Lab 3.2
Hi, i am on the step that creates unprivileged container. After issuing following command
lxc-create -t download -n unpriv-cont-user
I am getting following error message
ERROR: Unable to fetch GPG key from keyserver
lxc-create: unpriv-cont-user: lxccontainer.c: create_run_template: 1617 Failed to create container from template
lxc-create: unpriv-cont-user: tools/lxc_create.c: main: 327 Failed to create container unpriv-cont-user
Comments
-
Hi @sergeizak,
To troubleshoot tool-specific errors it is recommended to visit the official page of the tool, which may provide installation guides, FAQs, troubleshooting tips, and possibly forums.
For the issue you are experiencing with the GPG key, there seems to be a workaround, posted in the LXC forum:
https://discuss.linuxcontainers.org/t/lxc-error-unable-to-fetch-gpg-key-from-keyserver/5434Regards,
-Chris0 -
thanks Chris.. i got past the error by re-running prior steps in the lab and skipping host reboot
0 -
Hi @chrispokorni ,
I'm on the step where you start the application on the container:
student@ubuntu:~$ lxc-start -n unpriv-cont-user -d
I am getting the following error message:
lxc-start: unpriv-cont-user: lxccontainer.c: wait_on_daemonized_start: 842 Received container state "ABORTING" instead of "RUNNING"
lxc-start: unpriv-cont-user: tools/lxc_start.c: main: 330 The container failed to start
lxc-start: unpriv-cont-user: tools/lxc_start.c: main: 333 To get more details, run the container in foreground mode
lxc-start: unpriv-cont-user: tools/lxc_start.c: main: 336 Additional information can be obtained by setting the --logfile and --logpriority option
sI googled the issue and read through the following threads but the solutions are either personalized or incomplete:
https://discuss.linuxcontainers.org/t/error-with-fresh-ubuntu-18-04-container/3185/5
https://github.com/lxc/lxc/issues/3016
https://github.com/lxc/lxd/issues/56060 -
Hi @RachelChan,
Would you be able to provide a history of the prior commands, as it may provide clues to your issue.
Also, check the
/var/log/lxc/
directory for container logs. See whether anything is recorded in a log for thisunpriv-cont-user
container. You can also try parsing thrusyslog
with this command:cat /var/log/syslog | grep unpriv
Can you also provide the output of
cat /etc/os-release | grep VER
of your Ubuntu host (not the lxc container).Regards,
-Chris0 -
The prior commands were:
echo lxc.idmap = g 0 231072 65536 >>~/.config/lxc/default.conf
cat ~/.config/lxc/default.conf
sudo reboot
lxc-create -t download -n unpriv-cont-userI don't see any log files in /var/log/lxc.
cat /var/log/syslog | grep unpriv
doesn't return anythingThe output of
cat /etc/os-release | grep VER
is:0 -
What are the outputs of your
cat /etc/subuid
andcat /etc/subgid
?I have a feeling that you are not using the correct UID and GID when configuring LXC, and that's why containers are not started.
Regards,
-Chris0 -
Hi I am encountering quite the same issue:
lxc-start -n unpriv-cont-user -d
lxc-start: unpriv-cont-user: lxccontainer.c: wait_on_daemonized_start: 842 Received container state "ABORTING" instead of "RUNNING"
lxc-start: unpriv-cont-user: tools/lxc_start.c: main: 330 The container failed to start
lxc-start: unpriv-cont-user: tools/lxc_start.c: main: 333 To get more details, run the container in foreground mode
lxc-start: unpriv-cont-user: tools/lxc_start.c: main: 336 Additional information can be obtained by setting the --logfile and --logpriority options0 -
cat .config/lxc/default.conf
lxc.net.0.type = veth
lxc.net.0.link = lxcbr0
lxc.net.0.flags = up
lxc.net.0.hwaddr = 00:16:3e:xx:xx:xx
lxc.idmap = u 0 1001 1002
lxc.idmap = g 0 1001 1002uid & gid match and they are not the same as in the documentation...231072 65536
0 -
lxc-start -n unpriv-cont-user --logfile=junk1.log --logpriority DEBUG
lxc-start unpriv-cont-user 20201005231613.604 ERROR network - network.c:lxc_create_network_unpriv_exec:2178 - lxc-user-nic failed to configure requested network: cmd/lxc_user_nic.c: 1296: main: Quota reached
1 -
Hi @dhnijsure,
What is your machine type (local VM, cloud VM, bare-metal), size, OS?
Regards,
-Chris0 -
Hi Chris...I am using GCP VM as advised in the lab guide please.
Thanks...Dhanesh
0 -
0
-
I resolved the below error by using the correct username when configuring lxc-usernet file.
In the documentation the line is to add the "student" string, but in practice my username was not "student". By checking the logfile resulted, noticed the problem came from the networking part and figured out the user name issue in the lxc-usernet file.lxc-start: unpriv-cont-user: lxccontainer.c: wait_on_daemonized_start: 842 Received container state "ABORTING" instead of "RUNNING"
lxc-start: unpriv-cont-user: tools/lxc_start.c: main: 330 The container failed to start
lxc-start: unpriv-cont-user: tools/lxc_start.c: main: 333 To get more details, run the container in foreground mode
lxc-start: unpriv-cont-user: tools/lxc_start.c: main: 336 Additional information can be obtained by setting the --logfile and --logpriorityLogging was performed with:
lxc-start -n unpriv-cont-user --logfile=junk1.log --logpriority DEBUG
(thanks dhnijsure )0 -
@sergeizak said:
Hi, i am on the step that creates unprivileged container. After issuing following commandlxc-create -t download -n unpriv-cont-user
I am getting following error message
ERROR: Unable to fetch GPG key from keyserver
lxc-create: unpriv-cont-user: lxccontainer.c: create_run_template: 1617 Failed to create container from template
lxc-create: unpriv-cont-user: tools/lxc_create.c: main: 327 Failed to create container unpriv-cont-userHi everyone stuck on this error. The following is the command that worked for me. The only difference I've noticed is the two extra dashes (--) after the container's name (plus, of course the address of the keyserver).
[lxc-create -t download -n unpriv-cont-user -- --keyserver hkp://keyserver.ubuntu.com]
Hope it'll save you some research time. = )
0 -
Hello,
the next step is giving me the error bellow.
student@ubuntu:~$ sudo lxc-start -n priv-cont -d lxc-start: priv-cont: tools/lxc_start.c: main: 268 No container config specified
Did anyone face this issue?
0 -
@RaulSouza said:
Hello,the next step is giving me the error bellow.
student@ubuntu:~$ sudo lxc-start -n priv-cont -d lxc-start: priv-cont: tools/lxc_start.c: main: 268 No container config specified
Did anyone face this issue?
After some search, found a suggestion to add the parameter [-f] to specify the config file at [https://stackoverflow.com/questions/62594865/lxc-startno-container-config-specified]
however, after trying that, i'm facing the error bellow.
student@ubuntu:~$ sudo lxc-start -n priv-cont -d -f /home/student/.config/lxc/default.conf --logfile=junk1.log --logpriority DEBUG lxc-start: priv-cont: lxccontainer.c: wait_on_daemonized_start: 859 Received container state "ABORTING" instead of "RUNNING" lxc-start: priv-cont: tools/lxc_start.c: main: 308 The container failed to start lxc-start: priv-cont: tools/lxc_start.c: main: 311 To get more details, run the container in foreground mode lxc-start: priv-cont: tools/lxc_start.c: main: 313 Additional information can be obtained by setting the --logfile and --logpriority options
attached is the log file created during the execution. Please, could anyone have a look at that? Thanks in advance.
also tried to create the default.conf file under /root with root permissions, same behavior
Thank you very much.
0 -
@RaulSouza said:
@RaulSouza said:
Hello,the next step is giving me the error bellow.
student@ubuntu:~$ sudo lxc-start -n priv-cont -d lxc-start: priv-cont: tools/lxc_start.c: main: 268 No container config specified
Did anyone face this issue?
After some search, found a suggestion to add the parameter [-f] to specify the config file at [https://stackoverflow.com/questions/62594865/lxc-startno-container-config-specified]
however, after trying that, i'm facing the error bellow.
student@ubuntu:~$ sudo lxc-start -n priv-cont -d -f /home/student/.config/lxc/default.conf --logfile=junk1.log --logpriority DEBUG lxc-start: priv-cont: lxccontainer.c: wait_on_daemonized_start: 859 Received container state "ABORTING" instead of "RUNNING" lxc-start: priv-cont: tools/lxc_start.c: main: 308 The container failed to start lxc-start: priv-cont: tools/lxc_start.c: main: 311 To get more details, run the container in foreground mode lxc-start: priv-cont: tools/lxc_start.c: main: 313 Additional information can be obtained by setting the --logfile and --logpriority options
attached is the log file created during the execution. Please, could anyone have a look at that? Thanks in advance.
also tried to create the default.conf file under /root with root permissions, same behavior
Thank you very much.
Hi again.
Reviewed steps, and realized I've created the privileged container with wrong name.
after recreate with the command:
[student@ubuntu:~$ sudo lxc-create -t download -n priv-cont -- --keyserver hkp://keyserver.ubuntu.com]
the container start ran fine.
[student@ubuntu:~$ sudo lxc-start -n priv-cont -d]
0 -
Hi @RaulSouza,
Can you provide the contents of the following files?
/etc/subuid
/etc/subgid
/etc/lxc/lxc-usernet
~/.config/lxc/default.conf
And what permissions are set on the
~/.config/lxc/default.conf
file?Regards,
-Chris0 -
Hi Chris,
Thanks for the feedback, already found the mistake (was a typo). Anyways, here it is the requested.
Regards,
Raul.student@ubuntu:~$ cat /etc/subuid ubuntu:100000:65536 student:165536:65536 student@ubuntu:~$ cat /etc/subgid ubuntu:100000:65536 student:165536:65536 student@ubuntu:~$ cat /etc/lxc/lxc-usernet # USERNAME TYPE BRIDGE COUNT student veth lxcbr0 10 student@ubuntu:~$ cat ~/.config/lxc/default.conf lxc.net.0.type = veth lxc.net.0.link = lxcbr0 lxc.net.0.flags = up lxc.net.0.hwaddr = 00:16:3e:xx:xx:xx lxc.idmap = u 0 165536 65536 lxc.idmap = g 0 165536 65536 student@ubuntu:~$ ll ~/.config/lxc/default.conf -rw-rw-r-- 1 student student 162 Oct 3 22:23 /home/student/.config/lxc/default.conf
0
Categories
- All Categories
- 212 LFX Mentorship
- 212 LFX Mentorship: Linux Kernel
- 744 Linux Foundation IT Professional Programs
- 341 Cloud Engineer IT Professional Program
- 168 Advanced Cloud Engineer IT Professional Program
- 70 DevOps Engineer IT Professional Program
- 134 Cloud Native Developer IT Professional Program
- 136 Express Training Courses
- 136 Express Courses - Discussion Forum
- 6.1K Training Courses
- 44 LFC110 Class Forum - Discontinued
- 70 LFC131 Class Forum
- 42 LFD102 Class Forum
- 225 LFD103 Class Forum
- 18 LFD110 Class Forum
- 36 LFD121 Class Forum
- 18 LFD133 Class Forum
- 7 LFD134 Class Forum
- 18 LFD137 Class Forum
- 71 LFD201 Class Forum
- 4 LFD210 Class Forum
- 5 LFD210-CN Class Forum
- 2 LFD213 Class Forum - Discontinued
- 128 LFD232 Class Forum - Discontinued
- 2 LFD233 Class Forum
- 4 LFD237 Class Forum
- 24 LFD254 Class Forum
- 692 LFD259 Class Forum
- 111 LFD272 Class Forum
- 4 LFD272-JP クラス フォーラム
- 12 LFD273 Class Forum
- 133 LFS101 Class Forum
- 1 LFS111 Class Forum
- 3 LFS112 Class Forum
- 2 LFS116 Class Forum
- 4 LFS118 Class Forum
- 4 LFS142 Class Forum
- 5 LFS144 Class Forum
- 4 LFS145 Class Forum
- 2 LFS146 Class Forum
- 3 LFS147 Class Forum
- LFS148 Class Forum
- 14 LFS151 Class Forum
- 2 LFS157 Class Forum
- 23 LFS158 Class Forum
- 6 LFS162 Class Forum
- 2 LFS166 Class Forum
- 4 LFS167 Class Forum
- 3 LFS170 Class Forum
- 2 LFS171 Class Forum
- 3 LFS178 Class Forum
- 3 LFS180 Class Forum
- 2 LFS182 Class Forum
- 5 LFS183 Class Forum
- 31 LFS200 Class Forum
- 737 LFS201 Class Forum - Discontinued
- 3 LFS201-JP クラス フォーラム
- 18 LFS203 Class Forum
- 125 LFS207 Class Forum
- 2 LFS207-DE-Klassenforum
- 1 LFS207-JP クラス フォーラム
- 302 LFS211 Class Forum
- 56 LFS216 Class Forum
- 52 LFS241 Class Forum
- 48 LFS242 Class Forum
- 38 LFS243 Class Forum
- 15 LFS244 Class Forum
- 2 LFS245 Class Forum
- LFS246 Class Forum
- 48 LFS250 Class Forum
- 2 LFS250-JP クラス フォーラム
- 1 LFS251 Class Forum
- 149 LFS253 Class Forum
- 1 LFS254 Class Forum
- 1 LFS255 Class Forum
- 7 LFS256 Class Forum
- 1 LFS257 Class Forum
- 1.2K LFS258 Class Forum
- 10 LFS258-JP クラス フォーラム
- 117 LFS260 Class Forum
- 159 LFS261 Class Forum
- 42 LFS262 Class Forum
- 82 LFS263 Class Forum - Discontinued
- 15 LFS264 Class Forum - Discontinued
- 11 LFS266 Class Forum - Discontinued
- 24 LFS267 Class Forum
- 21 LFS268 Class Forum
- 30 LFS269 Class Forum
- 201 LFS272 Class Forum
- 2 LFS272-JP クラス フォーラム
- 1 LFS274 Class Forum
- 4 LFS281 Class Forum
- 9 LFW111 Class Forum
- 259 LFW211 Class Forum
- 181 LFW212 Class Forum
- 13 SKF100 Class Forum
- 1 SKF200 Class Forum
- 1 SKF201 Class Forum
- 795 Hardware
- 199 Drivers
- 68 I/O Devices
- 37 Monitors
- 102 Multimedia
- 174 Networking
- 91 Printers & Scanners
- 85 Storage
- 755 Linux Distributions
- 82 Debian
- 67 Fedora
- 16 Linux Mint
- 13 Mageia
- 23 openSUSE
- 147 Red Hat Enterprise
- 31 Slackware
- 13 SUSE Enterprise
- 352 Ubuntu
- 468 Linux System Administration
- 39 Cloud Computing
- 71 Command Line/Scripting
- Github systems admin projects
- 93 Linux Security
- 78 Network Management
- 102 System Management
- 47 Web Management
- 60 Mobile Computing
- 17 Android
- 31 Development
- 1.2K New to Linux
- 1K Getting Started with Linux
- 369 Off Topic
- 114 Introductions
- 173 Small Talk
- 21 Study Material
- 682 Programming and Development
- 296 Kernel Development
- 368 Software Development
- 1.8K Software
- 236 Applications
- 182 Command Line
- 3 Compiling/Installing
- 985 Games
- 316 Installation
- 92 All In Program
- 92 All In Forum
Upcoming Training
-
August 20, 2018
Kubernetes Administration (LFS458)
-
August 20, 2018
Linux System Administration (LFS301)
-
August 27, 2018
Open Source Virtualization (LFS462)
-
August 27, 2018
Linux Kernel Debugging and Security (LFD440)