[pkg-lxc-devel] Bug in LXC/buster regarding lxc-user-nic

[Dirk Geschke]

Hi LXC-Maintainer,

the debian version of LXC has still an old bug regarding the
NIC Quota of unprivileged LXCs. If you attach an uniprivileged
LXC to an bridge, it counts all veth Interfaces, not the own
ones. So it is likelely to reach the quotas set in the file
/etc/lxc/lxc-usernet.

The fix is quite easy, it is a missing "else" statement:

   https://github.com/lxc/lxc/pull/3015/commits/d871a9f1e562ff0ff8c0f8b4124246a8521cabca

You can find some informations on it here:

   lxc-usernet config seem to use all veth bound to a bridge when computing one user's quota.
   https://github.com/lxc/lxc/issues/2765

It would be nice, if it could be fixed. Probably some more people will
stumble upon this little bug. Most people seam to allow 5 nics and the
6th LXC will fail...

Best regards

Dirk

-- 
+----------------------------------------------------------------------+
| Dr. Dirk Geschke       / Plankensteinweg 61    / 85435 Erding        |
| Telefon: 08122-559448  / Mobil: 0176-96906350 / Fax: 08122-9818106   |
| dirk at geschke-online.de / dirk at lug-erding.de  / kontakt at lug-erding.de |
+----------------------------------------------------------------------+