[pkg-lxc-devel] Bug#867619: libpam-cgfs: failed creating cgroups

[benoit barthelet]

Package: libpam-cgfs
Version: 2.0.7-0ubuntu4
Severity: important

Dear Maintainer,

I couldn't start my unpriviledged containers anymore, seems like the
libpam-cgfs is the culprit, according to the discussion I had here :
https://discuss.linuxcontainers.org/t/failed-creating-cgroups/272/6l
Installing the ubuntu package solved my issue

Using the debian package 2.0.7-1 leads to this type of error while trying to start an unpriviledged container

  lxc-start 20170707164658.915 INFO     lxc_cgroup - cgroups/cgroup.c:cgroup_init:68 - cgroup driver cgroupfs initing for modoboa
  lxc-start 20170707164658.915 ERROR    lxc_cgfs - cgroups/cgfs.c:lxc_cgroupfs_create:909 - Could not set clone_children to 1 for cpuset hierarchy in parent cgroup.
  lxc-start 20170707164658.915 ERROR    lxc_cgfs - cgroups/cgfs.c:cgroup_rmdir:209 - Permission denied - cgroup_rmdir: failed to delete /sys/fs/cgroup/blkio/user.slice
  lxc-start 20170707164658.915 ERROR    lxc_cgfs - cgroups/cgfs.c:cgroup_rmdir:209 - Read-only file system - cgroup_rmdir: failed to delete /sys/fs/cgroup/perf_event/
  lxc-start 20170707164658.915 ERROR    lxc_cgfs - cgroups/cgfs.c:cgroup_rmdir:209 - Read-only file system - cgroup_rmdir: failed to delete /sys/fs/cgroup/freezer/
  lxc-start 20170707164658.915 ERROR    lxc_cgfs - cgroups/cgfs.c:cgroup_rmdir:209 - Permission denied - cgroup_rmdir: failed to delete /sys/fs/cgroup/pids/user.slice/user-1000.slice/session-138.scope
  lxc-start 20170707164658.915 ERROR    lxc_cgfs - cgroups/cgfs.c:cgroup_rmdir:209 - Permission denied - cgroup_rmdir: failed to delete /sys/fs/cgroup/devices/user.slice
  lxc-start 20170707164658.915 ERROR    lxc_cgfs - cgroups/cgfs.c:cgroup_rmdir:209 - Permission denied - cgroup_rmdir: failed to delete /sys/fs/cgroup/cpu,cpuacct/user.slice
  lxc-start 20170707164658.915 ERROR    lxc_cgfs - cgroups/cgfs.c:cgroup_rmdir:209 - Read-only file system - cgroup_rmdir: failed to delete /sys/fs/cgroup/net_cls,net_prio/
  lxc-start 20170707164658.915 ERROR    lxc_cgfs - cgroups/cgfs.c:cgroup_rmdir:209 - Read-only file system - cgroup_rmdir: failed to delete /sys/fs/cgroup/cpuset/
  lxc-start 20170707164658.915 ERROR    lxc_cgfs - cgroups/cgfs.c:cgroup_rmdir:209 - Permission denied - cgroup_rmdir: failed to delete /sys/fs/cgroup/memory/user.slice
  lxc-start 20170707164658.915 ERROR    lxc_cgfs - cgroups/cgfs.c:cgroup_rmdir:209 - Permission denied - cgroup_rmdir: failed to delete /sys/fs/cgroup/systemd/user.slice/user-1000.slice/session-138.scope
  lxc-start 20170707164658.915 ERROR    lxc_start - start.c:lxc_spawn:1119 - Failed creating cgroups.
  lxc-start 20170707164658.915 ERROR    lxc_start - start.c:__lxc_start:1354 - Failed to spawn container "modoboa".
 

-- System Information:
Debian Release: buster/sid
  APT prefers testing
  APT policy: (990, 'testing'), (980, 'stable'), (500, 'testing-debug'), (90, 'experimental'), (90, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.9.0-3-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), LANGUAGE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages libpam-cgfs depends on:
ii  libc6           2.24-12
ii  libpam-runtime  1.1.8-3.6
ii  libpam0g        1.1.8-3.6
ii  systemd         233-9

libpam-cgfs recommends no packages.

libpam-cgfs suggests no packages.

-- no debconf information