Problem also occurs with the defaults in /etc/lxc/default.conf.
However, the mappings are defined also in /etc/suguid and /etc/subgid, where 
the mapping also overlap, like so:

/etc/subuid
----------------------
lxd:100000:65536
root:100000:65536
root:33:1
root:100034:65503
root:503:1
root:100504:65033
----------------------

/etc/subgid
----------------------
lxd:100000:65536
root:100000:65536
root:33:1
root:100034:65503
root:109:1
root:100110:65427
----------------------

I don't think I should reset those to default while some containers are
running.

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to lxc in Ubuntu.
https://bugs.launchpad.net/bugs/1646462

Title:
  lxc container download error (possibly HSTS related)

Status in lxc package in Ubuntu:
  Confirmed

Bug description:
  LXC cannot download image, seems like a server error:

  ~# lxc-create -t download -n test
  Setting up the GPG keyring
  Downloading the image index
  ERROR: Failed to download 
http://images.linuxcontainers.org//meta/1.0/index-user
  lxc-create: lxccontainer.c: create_run_template: 1290 container creation 
template for test failed
  lxc-create: tools/lxc_create.c: main: 318 Error creating container test

  Trying to download the file with wget gets the file OK with minor
  complaints:

  ~# wget -O /dev/null 'http://images.linuxcontainers.org//meta/1.0/index-user'
  URL transformed to HTTPS due to an HSTS policy
  --2016-12-01 12:36:58--  
https://images.linuxcontainers.org//meta/1.0/index-user
  Resolving images.linuxcontainers.org (images.linuxcontainers.org)... 
91.189.88.37, 91.189.91.21
  Connecting to images.linuxcontainers.org 
(images.linuxcontainers.org)|91.189.88.37|:443... connected.
  HTTP request sent, awaiting response... 301 Moved Permanently
  Location: https://uk.images.linuxcontainers.org/meta/1.0/index-user 
[following]
  --2016-12-01 12:36:58--  
https://uk.images.linuxcontainers.org/meta/1.0/index-user
  Resolving uk.images.linuxcontainers.org (uk.images.linuxcontainers.org)... 
91.189.88.37
  Connecting to uk.images.linuxcontainers.org 
(uk.images.linuxcontainers.org)|91.189.88.37|:443... connected.
  HTTP request sent, awaiting response... 200 OK
  Length: 9102 (8.9K)
  Saving to: ‘/dev/null’

  Seems like some SSL problem in the lxc-create binary, specifically the
  HSTS issue mentioned by wget. Maybe a newly introduced HSTS policy
  breaks the package?

  ProblemType: Bug
  DistroRelease: Ubuntu 16.10
  Package: lxc 2.0.5-0ubuntu1.2
  ProcVersionSignature: Ubuntu 4.8.0-28.30-generic 4.8.6
  Uname: Linux 4.8.0-28-generic x86_64
  NonfreeKernelModules: zfs zunicode zcommon znvpair zavl
  ApportVersion: 2.20.3-0ubuntu8
  Architecture: amd64
  Date: Thu Dec  1 12:28:28 2016
  InstallationDate: Installed on 2016-10-14 (47 days ago)
  InstallationMedia: Ubuntu-Server 16.10 "Yakkety Yak" - Release amd64 
(20161012.1)
  PackageArchitecture: all
  SourcePackage: lxc
  UpgradeStatus: No upgrade log present (probably fresh install)
  dnsmasq.conf:
   dhcp-host=vold,10.0.3.10
   dhcp-host=sftp,10.0.3.11

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1646462/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to     : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to