I looked into the lxc container again and after a while I finally stumbled over 
its iptables setup.
The bug already pointed to this place but I totally forgot about that.

Here are the iptables settings:
iptables -A INPUT -i eth0 -p tcp -m tcp --dport 21 -m state --state NEW -m 
recent --set --name FTP --rsource 
iptables -A INPUT -i eth0 -p tcp -m tcp --dport 21 -m state --state NEW -m 
recent --update --seconds 60 --hitcount 20 --rttl --name FTP --rsource -j DROP

I've created a script to fully create a centos test installation using a 
precreated image from openVZ.
The script will download, patch and create a config (all files are in 
/lxc/centos_test) for the lxc.

To start the container and reproduce the bug:
lxc-start -n centos
ssh [email protected]
# execute above iptables there
exit
lxc-stop -n centos




** Attachment added: "create_lxc_container.sh"
   
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/869068/+attachment/2520513/+files/create_lxc_container.sh

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/869068

Title:
  kernel bug at xt_recent.c:610 stopping lxc guest  (lxc-stop)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/869068/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to