[Pkg-utopia-maintainers] Bug#856311: avahi-daemon: Won't start due to rlimit nproc, confused by lxc containers

[Trent Lloyd]

On 17/08/17 09:58, James Valleroy wrote:
> On Mon, 27 Feb 2017 10:35:18 -0500 Matthew Gabeler-Lee
> <cheetah at fastcat.org> wrote:
>> On one of my systems, avahi-daemon can't start due to its default rlimit-nproc value of 3.
> This also affects Debian-CI for packages that depend on avahi-daemon
> (such as https://ci.debian.net/packages/f/freedombox-setup/unstable/amd64/).
>
> It looks like the default limit was removed in upstream release v0.7.
>

As you state, I removed the default limits in 0.7 for exactly this 
reason, if you don't use UID separation with your containers you run 
into this issue.
The change is literally to comment out the lines in the default 
avahi-daemon.conf

I actually ended up removing all the limits because the memory limit was 
also sometimes being exceeded causing crashes on larger networks.  So I 
commented out the entire section and decided with systemd we can leave 
it up to the system to impose any limits they desire as part of the init 
settings - but really it was just some kind of poor anti-DoS measure.  
It would not be unreasonable to backport this change to stable in my 
view, and intend to SRU the same change to stable in Ubuntu.

- Trent