[Bug 1514690] Re: rebooting container with systemd >= 226 fails to create /lxc/adt-xenial/init.scope control group

2015-11-18 Thread Serge Hallyn
This should be fixed in the latest release. It has not been SRUd. ** Changed in: lxcfs (Ubuntu) Status: Fix Committed => Fix Released ** Also affects: lxcfs (Ubuntu Wily) Importance: Undecided Status: New -- You received this bug notification because you are a member of

[Bug 1465935] Re: kvm_irqchip_commit_routes: Assertion `ret == 0' failed

2015-11-18 Thread Serge Hallyn
Hm, a second run did not reproduce the error. If I can't get it to happen again in a few hours of re-trying, I'll assume it was a fluke or related to the host. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

[Bug 1465935] Re: kvm_irqchip_commit_routes: Assertion `ret == 0' failed

2015-11-18 Thread Serge Hallyn
Hm, a second run did not reproduce the error. If I can't get it to happen again in a few hours of re-trying, I'll assume it was a fluke or related to the host. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to qemu in Ubuntu.

[Bug 1514690] Re: rebooting container with systemd >= 226 fails to create /lxc/adt-xenial/init.scope control group

2015-11-18 Thread Serge Hallyn
** Description changed: + + SRU Justification + Impact: xenial containers cannot be rebooted + Fix: shorten the fuse directory entry caching time, and make lxc (when using lxcfs) wait at least that amount of time during reboot. + Test case: + lxc-create

[Bug 1465935] Re: kvm_irqchip_commit_routes: Assertion `ret == 0' failed

2015-11-18 Thread Serge Hallyn
I could not reproduce the original issue, but the new qemu packages appear to be regression-free, so marked this verification-done on that grounds. If the SRU team prefers to kick this package I'm ok with that as well. ** Tags removed: verification-needed ** Tags added: verification-done --

[Bug 1465935] Re: kvm_irqchip_commit_routes: Assertion `ret == 0' failed

2015-11-18 Thread Serge Hallyn
I could not reproduce the original issue, but the new qemu packages appear to be regression-free, so marked this verification-done on that grounds. If the SRU team prefers to kick this package I'm ok with that as well. ** Tags removed: verification-needed ** Tags added: verification-done --

[Bug 1516203] Re: qemu-system-x86_64 crashed with SIGSEGV in SDL_BlitCopy()

2015-11-16 Thread Serge Hallyn
Could you please give the full command you used so that I can reproduce this? ** Also affects: qemu Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1516203

[Bug 1516203] Re: qemu-system-x86_64 crashed with SIGSEGV in SDL_BlitCopy()

2015-11-16 Thread Serge Hallyn
Could you please give the full command you used so that I can reproduce this? ** Also affects: qemu Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to qemu in Ubuntu.

[Bug 1483071] Re: Error creating new VM with OVMF

2015-11-16 Thread Serge Hallyn
@jpvr, The patch for virt-aa-helper to handle the nvram files is upstream, and should hit xenial with the next merge. Then you shouldn't need the template workaround. ** Changed in: libvirt (Ubuntu) Importance: Undecided => Medium -- You received this bug notification because you are a

[Bug 1516203] Re: qemu-system-x86_64 crashed with SIGSEGV in SDL_BlitCopy()

2015-11-16 Thread Serge Hallyn
Thanks. (I thought I had upgraded my test system to xenial, but I hadn't, so virtio-vga was not supported) How far into the boot do you see this happening? -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to qemu in Ubuntu.

[Bug 1516203] Re: qemu-system-x86_64 crashed with SIGSEGV in SDL_BlitCopy()

2015-11-16 Thread Serge Hallyn
Thanks. (I thought I had upgraded my test system to xenial, but I hadn't, so virtio-vga was not supported) How far into the boot do you see this happening? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

Re: [Bug 1516037] Re: lxc-start fails with 1.1.5-0ubuntu1

2015-11-16 Thread Serge Hallyn
Ah, interesting. So this may be a bug in aa-complain, as it did not retain (iiuc) the attach_disconnected flags. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1516037 Title:

Re: [Bug 1516037] Re: lxc-start fails with 1.1.5-0ubuntu1

2015-11-16 Thread Serge Hallyn
Ah, interesting. So this may be a bug in aa-complain, as it did not retain (iiuc) the attach_disconnected flags. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1516037 Title: lxc-start fails with

[Bug 1516203] Re: qemu-system-x86_64 crashed with SIGSEGV in SDL_BlitCopy()

2015-11-16 Thread Serge Hallyn
(Note I cannot reproduce this here) -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to qemu in Ubuntu. https://bugs.launchpad.net/bugs/1516203 Title: qemu-system-x86_64 crashed with SIGSEGV in SDL_BlitCopy() To manage notifications

[Bug 1516203] Re: qemu-system-x86_64 crashed with SIGSEGV in SDL_BlitCopy()

2015-11-16 Thread Serge Hallyn
(Note I cannot reproduce this here) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1516203 Title: qemu-system-x86_64 crashed with SIGSEGV in SDL_BlitCopy() To manage notifications about this bug go

[Bug 1398999] Re: Block migrate with attached volumes copies volumes to themselves

2015-11-14 Thread Serge Hallyn
** Changed in: libvirt (Ubuntu) Assignee: Serge Hallyn (serge-hallyn) => (unassigned) -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to nova in Ubuntu. https://bugs.launchpad.net/bugs/1398999 Title: Block migrate with attac

[Bug 1398999] Re: Block migrate with attached volumes copies volumes to themselves

2015-11-14 Thread Serge Hallyn
** Changed in: libvirt (Ubuntu) Assignee: Serge Hallyn (serge-hallyn) => (unassigned) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1398999 Title: Block migrate with attached volumes cop

[Bug 1515615] Re: Disk quotas don't work in LXC containers

2015-11-13 Thread Serge Hallyn
What do you mean by "not using real device"? The real lvm device is mounted into the container. However actually offering the device node into the container would not be a safe default. In particular, it allows the container admin to write nonsense onto the device node, feeding garbage into the

[Bug 1516037] Re: lxc-start fails with 1.1.5-0ubuntu1

2015-11-13 Thread Serge Hallyn
Could you post the container configuration file? -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1516037 Title: lxc-start fails with 1.1.5-0ubuntu1 To manage notifications about this

[Bug 1516037] Re: lxc-start fails with 1.1.5-0ubuntu1

2015-11-13 Thread Serge Hallyn
Could you post the container configuration file? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1516037 Title: lxc-start fails with 1.1.5-0ubuntu1 To manage notifications about this bug go to:

[Bug 1452601] Re: vivid container's networking.service fails on boot with signal=PIPE

2015-11-13 Thread Serge Hallyn
How about a comment in the /etc/default/lxc-net file? I guess the question is - when it broke for you, which files did you first look at to try to fix it? -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to lxc in Ubuntu.

[Bug 1515615] Re: Disk quotas don't work in LXC containers

2015-11-13 Thread Serge Hallyn
Once Seth's work enabling mounting inside containers is complete, we'll most likely want some way of enabling quotas, so leaving this open as a wishlist (feature request/enhancement) item. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to

[Bug 1516037] Re: lxc-start fails with 1.1.5-0ubuntu1

2015-11-13 Thread Serge Hallyn
Nm, afaict yama should never prevent this. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1516037 Title: lxc-start fails with 1.1.5-0ubuntu1 To manage notifications about this bug go

[Bug 1516037] Re: lxc-start fails with 1.1.5-0ubuntu1

2015-11-13 Thread Serge Hallyn
Nm, afaict yama should never prevent this. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1516037 Title: lxc-start fails with 1.1.5-0ubuntu1 To manage notifications about this bug go to:

[Bug 1516037] Re: lxc-start fails with 1.1.5-0ubuntu1

2015-11-13 Thread Serge Hallyn
What does ls -l /proc/sys/kernel/yama/ cat /proc/sys/kernel/yama/ptrace_scope show? -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1516037 Title: lxc-start fails with 1.1.5-0ubuntu1

[Bug 1452601] Re: vivid container's networking.service fails on boot with signal=PIPE

2015-11-13 Thread Serge Hallyn
@faux do you still have this issue? -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1452601 Title: vivid container's networking.service fails on boot with signal=PIPE To manage

[Bug 1452601] Re: vivid container's networking.service fails on boot with signal=PIPE

2015-11-13 Thread Serge Hallyn
@faux do you still have this issue? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1452601 Title: vivid container's networking.service fails on boot with signal=PIPE To manage notifications about

[Bug 1515615] Re: Disk quotas don't work in LXC containers

2015-11-13 Thread Serge Hallyn
What do you mean by "not using real device"? The real lvm device is mounted into the container. However actually offering the device node into the container would not be a safe default. In particular, it allows the container admin to write nonsense onto the device node, feeding garbage into the

[Bug 1515615] Re: Disk quotas don't work in LXC containers

2015-11-13 Thread Serge Hallyn
Once Seth's work enabling mounting inside containers is complete, we'll most likely want some way of enabling quotas, so leaving this open as a wishlist (feature request/enhancement) item. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed

[Bug 1516037] Re: lxc-start fails with 1.1.5-0ubuntu1

2015-11-13 Thread Serge Hallyn
What does ls -l /proc/sys/kernel/yama/ cat /proc/sys/kernel/yama/ptrace_scope show? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1516037 Title: lxc-start fails with 1.1.5-0ubuntu1 To manage

[Bug 1452601] Re: vivid container's networking.service fails on boot with signal=PIPE

2015-11-13 Thread Serge Hallyn
How about a comment in the /etc/default/lxc-net file? I guess the question is - when it broke for you, which files did you first look at to try to fix it? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

Re: [Bug 1515791] [NEW] apparmor for qemu is too restrictive for USB passthrough

2015-11-13 Thread Serge Hallyn
Thanks for reporting this bug. Can you tell use exactly how you told virt-manager about the printer? For other types of usb devices (like an ereader) this has definately created the needed rules for me. Adding a blanket '/run/udev/** rw' rule would not be safe, but we should be able to find a

Re: [Bug 1515791] [NEW] apparmor for qemu is too restrictive for USB passthrough

2015-11-13 Thread Serge Hallyn
Thanks - could you show the vm's xml configuration? (i.e. result of virsh dumpxml vmname) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1515791 Title: apparmor for qemu is too restrictive for USB

[Bug 1514690] Re: rebooting container with systemd >= 226 fails to create /lxc/adt-xenial/init.scope control group

2015-11-12 Thread Serge Hallyn
** Changed in: lxc (Ubuntu) Status: In Progress => Fix Committed -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1514690 Title: rebooting container with systemd >= 226 fails to

[Bug 1513367] Re: qemu-system-x86_64/kvm-spice failed to boot a vm with appmor enabled

2015-11-12 Thread Serge Hallyn
Hi Chuck, could you request whatever openstack config info we'd need to reproduce this? ** Changed in: libvirt (Ubuntu) Importance: Undecided => High ** Changed in: libvirt (Ubuntu) Assignee: (unassigned) => Chuck Short (zulcss) -- You received this bug notification because you are a

[Bug 1514690] Re: rebooting container with systemd >= 226 fails to create /lxc/adt-xenial/init.scope control group

2015-11-12 Thread Serge Hallyn
** Changed in: lxc (Ubuntu) Status: In Progress => Fix Committed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1514690 Title: rebooting container with systemd >= 226 fails to create

Re: [Bug 1515615] [NEW] Disk quotas don't work in LXC containers

2015-11-12 Thread Serge Hallyn
What is the lxc.rootfs option? Does it point to an xfs backed device? -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1515615 Title: Disk quotas don't work in LXC containers To manage

Re: [Bug 1515615] [NEW] Disk quotas don't work in LXC containers

2015-11-12 Thread Serge Hallyn
What is the lxc.rootfs option? Does it point to an xfs backed device? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1515615 Title: Disk quotas don't work in LXC containers To manage notifications

[Bug 1515615] Re: Disk quotas don't work in LXC containers

2015-11-12 Thread Serge Hallyn
Ok, I asked because according to mount(2) that option appears to be ignored except for xfs filesystems. If you look at /proc/self/mountinfo you'll see that usrquota is in fact in the list of mount options, so lxc is respecting that. At the moment your problem is that the device backing your

[Bug 1515615] Re: Disk quotas don't work in LXC containers

2015-11-12 Thread Serge Hallyn
Ok, I asked because according to mount(2) that option appears to be ignored except for xfs filesystems. If you look at /proc/self/mountinfo you'll see that usrquota is in fact in the list of mount options, so lxc is respecting that. At the moment your problem is that the device backing your

[Bug 1514690] Re: rebooting container with systemd >= 226 fails to create /lxc/adt-xenial/init.scope control group

2015-11-11 Thread Serge Hallyn
Actually that might not help. If the cgroup really did still exist, then lxc would have refused to re-use it. I.e .instead of /lxc/x1, it would then use /lxc/x1-1. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

[Bug 1514690] Re: rebooting container with systemd >= 226 fails to create /lxc/adt-xenial/init.scope control group

2015-11-11 Thread Serge Hallyn
Yup, just making lxc sleep 2 seconds works. So this is purely a race. I'll fix it by having lxc excplicitly wait until the cgroups are removed before re-execing after reboot. ** Changed in: lxc (Ubuntu) Status: Triaged => In Progress -- You received this bug notification because you

[Bug 1514690] Re: rebooting container with systemd >= 226 fails to create /lxc/adt-xenial/init.scope control group

2015-11-11 Thread Serge Hallyn
Yup, just making lxc sleep 2 seconds works. So this is purely a race. I'll fix it by having lxc excplicitly wait until the cgroups are removed before re-execing after reboot. ** Changed in: lxc (Ubuntu) Status: Triaged => In Progress -- You received this bug notification because you

[Bug 1514690] Re: rebooting container with systemd >= 226 fails to create /lxc/adt-xenial/init.scope control group

2015-11-11 Thread Serge Hallyn
Actually that might not help. If the cgroup really did still exist, then lxc would have refused to re-use it. I.e .instead of /lxc/x1, it would then use /lxc/x1-1. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to lxc in Ubuntu.

[Bug 1514690] Re: rebooting container with systemd >= 226 fails to create /lxc/adt-xenial/init.scope control group

2015-11-11 Thread Serge Hallyn
So the problem is indeed that the cgroups are deleted using the cgroupfs, and fuse doesn't get that information. The fuse kernel module is caching the information for one second before re-querying userspace. I've pushed a patch to lxcfs to drop the caching to a half second. I'm posting a patch

[Bug 1514690] Re: rebooting container with systemd >= 226 fails to create /lxc/adt-xenial/init.scope control group

2015-11-11 Thread Serge Hallyn
So the problem is indeed that the cgroups are deleted using the cgroupfs, and fuse doesn't get that information. The fuse kernel module is caching the information for one second before re-querying userspace. I've pushed a patch to lxcfs to drop the caching to a half second. I'm posting a patch

[Bug 1480411] Re: rm -r * fails to delete directories when using overlayfs in a user-namespace

2015-11-10 Thread Serge Hallyn
@oleg, yes, but it is not an lxc bug, there's nothing lxc can do about it. Stéphane un-marked it from lxc to make the lxc bug view more usable so we can use it rather than ignore it :) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

[Bug 1480411] Re: rm -r * fails to delete directories when using overlayfs in a user-namespace

2015-11-10 Thread Serge Hallyn
@oleg, yes, but it is not an lxc bug, there's nothing lxc can do about it. Stéphane un-marked it from lxc to make the lxc bug view more usable so we can use it rather than ignore it :) -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to

[Bug 1514080] Re: lxc-templates lacks template for ubuntu core

2015-11-10 Thread Serge Hallyn
The download template (which is recommended) installs no ssh and no ubuntu password. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1514080 Title: lxc-templates lacks template for ubuntu core To

[Bug 1514080] Re: lxc-templates lacks template for ubuntu core

2015-11-10 Thread Serge Hallyn
The download template (which is recommended) installs no ssh and no ubuntu password. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1514080 Title: lxc-templates lacks template for

[Bug 1514690] Re: rebooting container with systemd >= 226 fails to create /lxc/adt-xenial/init.scope control group

2015-11-10 Thread Serge Hallyn
** Changed in: lxc (Ubuntu) Assignee: (unassigned) => Serge Hallyn (serge-hallyn) ** Changed in: lxc (Ubuntu) Status: New => Triaged -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to lxc in Ubuntu. https://bugs.launchp

[Bug 1514690] Re: rebooting container with systemd >= 226 fails to create /lxc/adt-xenial/init.scope control group

2015-11-10 Thread Serge Hallyn
That was a red herring, actually. The cause of failure appears to be the next line. After fixing that so that the mkdir succeeds, it still fails on Failed to allocate manager object: No such file or directory -- You received this bug notification because you are a member of Ubuntu Bugs, which

[Bug 1514690] Re: rebooting container with systemd >= 226 fails to create /lxc/adt-xenial/init.scope control group

2015-11-10 Thread Serge Hallyn
That was a red herring, actually. The cause of failure appears to be the next line. After fixing that so that the mkdir succeeds, it still fails on Failed to allocate manager object: No such file or directory -- You received this bug notification because you are a member of Ubuntu Server

[Bug 1514690] Re: rebooting container with systemd >= 226 fails to create /lxc/adt-xenial/init.scope control group

2015-11-10 Thread Serge Hallyn
** Changed in: lxc (Ubuntu) Assignee: (unassigned) => Serge Hallyn (serge-hallyn) ** Changed in: lxc (Ubuntu) Status: New => Triaged -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1

[Bug 1514690] Re: rebooting container with systemd >= 226 fails to create /lxc/adt-xenial/init.scope control group

2015-11-10 Thread Serge Hallyn
With cgfs i actually wasn't able to start the container in the first place. I've now fixed at least that. it wasn't the mkdir which was failing, but the subsequent attempt to attach itself to it. That's because while cgmanager used to chown the child files after creating a directory for us,

[Bug 1514690] Re: rebooting container with systemd >= 226 fails to create /lxc/adt-xenial/init.scope control group

2015-11-10 Thread Serge Hallyn
With cgfs i actually wasn't able to start the container in the first place. I've now fixed at least that. it wasn't the mkdir which was failing, but the subsequent attempt to attach itself to it. That's because while cgmanager used to chown the child files after creating a directory for us,

[Bug 1514690] Re: rebooting container with systemd >= 226 fails to create /lxc/adt-xenial/init.scope control group

2015-11-10 Thread Serge Hallyn
When I test this using cgfs-backed lxcfs, the mkdir of init.cgroup fails after setresuid(10, 10, 0). This is odd since doing it manually using sudo -u \#10 -g \#10 mkdir /sys/fs/cgroup/systemd/lxc/x1/x works fine. -- You received this bug notification because you are a member

[Bug 1514690] Re: rebooting container with systemd >= 226 fails to create /lxc/adt-xenial/init.scope control group

2015-11-10 Thread Serge Hallyn
Doh', it's because I had a total brainfart while writing that. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1514690 Title: rebooting container with systemd >= 226 fails to create /lxc/adt-

[Bug 1514690] Re: rebooting container with systemd >= 226 fails to create /lxc/adt-xenial/init.scope control group

2015-11-10 Thread Serge Hallyn
Doh', it's because I had a total brainfart while writing that. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1514690 Title: rebooting container with systemd >= 226 fails to create

[Bug 1514690] Re: rebooting container with systemd >= 226 fails to create /lxc/adt-xenial/init.scope control group

2015-11-10 Thread Serge Hallyn
When I test this using cgfs-backed lxcfs, the mkdir of init.cgroup fails after setresuid(10, 10, 0). This is odd since doing it manually using sudo -u \#10 -g \#10 mkdir /sys/fs/cgroup/systemd/lxc/x1/x works fine. -- You received this bug notification because you are a member

[Bug 1452601] Re: vivid container's networking.service fails on boot with signal=PIPE

2015-11-10 Thread Serge Hallyn
What does sudo /usr/lib/x86_64-linux-gnu/lxc/lxc-net stop sudo /usr/lib/x86_64-linux-gnu/lxc/lxc-net start sudo netstat -lap| grep LISTEN show now that you've updated bind9's configuration? ** This bug is no longer a duplicate of bug 1240757 Bridge not created if

[Bug 1452601] Re: vivid container's networking.service fails on boot with signal=PIPE

2015-11-10 Thread Serge Hallyn
What does sudo /usr/lib/x86_64-linux-gnu/lxc/lxc-net stop sudo /usr/lib/x86_64-linux-gnu/lxc/lxc-net start sudo netstat -lap| grep LISTEN show now that you've updated bind9's configuration? ** This bug is no longer a duplicate of bug 1240757 Bridge not created if

[Bug 1514690] Re: rebooting container with systemd >= 226 fails to create /lxc/adt-xenial/init.scope control group

2015-11-10 Thread Serge Hallyn
I believe what's happening is that systemd tries to mkdir init.scope before the directory has been deleted and gets -EEXIST; then the kernel finishes deleting it, then systemd tries to move itself to it but it is gone. Waiting for one more debugging build to verify. -- You received this bug

[Bug 1514690] Re: rebooting container with systemd >= 226 fails to create /lxc/adt-xenial/init.scope control group

2015-11-10 Thread Serge Hallyn
I believe what's happening is that systemd tries to mkdir init.scope before the directory has been deleted and gets -EEXIST; then the kernel finishes deleting it, then systemd tries to move itself to it but it is gone. Waiting for one more debugging build to verify. -- You received this bug

Re: [Bug 1452601] Re: vivid container's networking.service fails on boot with signal=PIPE

2015-11-09 Thread Serge Hallyn
*** This bug is a duplicate of bug 1240757 *** https://bugs.launchpad.net/bugs/1240757 Quoting Kevin Dalley (1452...@bugs.launchpad.net): > *** This bug is a duplicate of bug 1240757 *** > https://bugs.launchpad.net/bugs/1240757 > > I have now added > > listen-on-v6 { none; }; >

Re: [Bug 1497420] Re: systemd 226 (moving pid 1 into /init.scope cgroup) breaks lxc-attach

2015-11-09 Thread Serge Hallyn
Hi Martin, thanks for that info. During a reboot, lxc deletes the container's cgroup, then recreates it. Is systemd expecting the cgroup it previously created to stick around? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

Re: [Bug 1452601] Re: vivid container's networking.service fails on boot with signal=PIPE

2015-11-09 Thread Serge Hallyn
*** This bug is a duplicate of bug 1240757 *** https://bugs.launchpad.net/bugs/1240757 Quoting Kevin Dalley (1452...@bugs.launchpad.net): > *** This bug is a duplicate of bug 1240757 *** > https://bugs.launchpad.net/bugs/1240757 > > I have now added > > listen-on-v6 { none; }; >

Re: [Bug 1497420] Re: systemd 226 (moving pid 1 into /init.scope cgroup) breaks lxc-attach

2015-11-09 Thread Serge Hallyn
Hi Martin, thanks for that info. During a reboot, lxc deletes the container's cgroup, then recreates it. Is systemd expecting the cgroup it previously created to stick around? -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to lxc in

[Bug 1501651] Re: ARM chroot issues: fatal error: rt_sigaction failure

2015-11-09 Thread Serge Hallyn
@arges, did you want to push this patch into our package until it hits upstream? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1501651 Title: ARM chroot issues: fatal error: rt_sigaction failure

[Bug 1501651] Re: ARM chroot issues: fatal error: rt_sigaction failure

2015-11-09 Thread Serge Hallyn
@arges, did you want to push this patch into our package until it hits upstream? -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to qemu in Ubuntu. https://bugs.launchpad.net/bugs/1501651 Title: ARM chroot issues: fatal error:

[Bug 1513367] Re: qemu-system-x86_64/kvm-spice failed to boot a vm with appmor enabled

2015-11-06 Thread Serge Hallyn
Can you show which libvirt version you are using? Can you show the results of: ls -l /etc/apparmor.d/libvirt ls -l /proc /proc/self /proc/self/attr And then the following manual test: cd /tmp cat > testprofile << EOF profile i_cant_be_trusted_anymore { /etc/ld.so.cache

[Bug 1452437] Re: 15.04 container does not get an IP address when started

2015-11-06 Thread Serge Hallyn
*** This bug is a duplicate of bug 1240757 *** https://bugs.launchpad.net/bugs/1240757 ** This bug is no longer a duplicate of bug 1452601 vivid container's networking.service fails on boot with signal=PIPE ** This bug has been marked a duplicate of bug 1240757 Bridge not created if

[Bug 1451232] Re: container does not receive IP address after 15.04 upgrade

2015-11-06 Thread Serge Hallyn
*** This bug is a duplicate of bug 1240757 *** https://bugs.launchpad.net/bugs/1240757 ** This bug is no longer a duplicate of bug 1452601 vivid container's networking.service fails on boot with signal=PIPE ** This bug has been marked a duplicate of bug 1240757 Bridge not created if

[Bug 1452601] Re: vivid container's networking.service fails on boot with signal=PIPE

2015-11-06 Thread Serge Hallyn
*** This bug is a duplicate of bug 1240757 *** https://bugs.launchpad.net/bugs/1240757 D'oh! thanks for that info. You are running bind9, which is causing the conflict. To work around this, you can tell bind9 to not listen on 10.0.3.1 - see

[Bug 1451232] Re: container does not receive IP address after 15.04 upgrade

2015-11-06 Thread Serge Hallyn
*** This bug is a duplicate of bug 1240757 *** https://bugs.launchpad.net/bugs/1240757 ** This bug is no longer a duplicate of bug 1452601 vivid container's networking.service fails on boot with signal=PIPE ** This bug has been marked a duplicate of bug 1240757 Bridge not created if

[Bug 1452601] Re: vivid container's networking.service fails on boot with signal=PIPE

2015-11-06 Thread Serge Hallyn
*** This bug is a duplicate of bug 1240757 *** https://bugs.launchpad.net/bugs/1240757 D'oh! thanks for that info. You are running bind9, which is causing the conflict. To work around this, you can tell bind9 to not listen on 10.0.3.1 - see

[Bug 1452437] Re: 15.04 container does not get an IP address when started

2015-11-06 Thread Serge Hallyn
*** This bug is a duplicate of bug 1240757 *** https://bugs.launchpad.net/bugs/1240757 ** This bug is no longer a duplicate of bug 1452601 vivid container's networking.service fails on boot with signal=PIPE ** This bug has been marked a duplicate of bug 1240757 Bridge not created if

[Bug 1513367] Re: qemu-system-x86_64/kvm-spice failed to boot a vm with appmor enabled

2015-11-06 Thread Serge Hallyn
Is that really the only strace output you saw? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1513367 Title: qemu-system-x86_64/kvm-spice failed to boot a vm with appmor enabled To manage

[Bug 1513367] Re: qemu-system-x86_64/kvm-spice failed to boot a vm with appmor enabled

2015-11-05 Thread Serge Hallyn
I believe the 'no such file or directory' is what qemu is reporting about some device which openstack is trying to hand it. Can you confirm that /dev/hugepages/libvirt/qemu exists (ls -l /dev/hugepages/libvirt)? Try the following on your compute node to get strace output: mv

[Bug 1513367] Re: qemu-system-x86_64/kvm-spice failed to boot a vm with appmor enabled

2015-11-05 Thread Serge Hallyn
Actually it seems reasonably likely that your problem is with: -smbios type=1,manufacturer=OpenStack Foundation,product=OpenStack Nova,version=12.0.0,serial=e87d7510-5766-e35e-8016-ebeb55d7deff,uuid=3dceb341 -643d-492a-8a47-8154da341c02,family=Virtual Machine because the smbios has spaces in the

[Bug 1505576] Re: internal error: Failed to initialize a valid firewall backend

2015-11-05 Thread Serge Hallyn
** This bug is no longer a duplicate of bug 1512749 lxcbr0 dissappears on Ubuntu 15.10 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1505576 Title: internal error: Failed to initialize a valid

[Bug 1384532] Re: Unable to set AppArmor profile for /usr/bin/kvm-spice

2015-11-05 Thread Serge Hallyn
Thanks for that. I'm going to retitle this bug for the general topic of properly reporting spaces in valius. ** Summary changed: - Unable to set AppArmor profile for /usr/bin/kvm-spice + Unable to set AppArmor profile [...] no such file or directory ** Changed in: libvirt (Ubuntu)

[Bug 1384532] Re: Unable to set AppArmor profile [...] no such file or directory

2015-11-05 Thread Serge Hallyn
** Description changed: = Bugs are not infrequently reported along the lines of Unable to set Apparmor Profile for [emulator]: No such file or directory - It is frequently (always?) the result of some value - a cdrom or disk - file, smbios,

[Bug 1505576] Re: internal error: Failed to initialize a valid firewall backend

2015-11-05 Thread Serge Hallyn
** This bug is no longer a duplicate of bug 1512749 lxcbr0 dissappears on Ubuntu 15.10 -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to libvirt in Ubuntu. https://bugs.launchpad.net/bugs/1505576 Title: internal error: Failed to

[Bug 1452601] Re: vivid container's networking.service fails on boot with signal=PIPE

2015-11-05 Thread Serge Hallyn
Ok, so the error msg is simply misleading - it says 'permission denied', but the bridge does not exist. Can you please show: sudo /usr/lib/x86_64-linux-gnu/lxc/lxc-net stop sudo /usr/lib/x86_64-linux-gnu/lxc/lxc-net start sudo brctl show and see if your container now starts? Please also paste

[Bug 1452601] Re: vivid container's networking.service fails on boot with signal=PIPE

2015-11-05 Thread Serge Hallyn
Ok, so the error msg is simply misleading - it says 'permission denied', but the bridge does not exist. Can you please show: sudo /usr/lib/x86_64-linux-gnu/lxc/lxc-net stop sudo /usr/lib/x86_64-linux-gnu/lxc/lxc-net start sudo brctl show and see if your container now starts? Please also paste

[Bug 1452601] Re: vivid container's networking.service fails on boot with signal=PIPE

2015-11-05 Thread Serge Hallyn
You're still getting dnsmasq: failed to create listening socket for 10.0.3.1: Cannot assign requested address What does sudo netstat -lap| grep LISTEN show? -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to lxc in

[Bug 1452601] Re: vivid container's networking.service fails on boot with signal=PIPE

2015-11-05 Thread Serge Hallyn
You're still getting dnsmasq: failed to create listening socket for 10.0.3.1: Cannot assign requested address What does sudo netstat -lap| grep LISTEN show? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

Re: [Bug 1513698] [NEW] $HOME variable set incorrectly inside container

2015-11-05 Thread Serge Hallyn
Right, this is mentioned in the manpage. You can force environment to be cleared by passing --clear-env. Actually setting HOME to what a login shell would do would require lxc-attach to make assumptions about the container. However you can lxc-attach -n trusty-vimprobable --clear-env -- su -

Re: [Bug 1513698] [NEW] $HOME variable set incorrectly inside container

2015-11-05 Thread Serge Hallyn
Right, this is mentioned in the manpage. You can force environment to be cleared by passing --clear-env. Actually setting HOME to what a login shell would do would require lxc-attach to make assumptions about the container. However you can lxc-attach -n trusty-vimprobable --clear-env -- su -

[Bug 1505576] Re: internal error: Failed to initialize a valid firewall backend

2015-11-05 Thread Serge Hallyn
*** This bug is a duplicate of bug 1512749 *** https://bugs.launchpad.net/bugs/1512749 Because AIUI the upgrade will install the fix but not restart network manager. ** This bug has been marked a duplicate of bug 1512749 lxcbr0 dissappears on Ubuntu 15.10 -- You received this bug

[Bug 1505576] Re: internal error: Failed to initialize a valid firewall backend

2015-11-05 Thread Serge Hallyn
*** This bug is a duplicate of bug 1512749 *** https://bugs.launchpad.net/bugs/1512749 Because AIUI the upgrade will install the fix but not restart network manager. ** This bug has been marked a duplicate of bug 1512749 lxcbr0 dissappears on Ubuntu 15.10 -- You received this bug

Re: [Bug 1505576] [NEW] internal error: Failed to initialize a valid firewall backend

2015-11-04 Thread Serge Hallyn
I suspect this is a duplicate of bug 1512749 Are you using network-manager? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1505576 Title: internal error: Failed to initialize a valid firewall

[Bug 1505576] Re: internal error: Failed to initialize a valid firewall backend

2015-11-04 Thread Serge Hallyn
please let us know if updating (and then perhaps rebooting) fixes it for good. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1505576 Title: internal error: Failed to initialize a valid firewall

[Bug 1452601] Re: vivid container's networking.service fails on boot with signal=PIPE

2015-11-04 Thread Serge Hallyn
Hi, you're actually geting EPERM, which means lxcbr0 exists. Please show the output of: sudo lxc-start -n escale_build -F -l trace -o /dev/stdout sudo brctl show sudo ifconfig -a sudo journalctl -u lxc-net sudo systemd-detect-virt -- You received this bug notification because you are a

[Bug 1452601] Re: vivid container's networking.service fails on boot with signal=PIPE

2015-11-04 Thread Serge Hallyn
Hi, you're actually geting EPERM, which means lxcbr0 exists. Please show the output of: sudo lxc-start -n escale_build -F -l trace -o /dev/stdout sudo brctl show sudo ifconfig -a sudo journalctl -u lxc-net sudo systemd-detect-virt -- You received this bug notification because you are a

[Bug 1504781] Re: lxc-test-ubuntu hangs forever in trusty-proposed with Linux 3.13.0-66: AppArmor denies /dev/ptmx mounting

2015-11-04 Thread Serge Hallyn
Hi, The fix was uploaded last week for acceptance by the SRU team. It's waiting to be accepted into -proposed. Then it will need to be tested to be accepted into -updates. https://launchpad.net/ubuntu/precise/+queue?queue_state=1_text=lxc -- You received this bug notification because you are

[Bug 1294200] Re: test linked against nih-dbus-tool-generated libraryis not thread-safe

2015-11-04 Thread Serge Hallyn
Ok. It was 'fix released' in cgmanager and lxc by working around it (not enabling threading). It is invalid in lxcfs in xenial because we have switched to glib and gdbus there. The libnih and dbus bugs are still open, though in dbus it is wontfix from upstream. Since dbus is wontfix, I think

[Bug 1504781] Re: lxc-test-ubuntu hangs forever in trusty-proposed with Linux 3.13.0-66: AppArmor denies /dev/ptmx mounting

2015-11-04 Thread Serge Hallyn
Hi, The fix was uploaded last week for acceptance by the SRU team. It's waiting to be accepted into -proposed. Then it will need to be tested to be accepted into -updates. https://launchpad.net/ubuntu/precise/+queue?queue_state=1_text=lxc -- You received this bug notification because you are

[Bug 1294200] Re: test linked against nih-dbus-tool-generated libraryis not thread-safe

2015-11-04 Thread Serge Hallyn
Ok. It was 'fix released' in cgmanager and lxc by working around it (not enabling threading). It is invalid in lxcfs in xenial because we have switched to glib and gdbus there. The libnih and dbus bugs are still open, though in dbus it is wontfix from upstream. Since dbus is wontfix, I think

<    6   7   8   9   10   11   12   13   14   15   >