Welcome to the Linux Foundation Forum!

LFS253 Lab 3.2

when i run
[email protected]:~$ lxc-create --template download --name unpriv-cont-user

Out put is:
Setting up the GPG keyring
ERROR: Unable to fetch GPG key from keyserver
lxc-create: unpriv-cont-user: lxccontainer.c: create_run_template: 1616 Failed to create container from template
lxc-create: unpriv-cont-user: tools/lxc_create.c: main: 319 Failed to create container unpriv-cont-user

can someone offer some hingts on where i went wrong

Answers

  • benjakh
    benjakh Posts: 9
    edited April 20

    found this thread: https://forum.linuxfoundation.org/discussion/857326/lxc-create-fails-to-create-container

    So I ran:
    setfacl -m u:100000:x ~/.local

    then ran the command
    sudo sudo lxc-create -t download --name unpriv-cont-user -- -d ubuntu -r xenial -a amd64
    output:
    lxc-create: unpriv-cont-user: tools/lxc_create.c: main: 266 Container already exists

    so then i went on with the lab and ran:
    sudo lxc-start -n unpriv-cont-user -d
    output:
    lxc-start: unpriv-cont-user: lxccontainer.c: do_lxcapi_start: 897 Ongoing container creation detected
    lxc-start: unpriv-cont-user: tools/lxc_start.c: main: 308 The container failed to start
    lxc-start: unpriv-cont-user: tools/lxc_start.c: main: 311 To get more details, run the container in foreground mode
    lxc-start: unpriv-cont-user: tools/lxc_start.c: main: 313 Additional information can be obtained by setting the --logfile and --logpriority options

  • chrispokorni
    chrispokorni Posts: 1,613

    Hi @benjakh,

    Instructions to set the access control list can be found in the lab exercise as well. The lab guide includes additional notes about optional keyserver usage, and an alternative create command. However, what causes most issues are the actual uid and gid used in commands.
    To validate that we have all correct values set, please provide the output of the following commands:

    $ id

    $ cat /etc/subuid

    $ cat /etc/subgid

    $ cat /etc/lxc/lxc-usernet

    $ ls -la ~/.config/lxc/default.conf

    $ cat ~/.config/lxc/default.conf

    $ getfacl ~/.local

    Regards,
    -Chris

  • benjakh
    benjakh Posts: 9

    $id
    uid=1000(benja) gid=1000(benja) groups=1000(benja),4(adm),24(cdrom),27(sudo),30(dip),46(plugdev),116(lxd)

    $ cat /etc/subuid
    benja:100000:65536

    $ cat /etc/subgid
    $: command not found

    $ cat /etc/subgid
    benja:100000:65536
    [email protected]:~/LFSplayground$ cat /etc/lxc/lxc-usernet

    USERNAME TYPE BRIDGE COUNT

    benja veth lxcbr0 10

    $ ls -la ~/.config/lxc/default.conf
    -rw-rw-r-- 1 benja benja 162 Apr 20 00:51 /home/benja/.config/lxc/default.conf

    $ cat ~/.config/lxc/default.conf
    lxc.net.0.type = veth
    lxc.net.0.link = lxcbr0
    lxc.net.0.flags = up
    lxc.net.0.hwaddr = 00:16:3e:xx:xx:xx
    lsc.idmap = u 0 231072 65536
    lsc.idmap = g 0 231072 65536

    $ getfacl ~/.local
    getfacl: Removing leading '/' from absolute path names

    file: home/benja/.local

    owner: root

    group: root

    user::rwx
    user:100000:--x
    user:231072:--x
    group::r-x
    mask::r-x
    other::r-x********

  • chrispokorni
    chrispokorni Posts: 1,613
    edited April 20

    Thank you for the detailed output, @benjakh.

    As suspected, there are inconsistencies in the UID and GID values used to configure the system. Please revisit all the post lxc installation steps in the lab guide, steps that configure the system and ensure that the proper UID and GID values are used. Reading carefully exercise descriptions should help in picking the correct values for your environment. After all, there seems to be only one set of UID and GID on your system, so the task should be pretty straight forward.

    I would also recommend ensuring that no typos are included in the default.conf file, as it seems to be the case in the output above.

    Regards,
    -Chris

  • benjakh
    benjakh Posts: 9

    Thanks for taking the time to answer my question

  • benjakh
    benjakh Posts: 9

    Thanks again, after reviewing the instructions, i am able to see where i mess up

Categories

Upcoming Training