Bug#918839: systemd: LXC Container with debian buster can no longer start services after updating to systemd_240

[Adrian Almenar]

Container is a simple debian buster made with debootstrap

using systemd 239 server was able to install and run mysql, apache, dovecot
services but since the update to systemd 240, not even creating a new
template the services start and on a clean template they dont even install.


[510907.402767] audit: type=1400 audit(1546941509.083:189):
apparmor="DENIED" operation="mount" info="failed flags match" error=-13
profile="lxc-9002_</var/lib/lxc>" name="/" pid=30859 comm="(install)"
flags="rw, rslave"

[511748.194258] audit: type=1400 audit(1546942349.893:190):
apparmor="DENIED" operation="mount" info="failed flags match" error=-13
profile="lxc-9002_</var/lib/lxc>" name="/" pid=1698 comm="(pachectl)"
flags="rw, rslave"

[519311.829786] audit: type=1400 audit(1546949913.651:193):
apparmor="DENIED" operation="mount" info="failed flags match" error=-13
profile="lxc-9002_</var/lib/lxc>" name="/" pid=24770 comm="(dovecot)"
flags="rw, rslave"

Downgrading to systemd 239, the issues dissapear totally on the system.


On Wed, 9 Jan 2019 at 21:26, Michael Biebl <biebl at debian.org> wrote:

> Control: tags -1 + moreinfo
>
> Am 09.01.19 um 19:26 schrieb Adrian Almenar:
> > Package: systemd
> > Version: 240-2
> > Severity: important
> >
> > Dear Maintainer,
> >
> > *** Reporter, please consider answering these questions, where
> appropriate ***
> >
> >    * What led up to the situation?
> >    * What exactly did you do (or not do) that was effective (or
> >      ineffective)?
> >    * What was the outcome of this action?
> >    * What outcome did you expect instead?
> >
> > *** End of the template - remove these template lines ***
> >
>
>
> This bug report is empty.
> Please provide more information about your host/container configuration,
> error messages etc.
>
>
>
>
> --
> Why is it that all of the instruments seeking intelligent life in the
> universe are pointed away from Earth?
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-systemd-maintainers/attachments/20190109/7c76e3af/attachment-0001.html>