[Bug 1863772] Re: apparmor missing read permission for /var/lib/snapd/hostfs/usr/lib/os-release

2020-02-18 Thread Stéphane Graber via ubuntu-bugs
Re-opening as the analysis above is incorrect. The configure hook doesn't talk to LXD and doesn't use aa-exec so having the lxd-support interface wouldn't do anything for it. All the hook does is read/write files under ${SNAP_COMMON} and call snapctl. ** Changed in: snapd (Ubuntu) Status:

[Bug 1863772] Re: apparmor missing read permission for /var/lib/snapd/hostfs/usr/lib/os-release

2020-02-18 Thread Stéphane Graber via ubuntu-bugs
We figured it out, it's because the hooks are run inside the LXD snap mntns which we modify to have our own copy of etc. snapctl then ends up following a symlink in our modified /etc causing the issue. Adding system-observe to the hook should do the trick. ** Changed in: snapd Status: New

[Bug 1864303] Re: Removing the e1000e module causes a crash

2020-02-22 Thread Stéphane Graber via ubuntu-bugs
** Changed in: linux-5.4 (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1864303 Title: Removing the e1000e module causes a crash To manage notifications abou

[Bug 1811087] Re: [cosmic] lxd-tools replaced by lxd snap, which is missing 'fuidshift' binary

2019-10-20 Thread Stéphane Graber via ubuntu-bugs
Marking as "won't fix" as we can't really ship `fuidshift` as part of a strictly confined snap. Those wanting this tool are probably best building it with a simple `go get github.com/lxc/lxd/fuidshift`. In theory a separate deb package for it could be introduced, but it's not something that the LX

[Bug 1848587] Re: lxc 3.0.4-0ubuntu1 ADT test failure with linux 5.4.0-1.2

2019-10-20 Thread Stéphane Graber via ubuntu-bugs
Looking at the linked reports, it sounds like either /dev/network_latency doesn't exist in those systems (which would differ from standard kernel behavior on Ubuntu), or there is a legitimate issue with injecting that device afterwards. In either case, likely to be a kernel config change or a kern

[Bug 1848468] Re: package lxd 3.0.3-0ubuntu1~18.04.1 failed to install/upgrade: »neues lxd-Skript des Paketes pre-installation«-Unterprozess gab den Fehlerwert 1 zurück

2019-10-20 Thread Stéphane Graber via ubuntu-bugs
(It is annoying that there is no way to tell apport not to fire in such cases as it treats any dpkg failure as a bug, even when the failure was deliberate). -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bug

[Bug 1848794] Re: package lxd 3.0.3-0ubuntu1~18.04.1 failed to install/upgrade: new lxd package pre-installation script subprocess returned error exit status 1

2019-10-20 Thread Stéphane Graber via ubuntu-bugs
===> Aborting at user request So this was the user voluntarily aborting the upgrade following the inability to reach the store. Closing as invalid. ** Changed in: lxd (Ubuntu) Status: New => Invalid -- You received this bug notification because you are a member of Ubuntu Bugs, which is

[Bug 1848468] Re: package lxd 3.0.3-0ubuntu1~18.04.1 failed to install/upgrade: »neues lxd-Skript des Paketes pre-installation«-Unterprozess gab den Fehlerwert 1 zurück

2019-10-20 Thread Stéphane Graber via ubuntu-bugs
===> Aborting at user request So this was a manually interrupted upgrade due to inability to reach the store. Marking report as invalid. ** Changed in: lxd (Ubuntu) Status: New => Invalid -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed t

[Bug 1661447] Re: Arbitrary code execution in centos template

2020-02-05 Thread Stéphane Graber via ubuntu-bugs
We're marking this issue as "Fix Released" for LXC due to the removal of all those scripts from the standard LXC distribution, instead relying on distrobuilder for our users to generate custom LXC images (which can then be consumed by the lxc-local template). -- You received this bug notification

[Bug 1661447] Re: Arbitrary code execution in centos template

2020-02-05 Thread Stéphane Graber via ubuntu-bugs
Yeah, we were originally considering fixing all of the individual templates but frankly it was just too much of a mess of bad patterns from a variety of different authors with no real consistency. Instead what we came up with is distrobuilder (https://github.com/lxc/distrobuilder) which has now

[Bug 1868572] Re: [MIR] lxd-agent-loader

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
- "further confinement would be nice to have" This service is used to implement both the "lxc file" set of commands and the "lxc exec" set of commands. As such it needs to be able to read and write every file on the system and must be allowed to spawn unconfined commands. I don't see how either

[Bug 1868572] Re: [MIR] lxd-agent-loader

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
https://code.launchpad.net/~stgraber/ubuntu- seeds/+git/ubuntu/+merge/381171 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1868572 Title: [MIR] lxd-agent-loader To manage notifications about this b

[Bug 1868572] Re: [MIR] lxd-agent-loader

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
Promoting to main now before I can update ubuntu-meta for the seed change: Override component to main lxd-agent-loader 0.3 in focal: universe/admin -> main lxd-agent-loader 0.3 in focal amd64: universe/misc/optional/100% -> main lxd-agent-loader 0.3 in focal arm64: universe/misc/optional/100% -> m

[Bug 1868572] Re: [MIR] lxd-agent-loader

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
And uploaded the updated ubuntu-meta. Marking Fix released as the package is now in main. ** Changed in: lxd-agent-loader (Ubuntu) Status: In Progress => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bug

[Bug 1807628] Re: segfault at 0 ip 00007fe70ae4e3b2 sp 00007fe70884fb70 error 4 in liblxcfs.so[7fe70ae46000+f000]

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
** Changed in: lxcfs (Ubuntu) Status: In Progress => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1807628 Title: segfault at 0 ip 7fe70ae4e3b2 sp 7fe70884fb70 error 4 in

[Bug 1748790] Re: LXCFS upgrade request

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
** Changed in: lxcfs (Ubuntu) Status: New => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1748790 Title: LXCFS upgrade request To manage notifications about this bug go to: htt

[Bug 1860813] Re: LXC container reports spike in swap occasionally

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
** Changed in: lxcfs (Ubuntu) Status: New => Incomplete ** Changed in: lxcfs (Ubuntu) Status: Incomplete => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1860813 Title: L

[Bug 1698868] Re: /usr/bin/lxcfs:11:find_mounted_controller:cgfs_get_key:fc_may_access:cg_opendir:do_cg_opendir

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
** Changed in: lxcfs (Ubuntu) Status: New => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1698868 Title: /usr/bin/lxcfs:11:find_mounted_controller:cgfs_get_key:fc_may_access:cg

[Bug 1043004] Re: --bindhome option should be on lxc-create, not on lxc-ubuntu

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
With current LXC, those templates aren't really a thing anymore and most of our users use unprivileged containers which require quite a bit more involved configuration to pass a host directory than just injecting a mount entry. If this is a useful pattern for a user, writing a dedicated ".conf" fi

[Bug 1204662] Re: Language pack installation should be optional in ubuntu templates

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
We've moved away from those template scripts and are instead mostly relying on pre-made images. If building your own image through distrobuilder, you can add any additional packages you want at image building time. ** Changed in: lxc (Ubuntu) Status: Triaged => Won't Fix -- You received

[Bug 1182458] Re: ubuntu-cloud template: use simplestreams to add integrity verification

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
The current donwload template model to download those images does do both https and gpg validation. ** Changed in: lxc (Ubuntu) Status: Triaged => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launch

[Bug 1266808] Re: No mechanism to wait until a started container is ready and has finished booting

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
After years of running LXC and LXD, this is a somewhat recurring topic which has no good answers, all distros do it differently and the definition of ready differs even user to user. So from LXC's point of view, it's best to stay away from this and instead have users actually check for what they c

[Bug 1289482] Re: "iscsiadm discovery" succeeds but "iscsiadm login" fails inside ubuntu container.

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
I'm pretty sure we've completely disabled iscsid inside containers at this point due to its tight link to un-namespaced kernel features. Some specific server use cases should be possible, but anything client related is unlikely to succeed without some major kernel work. ** Changed in: lxc (Ubuntu

[Bug 1389864] Re: /etc/dnsmasq.d-available/lxc has no effect on a NetworkManager system

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
** Changed in: lxc (Ubuntu) Status: Confirmed => Triaged -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1389864 Title: /etc/dnsmasq.d-available/lxc has no effect on a NetworkManager system To

[Bug 1319525] Re: juju-local LXC containers hang due to AppArmor denial of rpc_pipefs mount with local charms

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
Been incomplete for years, closing. ** Changed in: lxc (Ubuntu) Status: Incomplete => Invalid -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1319525 Title: juju-local LXC containers hang due

[Bug 1450960] Re: dev file system is mounted without nosuid

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
Marking as triaged/wishlist for LXC, I can't think of a good reason not to mount with nosuid so such a patch would still be welcome. ** Changed in: lxc (Ubuntu) Status: Confirmed => Triaged -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed

[Bug 1396536] Re: lxc_start - Exec format error - failed to exec /sbin/init

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
We've not seen any other issue like this in the past 5 years, users usually know to pick something that they can actually run or know that they'll need to setup emulation. The error reported as weird as it is, is the expected behavior from the kernel when asked to run a foreign architecture binary

[Bug 1184936] Re: lxc-clone freezes if copied container is running [12.04 kernel 3.8]

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
** Changed in: lxc (Ubuntu) Status: Triaged => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1184936 Title: lxc-clone freezes if copied container is running [12.04 kernel 3.8] T

[Bug 1475751] Re: need phablet support for mods to /etc/lxc/lxc-usernet (vivid+stable ppa overaly)

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
** Changed in: lxc (Ubuntu) Status: Triaged => Won't Fix ** Changed in: canonical-devices-system-image Status: Confirmed => Invalid -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1475751

[Bug 1510108] Re: pre-installed lxc in cloud-image means loss of access to 10.0.X.0/24

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
** No longer affects: lxc (Ubuntu Wily) ** No longer affects: lxc (Ubuntu Xenial) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1510108 Title: pre-installed lxc in cloud-image means loss of access

[Bug 1530617] Re: FUSE in wily image with upstart installed causes chaos

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
** Changed in: lxc (Ubuntu) Status: Confirmed => Invalid ** Changed in: upstart (Ubuntu) Status: New => Won't Fix ** Changed in: linux (Ubuntu) Status: Incomplete => Invalid -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed t

[Bug 1452601] Re: vivid container's networking.service fails on boot with signal=PIPE

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
** Changed in: lxc (Ubuntu) Status: Confirmed => Won't Fix -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1452601 Title: vivid container's networking.service fails on boot with signal=PIPE To

[Bug 1519228] Re: Drop obsolete dh_installinit --upstart-only option

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
** Changed in: lxc (Ubuntu) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1519228 Title: Drop obsolete dh_installinit --upstart-only option To manage no

[Bug 1533244] Re: lxc-net thinks it's already running after it failed

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
Can someone check if that's still the case on something recent (3.x or 4.x)? ** Changed in: lxc (Ubuntu) Status: New => Incomplete ** Changed in: lxc (Ubuntu) Importance: Undecided => Low -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribe

[Bug 1532069] Re: Can't create a container with a loop backing store in 1.0.8

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
Has anyone seen this on something recent? Say LXC 3.x or 4.x? ** Changed in: lxc (Ubuntu) Status: New => Incomplete -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1532069 Title: Can't create

[Bug 1445539] Re: Can't create vivid lxc on trusty

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
We're now relying on lxc-download which doesn't have such problems. A backported version of lxc in trusty will work fine, though trusty is eol now. ** Changed in: lxc (Ubuntu) Status: Confirmed => Won't Fix -- You received this bug notification because you are a member of Ubuntu Bugs, whi

[Bug 1436722] Re: lxc domain setup instructions are incorrect

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
** Changed in: lxc (Ubuntu) Status: New => Triaged ** Changed in: lxc (Ubuntu) Importance: Undecided => Low -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1436722 Title: lxc domain setup i

[Bug 1441307] Re: lxc-clone makes new copies of each hardlinked file

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
Looking at the current LXC code, "-H" is part of our rsync flags now. ** Changed in: lxc (Ubuntu) Status: New => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1441307 Title: lxc

[Bug 1548731] Re: autostart on boot not working

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
This is fixed in modern versions of LXC using systemd. ** Changed in: lxc (Ubuntu) Status: New => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1548731 Title: autostart on boot

[Bug 1542438] Re: Python LXC api needs to be much better at error reporting

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
** Changed in: lxc (Ubuntu) Status: New => Won't Fix -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1542438 Title: Python LXC api needs to be much better at error reporting To manage notifica

[Bug 1544157] Re: lxc exec not working in xenial

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
** Changed in: lxc (Ubuntu) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1544157 Title: lxc exec not working in xenial To manage notifications about th

[Bug 1521151] Re: init: lxc-instance main process terminated with status 255

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
trusty is EOL and upstart is unsupported at this time. ** Changed in: lxc (Ubuntu) Status: New => Won't Fix -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1521151 Title: init: lxc-instance ma

[Bug 1537939] Re: apparmor profile for /var/lib/lxd denies mount operation on container creation

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
** Changed in: lxc (Ubuntu) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1537939 Title: apparmor profile for /var/lib/lxd denies mount operation on cont

[Bug 1472929] Re: undefined symbol: cgmanager_get_pid_cgroup_abs_sync

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
** Changed in: lxc (Ubuntu) Status: New => Invalid -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1472929 Title: undefined symbol: cgmanager_get_pid_cgroup_abs_sync To manage notifications ab

[Bug 1537689] Re: ubuntu template fro lxc messes up proxies

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
We don't ship those templates anymore, instead relying on pre-made images which will not have any proxy set in them. ** Changed in: lxc (Ubuntu) Status: New => Won't Fix -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://b

[Bug 1548497] Re: Cross-Container ARP Poisoning

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
As LXC doesn't directly manage bridges, we don't expect to do anything there, instead you can use network up/down hooks to manually setup filtering. LXD which does manage networks has support for ipv4, ipv6 and mac filtering on container interfaces. ** Changed in: lxc (Ubuntu) Status: New

[Bug 1359224] Re: Feature request: Add support for multiple bridges

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
** Changed in: lxc (Ubuntu) Status: New => Triaged ** Changed in: lxc (Ubuntu) Importance: Undecided => Wishlist -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1359224 Title: Feature reque

[Bug 1590547] Re: LXC package for trusty no longer has configuration files

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
** Changed in: lxc (Ubuntu) Status: Confirmed => Won't Fix -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1590547 Title: LXC package for trusty no longer has configuration files To manage not

[Bug 1586608] Re: Can not start nested trusty container inside trusty container

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
trusty is EOL, cgmanager/cgproxy are dead and nesting works way better now thanks to cgroup namespaces. ** Changed in: lxc (Ubuntu) Status: New => Won't Fix -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad

[Bug 1594751] Re: lxc-ls doesn't show nested containers when using an alternate lxc path

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
Is that still an issue with the modern lxc-ls (3.x or higher)? ** Changed in: lxc (Ubuntu) Status: New => Incomplete -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1594751 Title: lxc-ls does

[Bug 1556110] Re: package lxc (not installed) failed to install/upgrade: 子程序 已安裝的 post-installation script 傳回了錯誤退出狀態 1

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
** Changed in: lxc (Ubuntu) Status: New => Invalid -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1556110 Title: package lxc (not installed) failed to install/upgrade: 子程序 已安裝的 post- install

[Bug 1527374] Re: CVE-2015-8709

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
** No longer affects: lxc (Ubuntu) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1527374 Title: CVE-2015-8709 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source

[Bug 1511197] Re: PCI Device Access Through /proc/

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
** Changed in: lxc (Ubuntu) Status: Triaged => Fix Released ** Information type changed from Private Security to Public -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1511197 Title: PCI Devic

[Bug 1758380] Re: unpriveleged containers no longer could start due to start.c: lxc_spawn: 1555 Failed initializing cgroup support

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
** Changed in: lxc (Ubuntu) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1758380 Title: unpriveleged containers no longer could start due to start.c:

[Bug 1713674] Re: Starting Xenial lxc without cap_sysadmin fails

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
** Changed in: lxc (Ubuntu) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1713674 Title: Starting Xenial lxc without cap_sysadmin fails To manage notifi

[Bug 1684481] Re: KVM guest execution start apparmor blocks on /dev/ptmx now (regression?)

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
** Changed in: lxc (Ubuntu) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1684481 Title: KVM guest execution start apparmor blocks on /dev/ptmx now (re

[Bug 1674679] Re: lxc autopkgtest fails if http_proxy not set

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
** Changed in: lxc (Ubuntu) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1674679 Title: lxc autopkgtest fails if http_proxy not set To manage notificat

[Bug 1751780] Re: lxc-snapshot crashes when removing non-existing snapshot

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
** Changed in: lxc (Ubuntu) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1751780 Title: lxc-snapshot crashes when removing non-existing snapshot To man

[Bug 1549391] Re: /proc/sched_debug Information Leak

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
So options here are to apparmor block it, assuming that no common piece of software relies on it or to mask it with lxcfs (though that still allows access to user, so not necessarily ideal). I'm a bit confused as to why this data is accessible to unprivileged users in the first place, wouldn't tha

[Bug 1302053] Re: lxc-start with bad container name gives strange err message

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
** Changed in: lxc (Ubuntu) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1302053 Title: lxc-start with bad container name gives strange err message To

[Bug 1556931] Re: lxc: adt testing failing across the board on ppc64el

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
** Changed in: lxc (Ubuntu) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1556931 Title: lxc: adt testing failing across the board on ppc64el To manage

[Bug 1620774] Re: lxc container does not start: cgroupfs failed to detect cgroup metadata

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
** Changed in: lxc (Ubuntu) Status: New => Invalid -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1620774 Title: lxc container does not start: cgroupfs failed to detect cgroup metadata To m

[Bug 1614232] Re: python-lxc attach_wait prevents further keyboard input

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
Is that still a thing on 3.x or higher? ** Changed in: lxc (Ubuntu) Status: New => Incomplete -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1614232 Title: python-lxc attach_wait prevents fur

[Bug 1619238] Re: #cloud-config in user.user-data not running without ip

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
** Changed in: lxc (Ubuntu) Status: New => Invalid -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1619238 Title: #cloud-config in user.user-data not running without ip To manage notifications

[Bug 1532069] Re: Can't create a container with a loop backing store in 1.0.8

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
** Changed in: lxc (Ubuntu) Importance: Undecided => Medium -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1532069 Title: Can't create a container with a loop backing store in 1.0.8 To manage not

[Bug 1594751] Re: lxc-ls doesn't show nested containers when using an alternate lxc path

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
** Changed in: lxc (Ubuntu) Importance: Undecided => Low -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1594751 Title: lxc-ls doesn't show nested containers when using an alternate lxc path To

[Bug 1607096] Re: lxc-container-default-with-mounting profile systemd permission denied

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
report matches a setup for 16.04 with upstart instead of systemd and no cgroup-lite or similar pre-mounting the right cgroup, error is correct, host setup is likely the issue. ** Changed in: lxc (Ubuntu) Status: New => Invalid -- You received this bug notification because you are a member

[Bug 1699919] Re: lxc copy between hosts preserves original uid/gid

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
** Changed in: lxc (Ubuntu) Status: New => Invalid -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1699919 Title: lxc copy between hosts preserves original uid/gid To manage notifications abou

[Bug 1699592] Re: lxc-create fails for debian jessie armhf

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
We don't use those template scripts anymore and foreign architecture was never really supported in the first place (and indeed inconsistently between templates). ** Changed in: lxc (Ubuntu) Status: New => Won't Fix -- You received this bug notification because you are a member of Ubuntu B

[Bug 1699903] Re: lxc-sshd won't start with 2.0.8

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
** Changed in: lxc (Ubuntu) Status: New => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1699903 Title: lxc-sshd won't start with 2.0.8 To manage notifications about this bug go

[Bug 1673687] Re: lx-ls crashes and dumps core

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
** Changed in: lxc (Ubuntu) Status: New => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1673687 Title: lx-ls crashes and dumps core To manage notifications about this bug go to

[Bug 1625235] Re: lxc doesn't follow xdg basedir spec if XDG_DATA_HOME is set

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
** Changed in: lxc (Ubuntu) Status: New => Triaged ** Changed in: lxc (Ubuntu) Importance: Undecided => Medium -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1625235 Title: lxc doesn't fol

[Bug 1715537] Re: package lxc1 2.0.8-0ubuntu1~16.04.2 failed to install/upgrade: подпроцесс установлен сценарий post-installation возвратил код ошибки 1

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
Error was visible in the log, address/port already in use. ** Changed in: lxc (Ubuntu) Status: New => Invalid -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1715537 Title: package lxc1 2.0.8-

[Bug 1758168] Re: [16.04] checkconfig: Warning: new{u, g}idmap is not setuid-root

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
** Changed in: lxc (Ubuntu) Status: New => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1758168 Title: [16.04] checkconfig: Warning: new{u,g}idmap is not setuid-root To manage

[Bug 1757229] Re: Oracle containers will fail to start because of missing /usr/lib/x86_64-linux-gnu/lxc/dev

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
Our pre-generated oracle images are tested daily and seem to be working fine. ** Changed in: lxc (Ubuntu) Status: New => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1757229 Titl

[Bug 1776214] Re: please package lxc 2.1.1 for xenial updates

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
We only package LTS releases in Ubuntu. ** Changed in: lxc (Ubuntu) Status: New => Invalid -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1776214 Title: please package lxc 2.1.1 for xenial up

[Bug 1750654] Re: "lxc-create -B best" fails on non-btrfs/zfs system

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
** Changed in: lxc (Ubuntu) Status: New => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1750654 Title: "lxc-create -B best" fails on non-btrfs/zfs system To manage notification

[Bug 1700500] Re: lxc-net incompatible with systemd-resolved

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
** Changed in: lxc (Ubuntu) Status: New => Triaged ** Changed in: lxc (Ubuntu) Importance: Undecided => Wishlist -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1700500 Title: lxc-net incom

[Bug 1713726] Re: lxc 2.0.8-0ubuntu6 ADT test failure with linux 4.13.0-7.8

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
** Changed in: lxc (Ubuntu) Status: New => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1713726 Title: lxc 2.0.8-0ubuntu6 ADT test failure with linux 4.13.0-7.8 To manage notif

[Bug 1508744] Re: Upgrade to Ubuntu 15.10 Broken: lxc-net.service fails on upgrade

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
** No longer affects: lxc (Ubuntu) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1508744 Title: Upgrade to Ubuntu 15.10 Broken: lxc-net.service fails on upgrade To manage notifications about this b

[Bug 1843383] Re: lxc, please bump epoch to 1

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
*** This bug is a duplicate of bug 1837537 *** https://bugs.launchpad.net/bugs/1837537 ** This bug has been marked a duplicate of bug 1837537 FTBFS since lxc has different version numbers in Debian and Ubuntu -- You received this bug notification because you are a member of Ubuntu Bugs, w

[Bug 1840639] Re: Version 3.0.3 breaks lxc-usernsexec

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
What are your subuid/subgid allocations like? ** Changed in: lxc (Ubuntu) Status: New => Incomplete -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1840639 Title: Version 3.0.3 breaks lxc-user

[Bug 1857046] Re: lxc 3.0.4-0ubuntu2 ADT test failure with linux 5.5.0-2.3

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
@brauner any idea what that's about? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1857046 Title: lxc 3.0.4-0ubuntu2 ADT test failure with linux 5.5.0-2.3 To manage notifications about this bug go

[Bug 1837537] Re: FTBFS since lxc has different version numbers in Debian and Ubuntu

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
So I think I'll be doing the epoch bump with 4.0 which should help somewhat. There will still be the issue of not having the binary packages themselves lined up (different names) but that should be a step forward. ** Changed in: lxc (Ubuntu) Status: New => In Progress ** Changed in: lxc (

[Bug 1828255] Re: It's too easy to accidentally delete a container rather than a snapshot

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
There is configurable prompting for those that want it. We also refuse to delete running containers. ** Changed in: lxc (Ubuntu) Status: New => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad

[Bug 1794523] Re: lxc-net.service is not properly ordered with network-online.target

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
Hmm, no, that would be wrong. Wants=/Requires= would cause lxc-net to not start if network- online.target is missing or if it fails. We only want to start after it if it does exist, which is what After does. ** Changed in: lxc (Ubuntu) Status: New => Incomplete -- You received this bug n

[Bug 1776381] Re: lxc-test-api-reboot will hang with autopkgtest

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
It's not currently failing based on recent logs anyway. ** Changed in: lxc (Ubuntu) Status: New => Invalid -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1776381 Title: lxc-test-api-reboot wi

[Bug 1787436] Re: lxc 3.0.1-0ubuntu2 ADT test failure with linux 4.18.0-5.6

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
Based on autopkgtest history, this must have gotten fixed somehow. ** Changed in: lxc (Ubuntu) Status: New => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1787436 Title: lxc 3.

[Bug 1858799] Re: lxc ADT test failure on Bionic with linux-raspi2-5.3 arm64

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
** Changed in: lxc (Ubuntu) Status: New => Fix Committed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1858799 Title: lxc ADT test failure on Bionic with linux-raspi2-5.3 arm64 To manage not

[Bug 1866124] Re: ps -eo lxc no longer shows a task's lxc container

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
** Changed in: lxc (Ubuntu) Status: New => Invalid -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1866124 Title: ps -eo lxc no longer shows a task's lxc container To manage notifications abou

[Bug 1861880] Re: lxc-attach command does not return error exit code if the command is failed

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
** Changed in: lxc (Ubuntu) Status: New => Fix Committed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1861880 Title: lxc-attach command does not return error exit code if the command is fa

[Bug 1659590] Re: containers won't start after lxc and apparmor upgrades in trusty

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
anyone still affected by this? ** Changed in: lxc (Ubuntu) Status: Confirmed => Incomplete -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1659590 Title: containers won't start after lxc and a

[Bug 1760848] Re: lxc-create can't create bionic container on xenial

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
We're now using distrobuilder to build pre-made images avoiding the mess that was those scripts. ** Changed in: lxc (Ubuntu) Status: Confirmed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchp

[Bug 1569679] Re: lxc failed to do lxc-checkpoint again

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
** Changed in: lxc (Ubuntu) Status: Confirmed => Invalid -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1569679 Title: lxc failed to do lxc-checkpoint again To manage notifications about this

[Bug 1575757] Re: Can't install kernel-nfs-server inside lxc container

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
There's nothing particularly safe for us to do here out of the box. Using an alternative profile or appending to the profile (in LXD's case) is your best bet. ** Changed in: lxc (Ubuntu) Status: Confirmed => Invalid -- You received this bug notification because you are a member of Ubuntu

[Bug 1389954] Re: Make .lxc domain name resolution easier to discover and enable

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
** Changed in: lxc (Ubuntu) Status: Confirmed => Triaged -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1389954 Title: Make .lxc domain name resolution easier to discover and enable To manage

[Bug 1240757] Re: Bridge not created if bind9 is on

2020-03-25 Thread Stéphane Graber via ubuntu-bugs
** Changed in: lxc (Ubuntu) Status: Triaged => Won't Fix -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1240757 Title: Bridge not created if bind9 is on To manage notifications about this bug

[Bug 1659590] Re: containers won't start after lxc and apparmor upgrades in trusty

2020-03-29 Thread Stéphane Graber via ubuntu-bugs
** Changed in: lxc (Ubuntu) Status: Incomplete => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1659590 Title: containers won't start after lxc and apparmor upgrades in trusty T

[Bug 1869661] Re: lxc 3.23 (?) breaks nested lxd with snaps

2020-03-30 Thread Stéphane Graber via ubuntu-bugs
Hmm, I thought we pushed all the nesting fixes to stable on Friday. Our own nesting tests are all clean but it's possible we're not hitting this particular exec case. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchp

[Bug 1867535] Re: [FFe] LXC 4.0.0 LTS

2020-03-30 Thread Stéphane Graber via ubuntu-bugs
The release announcement finally got pushed out here: https://discuss.linuxcontainers.org/t/lxc-4-0-lts-has-been-released/7182 The main new features are: - cgroups: Full cgroup2 support - cgroups: Freezer support in CGroup2 - cgroups: eBPF device controller support in CGroup2 - config: Add lxc

  1   2   >