[pkg-lxc-devel] Bug#823864: Bug#823864: libpam-cgfs: installing libpam-cgfs from backport on stable prevent session from opening

[Xavier Quost]

Hi Evgeni


Still sorry for this late answer, I'm back home now and will be able to answer more quickly.


>Any pointers how to reproduce your setup would be awesome.

Yes, and good news, I was able to precise the problem and to reproduce it on another jessie + backports box :

To reproduce the problem, both boxes need :
(1) sysinit (no systemd) as system startup
(2) cgroupfs-mount installed


Both boxes use kernel 4.5.0-0.bpo.2-amd64


# dpkg --list | grep cgroup 
ii  cgmanager                             0.33-2+deb8u2                        amd64        Central cgroup manager daemon
ii  cgroup-bin                            0.41-6                               all          control and monitor control groups (transitional package)
ii  cgroup-tools                          0.41-6                               amd64        control and monitor control groups (tools)
ii  cgroupfs-mount                        1.1                                  all          Light-weight package to set up cgroupfs mounts
ii  libcgmanager0:amd64                   0.33-2+deb8u2                        amd64        Central cgroup manager daemon (client library)
ii  libcgroup1:amd64                      0.41-6                               amd64        control and monitor control groups (library)
ii  libpam-cgfs                           2.0.0-3~bpo8+1                       amd64        PAM module for managing cgroups for LXC


# dpkg --list | grep sysvi  
ii  sysvinit-core                         2.88dsf-59                           amd64        System-V-like init utilities
ii  sysvinit-utils                        2.88dsf-59.3                         amd64        System-V-like utilities

# stat /proc/1/exe        
  Fichier : « /proc/1/exe » -> « /sbin/init »
   Taille : 0           Blocs : 0          Blocs d'E/S : 1024   lien symbolique
Périphérique : 4h/4d    Inœud : 14273       Liens : 1
Accès : (0777/lrwxrwxrwx)  UID : (    0/    root)   GID : (    0/    root)
 Accès : 2016-06-05 16:32:37.623997097 +0200
Modif. : 2016-06-05 16:32:37.619997096 +0200
Changt : 2016-06-05 16:32:37.619997096 +0200
  Créé : -


cgroupfs-mount change  /sys/fs/cgroup mount point 

without  this package :
# mount |grep "/sys/"                    
pstore on /sys/fs/pstore type pstore (rw,relatime)
fusectl on /sys/fs/fuse/connections type fusectl (rw,relatime)
cgroup on /sys/fs/cgroup type tmpfs (rw,relatime,size=12k)

with this package

# mount |grep "/sys/"           
pstore on /sys/fs/pstore type pstore (rw,relatime)
fusectl on /sys/fs/fuse/connections type fusectl (rw,relatime)
cgroup on /sys/fs/cgroup type tmpfs (rw,relatime,size=12k)
cgroup on /sys/fs/cgroup/cpuset type cgroup (rw,relatime,cpuset,release_agent=/run/cgmanager/agents/cgm-release-agent.cpuset,clone_children)
cgroup on /sys/fs/cgroup/cpu type cgroup (rw,relatime,cpu,release_agent=/run/cgmanager/agents/cgm-release-agent.cpu)
cgroup on /sys/fs/cgroup/cpuacct type cgroup (rw,relatime,cpuacct,release_agent=/run/cgmanager/agents/cgm-release-agent.cpuacct)
cgroup on /sys/fs/cgroup/blkio type cgroup (rw,relatime,blkio,release_agent=/run/cgmanager/agents/cgm-release-agent.blkio)
cgroup on /sys/fs/cgroup/devices type cgroup (rw,relatime,devices,release_agent=/run/cgmanager/agents/cgm-release-agent.devices)
cgroup on /sys/fs/cgroup/freezer type cgroup (rw,relatime,freezer,release_agent=/run/cgmanager/agents/cgm-release-agent.freezer)
cgroup on /sys/fs/cgroup/net_cls type cgroup (rw,relatime,net_cls,release_agent=/run/cgmanager/agents/cgm-release-agent.net_cls)
cgroup on /sys/fs/cgroup/perf_event type cgroup (rw,relatime,perf_event,release_agent=/run/cgmanager/agents/cgm-release-agent.perf_event)
cgroup on /sys/fs/cgroup/net_prio type cgroup (rw,relatime,net_prio,release_agent=/run/cgmanager/agents/cgm-release-agent.net_prio)
cgroup on /sys/fs/cgroup/pids type cgroup (rw,relatime,pids,release_agent=/run/cgmanager/agents/cgm-release-agent.pids)


I don't remember why this package was originally installed; I guess I was trying to install unprivileged lxc on the box.
I will retrace a step by step installation without this package to check if it's required for this purpose

Please, what would be the following steps ?

Thanks, Best regards

XQ