[Bug 1317179] Re: lxc containers fail to start in trusty with newer kernels

[Serge Hallyn]

The variable JoinControllers in /etc/systemd/system.cofn should include
net_cls.  Otherwise when newer kernel is used in trusty, users will not
by default be able to use unprivileged containers.

** Also affects: systemd (Ubuntu Trusty)
   Importance: Undecided
       Status: New

** Changed in: systemd (Ubuntu)
   Importance: Undecided => Medium

** Changed in: systemd (Ubuntu)
       Status: New => Fix Released

** Changed in: systemd (Ubuntu Trusty)
   Importance: Undecided => Medium

** Changed in: systemd (Ubuntu Trusty)
       Status: New => Confirmed

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to systemd in Ubuntu.
https://bugs.launchpad.net/bugs/1317179

Title:
  lxc containers fail to start in trusty with newer kernels

Status in “systemd” package in Ubuntu:
  Fix Released
Status in “systemd” source package in Trusty:
  Confirmed

Bug description:
  When running a trusty userspace with a newer kernel (e.g. 3.15-rc4),
  attempting to start a container fails:

  $ lxc-start -n p2
  lxc_container: call to cgmanager_create_sync failed: invalid request
  lxc_container: Failed to create net_cls:p2
  lxc_container: Error creating cgroup net_cls:p2
  lxc_container: failed creating cgroups
  lxc_container: failed to spawn 'p2'

  Iiuc, this seems to be caused new cgroups in the kernel which aren't
  enabled for systemd but that lxc tries to configure anyway.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1317179/+subscriptions