Hi Serge, Thanks for working with me on this.
So it does work when I ssh into the privileged container as user ubuntu and then start the unprivileged container. I'm guessing there may be no way to start the unprivileged container from lxc-attach like I want to, right? Here is the output you requested: $ sudo lxc-attach -n test-libertine -- sudo -u ubuntu -H cat /proc/self/cgroup 11:cpuset:/ 10:pids:/ 9:memory:/ 8:blkio:/ 7:perf_event:/ 6:freezer:/ 5:hugetlb:/ 4:devices:/ 3:cpu,cpuacct:/ 2:net_cls,net_prio:/ 1:name=systemd:/ -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1543697 Title: Unprivileged nested Xenial container will not start inside a privileged Xenial container Status in lxc package in Ubuntu: Fix Released Bug description: I have a host where I create a privileged Xenial container. Inside that privileged container, I create an unprivileged Xenial container using the ubuntu user in the privileged container. When I try starting the unprivileged container, I get the following error: lxc-start 20160209133200.970 INFO lxc_cgroup - cgroup.c:cgroup_init:65 - cgroup driver cgroupfs initing for test-lxc lxc-start 20160209133200.971 ERROR lxc_cgfs - cgfs.c:cgfs_init:2248 - cgroupfs failed to detect cgroup metadata lxc-start 20160209133200.971 ERROR lxc_start - start.c:lxc_spawn:1023 - failed initializing cgroup support lxc-start 20160209133200.971 ERROR lxc_start - start.c:__lxc_start:1273 - failed to spawn 'test-lxc' I've tried both Trusty host w/ ppa:ubuntu-lxc/lxc-stable installed and a Xenial host with the same results. I've also tried using ppa :ubuntu-lxc/daily in the privileged Xenial LXC. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1543697/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp