Re: [lxc-users] Creating a container as non root

2014-08-05 Thread Cal Leeming [Simplicity Media Ltd]
Thanks for the detailed reply, much appreciated. I'll give cgm a try and see how it goes. Cal On Wed, Aug 6, 2014 at 3:34 AM, Serge Hallyn wrote: > Quoting Cal Leeming [Simplicity Media Ltd] ( > cal.leem...@simplicitymedialtd.co.uk): > > Interesting, I'm running 14.04.1. > > > > Could you pas

Re: [lxc-users] Creating a container as non root

2014-08-05 Thread Serge Hallyn
Quoting Cal Leeming [Simplicity Media Ltd] (cal.leem...@simplicitymedialtd.co.uk): > Interesting, I'm running 14.04.1. > > Could you paste your output of /proc/self/cgroup from inside your "sudo su" > ? I'd be interested to see if the systemd entry is correct too 12:name=systemd:/user.slice/user

Re: [lxc-users] Creating a container as non root

2014-08-05 Thread Serge Hallyn
Quoting Cal Leeming [Simplicity Media Ltd] (cal.leem...@simplicitymedialtd.co.uk): > Also I tried to unset XDG_RUNTIME_DIR but it resulted in a new error (which > I believe is related to "sudo su" not placing into the correct cgroup) > > deploy$ lxc-start -n u1 > lxc_container: call to cgmanager_

Re: [lxc-users] Creating a container as non root

2014-08-05 Thread Cal Leeming [Simplicity Media Ltd]
Also I tried to unset XDG_RUNTIME_DIR but it resulted in a new error (which I believe is related to "sudo su" not placing into the correct cgroup) deploy$ lxc-start -n u1 lxc_container: call to cgmanager_create_sync failed: invalid request lxc_container: Failed to create hugetlb:u1 lxc_container:

Re: [lxc-users] Creating a container as non root

2014-08-05 Thread Cal Leeming [Simplicity Media Ltd]
Interesting, I'm running 14.04.1. Could you paste your output of /proc/self/cgroup from inside your "sudo su" ? I'd be interested to see if the systemd entry is correct too Cal On Wed, Aug 6, 2014 at 1:43 AM, Serge Hallyn wrote: > Quoting Cal Leeming [Simplicity Media Ltd] ( > cal.leem...@sim

Re: [lxc-users] Creating a container as non root

2014-08-05 Thread Serge Hallyn
Quoting Cal Leeming [Simplicity Media Ltd] (cal.leem...@simplicitymedialtd.co.uk): > Sure; > > deploy$ echo $XDG_RUNTIME_DIR > /run/user/999 Right, so we're not going to have lxc second-guess your environment. Note actually that on my host (ubuntu 14.10) 'sudo su otheruser' clears out XDG_RUNTIM

Re: [lxc-users] Creating a container as non root

2014-08-05 Thread Cal Leeming [Simplicity Media Ltd]
Also found this discussion on the matter in systemd; http://lists.freedesktop.org/archives/systemd-devel/2013-November/014370.html Cal On Wed, Aug 6, 2014 at 1:26 AM, Cal Leeming [Simplicity Media Ltd] < cal.leem...@simplicitymedialtd.co.uk> wrote: > (sorry hit return too fast). > > Also turns

Re: [lxc-users] Creating a container as non root

2014-08-05 Thread Cal Leeming [Simplicity Media Ltd]
(sorry hit return too fast). Also turns out that the sudo -shU trick doesn't work, results in; deploy$ lxc-start -n u1 lxc_container: call to cgmanager_create_sync failed: invalid request Found another semi related ticket; https://github.com/lxc/lxc/issues/181 Cal On Wed, Aug 6, 2014 at 1:24

Re: [lxc-users] Creating a container as non root

2014-08-05 Thread Cal Leeming [Simplicity Media Ltd]
Sure; deploy$ echo $XDG_RUNTIME_DIR /run/user/999 deploy$ echo $HOME /home/deploy deploy$ cat /proc/self/cgroup 11:hugetlb:/ 10:perf_event:/ 9:blkio:/ 8:freezer:/ 7:devices:/ 6:memory:/ 5:cpuacct:/ 4:cpu:/ 3:cpuset:/ 2:name=systemd:/user/999.user/5.session Expected uid is 1000 (deploy) but its s

Re: [lxc-users] Creating a container as non root

2014-08-05 Thread Serge Hallyn
Quoting Cal Leeming [Simplicity Media Ltd] (cal.leem...@simplicitymedialtd.co.uk): > Just wanted to chime in on this, it would seem that creating unprivileged > containers works fine, at least for download template of Ubuntu. > > However the problem starts when you use "sudo su". > > For example

Re: [lxc-users] Creating a container as non root

2014-08-05 Thread Cal Leeming [Simplicity Media Ltd]
For what it's worth, I was able to get around the "sudo su" problem by doing the following; admin$ sudo -sHu deploy deploy$ lxc-create -t download -n u1 -- -d ubuntu -r trusty -a amd64 -- snip -- You just created an Ubuntu container (release=trusty, arch=amd64, variant=default) I only came across

Re: [lxc-users] Creating a container as non root

2014-08-05 Thread Cal Leeming [Simplicity Media Ltd]
Just wanted to chime in on this, it would seem that creating unprivileged containers works fine, at least for download template of Ubuntu. However the problem starts when you use "sudo su". For example, the following breaks; admin$ sudo su deploy admin$ lxc-create -t download -n u1 -- -d ubuntu

Re: [lxc-users] Creating a container as non root

2014-01-09 Thread Serge Hallyn
Sounds good. It might be worthwhile having a 'lxc-setup-images' command which requires root and builds the base images. Then unprileged users could untar/unsquash those images. To be clear, I absolutely *can* create and run ubuntu-cloud images without being root. -serge Quoting Cal Leeming [Si

Re: [lxc-users] Creating a container as non root

2014-01-09 Thread Serge Hallyn
Quoting Michael H. Warfield (m...@wittsend.com): > On Thu, 2014-01-09 at 08:08 +0200, Kevin Wilson wrote: > > Hello, > > I believe that creating a container as non root user should be > > straight-forward. > > Sigh... I'm afraid not... > > Funny, Serge and I just had a couple of comments in ex

Re: [lxc-users] Creating a container as non root

2014-01-09 Thread Cal Leeming [Simplicity Media Ltd]
It's also worth mentioning that fakeroot/fakechroot have some nasty issues with debootstrap; https://bugs.launchpad.net/ubuntu/+source/fakechroot/+bug/1265857 One theory I'm exploring is building "base images" on a machine that does have root, by running debootstrap on every flavor/arch then using

Re: [lxc-users] Creating a container as non root

2014-01-09 Thread Michael H. Warfield
On Thu, 2014-01-09 at 08:08 +0200, Kevin Wilson wrote: > Hello, > I believe that creating a container as non root user should be > straight-forward. Sigh... I'm afraid not... Funny, Serge and I just had a couple of comments in exchange about this very thing with regards to templates. He's bee

[lxc-users] Creating a container as non root

2014-01-08 Thread Kevin Wilson
Hello, I believe that creating a container as non root user should be straight-forward. I added a user named "test" and I am trying to create a container (see below the sequence). I am running latest lxc git (built from source, as root) on Fedora 20. useradd test su test lxc-create -t busybox -