors in GE.conf. On 2013-10-10 10:03, Serge Hallyn wrote: Quoting John (j...@neutrondawn.com): I am in fact able to write to the file. its initial state is empty. The initial state of which file is empty - /cgroup/cpuset/lxc/cpuset.cpus, or /cgroup/cpuset/lxc/GE/cpuset.cpus? If the former, then that's the problem. That file should have been initialized earlier. /x/y/z/ is not allowed to use cpus which are not authorized for use by /x/y. On 2013-10-10 09:24, Serge Hallyn wrote: Quoting John (j...@neutrondawn.com): Greetings LXC, im having problems getting my container operational on centos. cgconfig and cgred are both running. the error is as follows during startup attempts: lxc-start 1381364626.764 DEBUGlxc_cgroup - cgroup_path_get: called for subsys cpuset name lxc/GE lxc-start 1381364626.764 DEBUGlxc_cgroup - using cgroup mounted at '/cgroup/cpuset' lxc-start 1381364626.764 DEBUGlxc_cgroup - cgroup_path_get: returning /cgroup/cpuset/lxc/GE for subsystem cpuset.cpus lxc-start 1381364626.764 ERRORlxc_cgroup - Permission denied - write /cgroup/cpuset/lxc/GE/cpuset.cpus : Permission denied lxc-start 1381364626.764 ERRORlxc_conf - Error setting cpuset.cpus to 0,1,2,3,4,5,6 for lxc/GE Whatis in /cgroup/cpuset/lxc/cpuset.cpus? Are you able to manually write to that file? -- October Webinars: Code for Performance Free Intel webinars can help you accelerate application performance. Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from the latest Intel processors and coprocessors. See abstracts and register http://pubads.g.doubleclick.net/gampad/clk?id=60134071iu=/4140/ostg.clktrk ___ Lxc-users mailing list Lxc-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/lxc-users
Re: [Lxc-users] cgroups permission problem
On Thu, 10 Oct 2013 09:03:36 -0500 Serge Hallyn serge.hal...@ubuntu.com wrote: Quoting John (j...@neutrondawn.com): I am in fact able to write to the file. its initial state is empty. The initial state of which file is empty - /cgroup/cpuset/lxc/cpuset.cpus, or /cgroup/cpuset/lxc/GE/cpuset.cpus? If the former, then that's the problem. That file should have been initialized earlier. /x/y/z/ is not allowed to use cpus which are John, are you perhaps running on an older kernel that doesn't have clone_children? lxc relies on this to propagate values down the heirarchy. not authorized for use by /x/y. On 2013-10-10 09:24, Serge Hallyn wrote: Quoting John (j...@neutrondawn.com): Greetings LXC, im having problems getting my container operational on centos. cgconfig and cgred are both running. the error is as follows during startup attempts: lxc-start 1381364626.764 DEBUGlxc_cgroup - cgroup_path_get: called for subsys cpuset name lxc/GE lxc-start 1381364626.764 DEBUGlxc_cgroup - using cgroup mounted at '/cgroup/cpuset' lxc-start 1381364626.764 DEBUGlxc_cgroup - cgroup_path_get: returning /cgroup/cpuset/lxc/GE for subsystem cpuset.cpus lxc-start 1381364626.764 ERRORlxc_cgroup - Permission denied - write /cgroup/cpuset/lxc/GE/cpuset.cpus : Permission denied lxc-start 1381364626.764 ERRORlxc_conf - Error setting cpuset.cpus to 0,1,2,3,4,5,6 for lxc/GE Whatis in /cgroup/cpuset/lxc/cpuset.cpus? Are you able to manually write to that file? -- October Webinars: Code for Performance Free Intel webinars can help you accelerate application performance. Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from the latest Intel processors and coprocessors. See abstracts and register http://pubads.g.doubleclick.net/gampad/clk?id=60134071iu=/4140/ostg.clktrk ___ Lxc-users mailing list Lxc-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/lxc-users -- October Webinars: Code for Performance Free Intel webinars can help you accelerate application performance. Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from the latest Intel processors and coprocessors. See abstracts and register http://pubads.g.doubleclick.net/gampad/clk?id=60134071iu=/4140/ostg.clktrk ___ Lxc-users mailing list Lxc-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/lxc-users
Re: [Lxc-users] cgroups permission problem
On 2013-10-10 17:44, Dwight Engen wrote:
On Thu, 10 Oct 2013 09:03:36 -0500
Serge Hallyn serge.hal...@ubuntu.com wrote:
John, are you perhaps running on an older kernel that doesn't have
clone_children? lxc relies on this to propagate values down the
heirarchy.
Dear Serge, Dear Jon
On my Gentoo environment, i have to patch this for the lxc parent dir in my
starter script, because will not set in in the root cgroup dir after mounting -
even with the recent kernel 3.8.13. Did I/we miss a mount option?
[...]
( cd ${CGROUPPATH%/lxc} [ -f cgroup.clone_children ] echo 1
cgroup.clone_children )
[...]
greetings
Guido
--
October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from
the latest Intel processors and coprocessors. See abstracts and register
http://pubads.g.doubleclick.net/gampad/clk?id=60134071iu=/4140/ostg.clktrk
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users
Re: [Lxc-users] cgroups permission problem
On 2013-10-10 18:34, John wrote: Guido, Serge Thank you for your insight. the parent, /cgroup/cpuset/lxc, has cpuset.cpus however it hasnt been initialized to any number. my hypothesis is /cgroup/cpuset/lxc/GE/cpuset.cpus therefore cannot be set as its parent hasnt been initialized. im uncertain if clone_children is present, however i would suspect it is or else the qemu_kvm package for centos would run into serious problems. is there a means i can use to check the presence of this flag without fetching the source? Dear Jon, the pseudo-file cgroup.clone_children have to appear in the same way as cpuset.cpus or others. You may read it with 'cat /cgroups/cgroup.clone_childern' and set it via 'echo 1 /cgroups/cgroup.clone_childern' greetings Guido -- October Webinars: Code for Performance Free Intel webinars can help you accelerate application performance. Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from the latest Intel processors and coprocessors. See abstracts and register http://pubads.g.doubleclick.net/gampad/clk?id=60134071iu=/4140/ostg.clktrk ___ Lxc-users mailing list Lxc-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/lxc-users
Re: [Lxc-users] cgroups permission problem
Guido, Alas, this appears to be the problem. /cgroups/cgroup.clone_children does not exist. Thanks for the assistance, ill likely begin testing with a new kernel. A workaround for this problem in RHEL/Centos that sidesteps the kernel recompile issue is to permit containers to have access to all CPUs. this will result in oversubscription however. On 2013-10-10 12:40, Guido Jäkel wrote: On 2013-10-10 18:34, John wrote: Guido, Serge Thank you for your insight. the parent, /cgroup/cpuset/lxc, has cpuset.cpus however it hasnt been initialized to any number. my hypothesis is /cgroup/cpuset/lxc/GE/cpuset.cpus therefore cannot be set as its parent hasnt been initialized. im uncertain if clone_children is present, however i would suspect it is or else the qemu_kvm package for centos would run into serious problems. is there a means i can use to check the presence of this flag without fetching the source? Dear Jon, the pseudo-file cgroup.clone_children have to appear in the same way as cpuset.cpus or others. You may read it with 'cat /cgroups/cgroup.clone_childern' and set it via 'echo 1 /cgroups/cgroup.clone_childern' greetings Guido -- October Webinars: Code for Performance Free Intel webinars can help you accelerate application performance. Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from the latest Intel processors and coprocessors. See abstracts and register http://pubads.g.doubleclick.net/gampad/clk?id=60134071iu=/4140/ostg.clktrk ___ Lxc-users mailing list Lxc-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/lxc-users
Re: [Lxc-users] cgroups permission problem
Quoting John (j...@neutrondawn.com): Guido, Alas, this appears to be the problem. /cgroups/cgroup.clone_children does not exist. Thanks for the assistance, ill likely begin testing with a new kernel. A workaround for this problem in RHEL/Centos that sidesteps the kernel recompile issue is to permit containers to have access to all CPUs. this will result in oversubscription however. Note we *can* work around this in userspace by making sure that every time we create a cgroup, we check whether cpuset is mounted there and, if so, set cpus and mems. Obviously it would be nicer if we didn't have to add that code. (But patches welcome :) -- October Webinars: Code for Performance Free Intel webinars can help you accelerate application performance. Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from the latest Intel processors and coprocessors. See abstracts and register http://pubads.g.doubleclick.net/gampad/clk?id=60134071iu=/4140/ostg.clktrk ___ Lxc-users mailing list Lxc-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/lxc-users
