My first guess would be that it's due to LXC dropping capabilities, I'd investigate whether CAP_SYS_ADMIN is being dropped. You need CAP_SYS_ADMIN for mount and block ioctls, if the container doesn't have those privs a map will likely fail. Maybe try tracing the command with strace?
On Thu, Oct 17, 2013 at 2:45 PM, Kevin Weiler <kevin.wei...@imc-chicago.com>wrote: > Hi all, > > We're trying to mount an rbd image inside of a linux container that has > been created with docker (https://www.docker.io/). We seem to have access > to the rbd kernel module from inside the container: > > # lsmod | grep ceph > libceph 218854 1 rbd > libcrc32c 12603 3 xfs,libceph,dm_persistent_data > > And we can query the pool for available rbds and create rbds from inside > the container: > > # rbd -p dockers --id dockers --keyring > /etc/ceph/ceph.client.dockers.keyring create lxctest --size 51200 > # rbd -p dockers --id dockers --keyring > /etc/ceph/ceph.client.dockers.keyring ls > lxctest > > But for some reason, we can't seem to map the device to the container: > > # rbd -p dockers --id dockers --keyring > /etc/ceph/ceph.client.dockers.keyring map lxctest > rbd: add failed: (22) Invalid argument > > I don't see anything particularly interesting in dmesg or messages on > either the container or the host box. Any ideas on how to troubleshoot this? > > Thanks! > > > -- > > *Kevin Weiler* > > IT > > > > IMC Financial Markets | 233 S. Wacker Drive, Suite 4300 | Chicago, IL > 60606 | http://imc-chicago.com/ > > Phone: +1 312-204-7439 | Fax: +1 312-244-3301 | E-Mail: * > kevin.wei...@imc-chicago.com <kevin.wei...@imc-chicago.com>* > > ------------------------------ > > The information in this e-mail is intended only for the person or entity > to which it is addressed. > > It may contain confidential and /or privileged material. If someone other > than the intended recipient should receive this e-mail, he / she shall not > be entitled to read, disseminate, disclose or duplicate it. > > If you receive this e-mail unintentionally, please inform us immediately > by "reply" and then delete it from your system. Although this information > has been compiled with great care, neither IMC Financial Markets & Asset > Management nor any of its related entities shall accept any responsibility > for any errors, omissions or other inaccuracies in this information or for > the consequences thereof, nor shall it be bound in any way by the contents > of this e-mail or its attachments. In the event of incomplete or incorrect > transmission, please return the e-mail to the sender and permanently delete > this message and any attachments. > > Messages and attachments are scanned for all known viruses. Always scan > attachments before opening them. > > _______________________________________________ > ceph-users mailing list > ceph-users@lists.ceph.com > http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com > > -- Kyle
_______________________________________________ ceph-users mailing list ceph-users@lists.ceph.com http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com
