[pkg-lxc-devel] Bug#934155: lxc: unprivileged lxc container with veth does not start since update to 1:3.1.0+really3.0.4-1 amd64

[Eugene Berdnikov]

 I can't start even a priveleged container (under root).
 
 Kernel: 4.19.0-4-amd64 #1 SMP Debian 4.19.28-2 (2019-03-15) x86_64 GNU/Linux

 Problem was solved by downgrade to lxc/liblxc1 1:3.1.0+really3.0.3-8.
 Example of debug log in attachement.
-- 
 Eugene Berdnikov
-------------- next part --------------
lxc-start ipsec6 20190818184124.772 INFO     lxccontainer - lxccontainer.c:do_lxcapi_start:971 - Set process title to [lxc monitor] /var/lib/lxc ipsec6
lxc-start ipsec6 20190818184124.773 INFO     lsm - lsm/lsm.c:lsm_init:50 - LSM security driver AppArmor
lxc-start ipsec6 20190818184124.773 DEBUG    terminal - terminal.c:lxc_terminal_peer_default:676 - No such device - The process does not have a controlling terminal
lxc-start ipsec6 20190818184124.774 INFO     start - start.c:lxc_init:926 - Container "ipsec6" is initialized
lxc-start ipsec6 20190818184124.774 DEBUG    cgfsng - cgroups/cgfsng.c:cg_legacy_filter_and_set_cpus:495 - No isolated or offline cpus present in cpuset
lxc-start ipsec6 20190818184124.774 DEBUG    cgfsng - cgroups/cgfsng.c:cg_legacy_handle_cpuset_hierarchy:612 - "cgroup.clone_children" was already set to "1"
lxc-start ipsec6 20190818184124.774 ERROR    cgfsng - cgroups/cgfsng.c:mkdir_eexist_on_last:1277 - File exists - Failed to create directory "/sys/fs/cgroup/cpuset//lxc.monitor/ipsec6"
lxc-start ipsec6 20190818184124.774 ERROR    cgfsng - cgroups/cgfsng.c:monitor_create_path_for_hierarchy:1298 - Failed to create cgroup "/sys/fs/cgroup/cpuset//lxc.monitor/ipsec6"
lxc-start ipsec6 20190818184124.774 ERROR    cgfsng - cgroups/cgfsng.c:cgfsng_monitor_create:1388 - Failed to create cgroup "/sys/fs/cgroup/cpuset//lxc.monitor/ipsec6"
lxc-start ipsec6 20190818184124.774 DEBUG    cgfsng - cgroups/cgfsng.c:cg_legacy_filter_and_set_cpus:495 - No isolated or offline cpus present in cpuset
lxc-start ipsec6 20190818184124.774 DEBUG    cgfsng - cgroups/cgfsng.c:cg_legacy_handle_cpuset_hierarchy:612 - "cgroup.clone_children" was already set to "1"
lxc-start ipsec6 20190818184124.774 ERROR    cgfsng - cgroups/cgfsng.c:mkdir_eexist_on_last:1277 - File exists - Failed to create directory "/sys/fs/cgroup/cpuset//lxc.monitor/ipsec6-1"
lxc-start ipsec6 20190818184124.774 ERROR    cgfsng - cgroups/cgfsng.c:monitor_create_path_for_hierarchy:1298 - Failed to create cgroup "/sys/fs/cgroup/cpuset//lxc.monitor/ipsec6-1"
lxc-start ipsec6 20190818184124.775 ERROR    cgfsng - cgroups/cgfsng.c:cgfsng_monitor_create:1388 - Failed to create cgroup "/sys/fs/cgroup/cpuset//lxc.monitor/ipsec6-1"
lxc-start ipsec6 20190818184124.775 DEBUG    cgfsng - cgroups/cgfsng.c:cg_legacy_filter_and_set_cpus:495 - No isolated or offline cpus present in cpuset
lxc-start ipsec6 20190818184124.775 DEBUG    cgfsng - cgroups/cgfsng.c:cg_legacy_handle_cpuset_hierarchy:612 - "cgroup.clone_children" was already set to "1"
lxc-start ipsec6 20190818184124.775 INFO     cgfsng - cgroups/cgfsng.c:cgfsng_monitor_create:1403 - The monitor process uses "lxc.monitor/ipsec6-2" as cgroup
lxc-start ipsec6 20190818184124.775 ERROR    cgfsng - cgroups/cgfsng.c:__do_cgroup_enter:1498 - No space left on device - Failed to enter cgroup "/sys/fs/cgroup/cpuset//lxc.monitor/ipsec6-2/cgroup.procs"
lxc-start ipsec6 20190818184124.775 ERROR    start - start.c:__lxc_start:2004 - Failed to enter monitor cgroup
lxc-start ipsec6 20190818184124.775 DEBUG    lxccontainer - lxccontainer.c:wait_on_daemonized_start:839 - First child 918 exited
lxc-start ipsec6 20190818184124.775 ERROR    lxccontainer - lxccontainer.c:wait_on_daemonized_start:851 - Received container state "STOPPING" instead of "RUNNING"
lxc-start ipsec6 20190818184124.776 ERROR    lxc_start - tools/lxc_start.c:main:329 - The container failed to start
lxc-start ipsec6 20190818184124.776 ERROR    lxc_start - tools/lxc_start.c:main:332 - To get more details, run the container in foreground mode
lxc-start ipsec6 20190818184124.776 ERROR    lxc_start - tools/lxc_start.c:main:335 - Additional information can be obtained by setting the --logfile and --logpriority options
lxc-start ipsec6 20190818184124.776 DEBUG    cgfsng - cgroups/cgfsng.c:cg_legacy_filter_and_set_cpus:495 - No isolated or offline cpus present in cpuset
lxc-start ipsec6 20190818184124.776 DEBUG    cgfsng - cgroups/cgfsng.c:cg_legacy_handle_cpuset_hierarchy:612 - "cgroup.clone_children" was already set to "1"
lxc-start ipsec6 20190818184124.776 WARN     cgfsng - cgroups/cgfsng.c:cgfsng_monitor_destroy:1178 - No space left on device - Failed to move monitor 919 to "/sys/fs/cgroup/cpuset//lxc.pivot/cgroup.procs"