Your message dated Sat, 29 Mar 2025 18:24:34 +0000
with message-id <[email protected]>
and subject line Bug#992255: fixed in lxc-templates 3.0.4.89.gc128b96-1
has caused the Debian Bug report #992255,
regarding lxc-templates: Permission issues on device nodes: move to cgroups2
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
992255: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=992255
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: lxc-templates
Version: 3.0.4-5
Severity: normal
X-Debbugs-Cc: [email protected]
Dear Maintainer,
* What led up to the situation?
I started a debian-based LXC guest and tried to use OpenVPN inside
it.
* What exactly did you do (or not do) that was effective (or
ineffective)?
I created /dev/net/tun in the container's `config` file with
`lxc.mount.entry = /dev/net/tun dev/net/tun none bind,create=file`.
Also tried using `mknod` inside the container, that seems to have
worked too. I made sure the permissions on that device node where
0666.
* What was the outcome of this action?
I got the device, but opening it (either with OpenVPN or simply
`cat`ting it) resulted in a Permission denied error.
* What outcome did you expect instead?
I expected openvpn to work inside the container. `cat /dev/net/tun`
should be returning "File descriptor in bad state" rather than
"Permission denied".
I tried adding `lxc.cgroup.devices.allow = c 10:200 rwm` to my
container's config as found on various online help sites, but that did
not help on my system.
I later found that `/usr/share/lxc/config/debian.common.conf` also
contains such lines, but it turns out (as a helpful person on IRC
pointed out), that we've now moved to cgroup2. So all these lines in
that file should probably be changed to `lxc.cgroup2.devices.allow`.
Changing that in my container's config file made it work, i.e. I can
now access `/dev/net/tun` inside it fine.
-- System Information:
Debian Release: 11.2
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 5.14.0-0.bpo.2-amd64 (SMP w/16 CPU threads)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_CRAP, TAINT_OOT_MODULE,
TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages lxc-templates depends on:
ii lxc 1:4.0.6-2
Versions of packages lxc-templates recommends:
ii bridge-utils 1.7-1
ii busybox-static 1:1.30.1-6+b3
ii cloud-image-utils 0.31-2
ii debootstrap 1.0.123
ii distro-info 1.0
ii mmdebstrap 0.7.5-2.2
ii openssl 1.1.1k-1+deb11u1
ii rsync 3.2.3-4+deb11u1
ii uuid-runtime 2.36.1-8+deb11u1
ii xz-utils 5.2.5-2
Versions of packages lxc-templates suggests:
pn qemu-user-static <none>
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: lxc-templates
Source-Version: 3.0.4.89.gc128b96-1
Done: Mathias Gibbens <[email protected]>
We believe that the bug you reported is fixed in the latest version of
lxc-templates, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Mathias Gibbens <[email protected]> (supplier of updated lxc-templates package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 29 Mar 2025 17:20:15 +0000
Source: lxc-templates
Architecture: source
Version: 3.0.4.89.gc128b96-1
Distribution: unstable
Urgency: medium
Maintainer: pkg-lxc <[email protected]>
Changed-By: Mathias Gibbens <[email protected]>
Closes: 992255
Changes:
lxc-templates (3.0.4.89.gc128b96-1) unstable; urgency=medium
.
* New upstream snapshot
* Add a NEWS entry about the deprecation of lxc-templates
* Add rules for systems running the unified cgroup configuration
(Closes: #992255)
* Update Standards-Version to 4.7.2 in d/control (no changes needed)
* Update years in d/copyright
Checksums-Sha1:
427dc8145aa985875c8ee2db0fd3b00c5e4efe0e 2100
lxc-templates_3.0.4.89.gc128b96-1.dsc
8ef8e54d8da62f6de78bb34441f0ca192eb5af58 161877
lxc-templates_3.0.4.89.gc128b96.orig.tar.gz
5a281588b84acfdec606115778c971713337100a 10824
lxc-templates_3.0.4.89.gc128b96-1.debian.tar.xz
862d3dc94f0d0dffb4bdbd18b63b3b68692361e1 5683
lxc-templates_3.0.4.89.gc128b96-1_amd64.buildinfo
Checksums-Sha256:
d30e98721dbcd4b0955482d5806c8ea4cd1cedeadd8d4e555a611c66856a6e52 2100
lxc-templates_3.0.4.89.gc128b96-1.dsc
891b71172ef04e4eca133a9a015d8c797de83eaf209b584cef4f866fc934bb2e 161877
lxc-templates_3.0.4.89.gc128b96.orig.tar.gz
99b45eb289be17ba085f86e6757c817aad055e74dd36855d0d6ce1022c039dc5 10824
lxc-templates_3.0.4.89.gc128b96-1.debian.tar.xz
6078a26a40d150135e0fc2e8eca6c9b205a9a428f2000c42bece4c5999269538 5683
lxc-templates_3.0.4.89.gc128b96-1_amd64.buildinfo
Files:
958f3ff018fc5301bcffeabba3990072 2100 admin optional
lxc-templates_3.0.4.89.gc128b96-1.dsc
114165805a090539d2e3b917e9674ac0 161877 admin optional
lxc-templates_3.0.4.89.gc128b96.orig.tar.gz
c84288072a58e6ab6f7e659c3e4c66d4 10824 admin optional
lxc-templates_3.0.4.89.gc128b96-1.debian.tar.xz
ac18b03fa80d900a146f4683ce9e0f9f 5683 admin optional
lxc-templates_3.0.4.89.gc128b96-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQJGBAEBCgAwFiEE1Bp60H32xfynSJ8cKe7i1uz0QvkFAmfoMZESHGdpYm1hdEBk
ZWJpYW4ub3JnAAoJECnu4tbs9EL5dVcP/0bpij68QoEZfyOZ0dLdF0twGRMxV4ia
Wlaxs4/KqioTpsEc5NxCYXzws3J4OV4fSWiJ+wbNhTp123eWGvZOjHek+oHh/o2W
RuruujVDN43YGzDu179+PB9rbIZ+LDGDN2+lRx69f2N96BDu9SC0/A7BX/P9L3Nf
yQtXetldSKIFtqsZ53if4f1nNSnpnFIrZyuasizIqBw18QDJ4iYLHB0sriBa4oNI
pPU8hjfjJUs4M7p8BIQjMX89tjd0Eg9l+FEygIrUP2L2d8MxH5NRbrbaxOobAYoc
FqUAIGf+Rz8rhsG/9csnPJ8Km2rRAwmje3ibse8m8FHoTJjYQFPTnm7yKrWQxXEk
D1dtF1n4r3t2H+q0OLdzNXm1XeZCD5Ks7cWRxheSnu+2C+Jui8x3PjaXYK2xYGs5
/yf45xYelMXue/rEXkPVwYPKh7QTKeOub1QKhRLi0PAyqUwOZxAI4MZl25tUdVwx
LJK8B4J2TW61ZoHPMVpcxs4nE9OMNatoxqWjXpqjqJtpbBNuHdZ08f0WYjqRBcqp
tOasD6O4G+kLLrb3EBAyQAvMv4sc62w7kLNq01aMqRih0P+r252sNYF1AozaSg05
fCIBGqUN3py71fvRFqsXBXaFPbbP9iSAHVbkW9bt6fdBm2GoXtiVerJocizm1lt2
gvzpG9DrP4DR
=7ppT
-----END PGP SIGNATURE-----
pgpPfGSZBpwZX.pgp
Description: PGP signature
--- End Message ---
