Lab 3.2
Hi, i am on the step that creates unprivileged container. After issuing following command
lxc-create -t download -n unpriv-cont-user
I am getting following error message
ERROR: Unable to fetch GPG key from keyserver
lxc-create: unpriv-cont-user: lxccontainer.c: create_run_template: 1617 Failed to create container from template
lxc-create: unpriv-cont-user: tools/lxc_create.c: main: 327 Failed to create container unpriv-cont-user
Comments
-
Hi @sergeizak,
To troubleshoot tool-specific errors it is recommended to visit the official page of the tool, which may provide installation guides, FAQs, troubleshooting tips, and possibly forums.
For the issue you are experiencing with the GPG key, there seems to be a workaround, posted in the LXC forum:
https://discuss.linuxcontainers.org/t/lxc-error-unable-to-fetch-gpg-key-from-keyserver/5434Regards,
-Chris0 -
thanks Chris.. i got past the error by re-running prior steps in the lab and skipping host reboot
0 -
Hi @chrispokorni ,
I'm on the step where you start the application on the container:
student@ubuntu:~$ lxc-start -n unpriv-cont-user -d
I am getting the following error message:
lxc-start: unpriv-cont-user: lxccontainer.c: wait_on_daemonized_start: 842 Received container state "ABORTING" instead of "RUNNING"
lxc-start: unpriv-cont-user: tools/lxc_start.c: main: 330 The container failed to start
lxc-start: unpriv-cont-user: tools/lxc_start.c: main: 333 To get more details, run the container in foreground mode
lxc-start: unpriv-cont-user: tools/lxc_start.c: main: 336 Additional information can be obtained by setting the --logfile and --logpriority option
sI googled the issue and read through the following threads but the solutions are either personalized or incomplete:
https://discuss.linuxcontainers.org/t/error-with-fresh-ubuntu-18-04-container/3185/5
https://github.com/lxc/lxc/issues/3016
https://github.com/lxc/lxd/issues/56060 -
Hi @RachelChan,
Would you be able to provide a history of the prior commands, as it may provide clues to your issue.
Also, check the
/var/log/lxc/directory for container logs. See whether anything is recorded in a log for thisunpriv-cont-usercontainer. You can also try parsing thrusyslogwith this command:cat /var/log/syslog | grep unprivCan you also provide the output of
cat /etc/os-release | grep VERof your Ubuntu host (not the lxc container).Regards,
-Chris0 -
The prior commands were:
echo lxc.idmap = g 0 231072 65536 >>~/.config/lxc/default.conf
cat ~/.config/lxc/default.conf
sudo reboot
lxc-create -t download -n unpriv-cont-userI don't see any log files in /var/log/lxc.

cat /var/log/syslog | grep unprivdoesn't return anythingThe output of
cat /etc/os-release | grep VERis:
0 -
What are the outputs of your
cat /etc/subuidandcat /etc/subgid?I have a feeling that you are not using the correct UID and GID when configuring LXC, and that's why containers are not started.
Regards,
-Chris0 -
Hi I am encountering quite the same issue:
lxc-start -n unpriv-cont-user -d
lxc-start: unpriv-cont-user: lxccontainer.c: wait_on_daemonized_start: 842 Received container state "ABORTING" instead of "RUNNING"
lxc-start: unpriv-cont-user: tools/lxc_start.c: main: 330 The container failed to start
lxc-start: unpriv-cont-user: tools/lxc_start.c: main: 333 To get more details, run the container in foreground mode
lxc-start: unpriv-cont-user: tools/lxc_start.c: main: 336 Additional information can be obtained by setting the --logfile and --logpriority options0 -
cat .config/lxc/default.conf
lxc.net.0.type = veth
lxc.net.0.link = lxcbr0
lxc.net.0.flags = up
lxc.net.0.hwaddr = 00:16:3e:xx:xx:xx
lxc.idmap = u 0 1001 1002
lxc.idmap = g 0 1001 1002uid & gid match and they are not the same as in the documentation...231072 65536
0 -
lxc-start -n unpriv-cont-user --logfile=junk1.log --logpriority DEBUG
lxc-start unpriv-cont-user 20201005231613.604 ERROR network - network.c:lxc_create_network_unpriv_exec:2178 - lxc-user-nic failed to configure requested network: cmd/lxc_user_nic.c: 1296: main: Quota reached
1 -
Hi @dhnijsure,
What is your machine type (local VM, cloud VM, bare-metal), size, OS?
Regards,
-Chris0 -
Hi Chris...I am using GCP VM as advised in the lab guide please.
Thanks...Dhanesh
0 -
0
-
I resolved the below error by using the correct username when configuring lxc-usernet file.
In the documentation the line is to add the "student" string, but in practice my username was not "student". By checking the logfile resulted, noticed the problem came from the networking part and figured out the user name issue in the lxc-usernet file.lxc-start: unpriv-cont-user: lxccontainer.c: wait_on_daemonized_start: 842 Received container state "ABORTING" instead of "RUNNING"
lxc-start: unpriv-cont-user: tools/lxc_start.c: main: 330 The container failed to start
lxc-start: unpriv-cont-user: tools/lxc_start.c: main: 333 To get more details, run the container in foreground mode
lxc-start: unpriv-cont-user: tools/lxc_start.c: main: 336 Additional information can be obtained by setting the --logfile and --logpriorityLogging was performed with:
lxc-start -n unpriv-cont-user --logfile=junk1.log --logpriority DEBUG
(thanks dhnijsure )0 -
@sergeizak said:
Hi, i am on the step that creates unprivileged container. After issuing following commandlxc-create -t download -n unpriv-cont-user
I am getting following error message
ERROR: Unable to fetch GPG key from keyserver
lxc-create: unpriv-cont-user: lxccontainer.c: create_run_template: 1617 Failed to create container from template
lxc-create: unpriv-cont-user: tools/lxc_create.c: main: 327 Failed to create container unpriv-cont-userHi everyone stuck on this error. The following is the command that worked for me. The only difference I've noticed is the two extra dashes (--) after the container's name (plus, of course the address of the keyserver).
[lxc-create -t download -n unpriv-cont-user -- --keyserver hkp://keyserver.ubuntu.com]
Hope it'll save you some research time. = )
0 -
Hello,
the next step is giving me the error bellow.
student@ubuntu:~$ sudo lxc-start -n priv-cont -d lxc-start: priv-cont: tools/lxc_start.c: main: 268 No container config specified
Did anyone face this issue?
0 -
@RaulSouza said:
Hello,the next step is giving me the error bellow.
student@ubuntu:~$ sudo lxc-start -n priv-cont -d lxc-start: priv-cont: tools/lxc_start.c: main: 268 No container config specified
Did anyone face this issue?
After some search, found a suggestion to add the parameter [-f] to specify the config file at [https://stackoverflow.com/questions/62594865/lxc-startno-container-config-specified]
however, after trying that, i'm facing the error bellow.
student@ubuntu:~$ sudo lxc-start -n priv-cont -d -f /home/student/.config/lxc/default.conf --logfile=junk1.log --logpriority DEBUG lxc-start: priv-cont: lxccontainer.c: wait_on_daemonized_start: 859 Received container state "ABORTING" instead of "RUNNING" lxc-start: priv-cont: tools/lxc_start.c: main: 308 The container failed to start lxc-start: priv-cont: tools/lxc_start.c: main: 311 To get more details, run the container in foreground mode lxc-start: priv-cont: tools/lxc_start.c: main: 313 Additional information can be obtained by setting the --logfile and --logpriority options
attached is the log file created during the execution. Please, could anyone have a look at that? Thanks in advance.
also tried to create the default.conf file under /root with root permissions, same behavior
Thank you very much.
0 -
@RaulSouza said:
@RaulSouza said:
Hello,the next step is giving me the error bellow.
student@ubuntu:~$ sudo lxc-start -n priv-cont -d lxc-start: priv-cont: tools/lxc_start.c: main: 268 No container config specified
Did anyone face this issue?
After some search, found a suggestion to add the parameter [-f] to specify the config file at [https://stackoverflow.com/questions/62594865/lxc-startno-container-config-specified]
however, after trying that, i'm facing the error bellow.
student@ubuntu:~$ sudo lxc-start -n priv-cont -d -f /home/student/.config/lxc/default.conf --logfile=junk1.log --logpriority DEBUG lxc-start: priv-cont: lxccontainer.c: wait_on_daemonized_start: 859 Received container state "ABORTING" instead of "RUNNING" lxc-start: priv-cont: tools/lxc_start.c: main: 308 The container failed to start lxc-start: priv-cont: tools/lxc_start.c: main: 311 To get more details, run the container in foreground mode lxc-start: priv-cont: tools/lxc_start.c: main: 313 Additional information can be obtained by setting the --logfile and --logpriority options
attached is the log file created during the execution. Please, could anyone have a look at that? Thanks in advance.
also tried to create the default.conf file under /root with root permissions, same behavior
Thank you very much.
Hi again.
Reviewed steps, and realized I've created the privileged container with wrong name.

after recreate with the command:
[student@ubuntu:~$ sudo lxc-create -t download -n priv-cont -- --keyserver hkp://keyserver.ubuntu.com]the container start ran fine.
[student@ubuntu:~$ sudo lxc-start -n priv-cont -d]0 -
Hi @RaulSouza,
Can you provide the contents of the following files?
/etc/subuid/etc/subgid/etc/lxc/lxc-usernet~/.config/lxc/default.confAnd what permissions are set on the
~/.config/lxc/default.conffile?Regards,
-Chris0 -
Hi Chris,
Thanks for the feedback, already found the mistake (was a typo). Anyways, here it is the requested.
Regards,
Raul.student@ubuntu:~$ cat /etc/subuid ubuntu:100000:65536 student:165536:65536 student@ubuntu:~$ cat /etc/subgid ubuntu:100000:65536 student:165536:65536 student@ubuntu:~$ cat /etc/lxc/lxc-usernet # USERNAME TYPE BRIDGE COUNT student veth lxcbr0 10 student@ubuntu:~$ cat ~/.config/lxc/default.conf lxc.net.0.type = veth lxc.net.0.link = lxcbr0 lxc.net.0.flags = up lxc.net.0.hwaddr = 00:16:3e:xx:xx:xx lxc.idmap = u 0 165536 65536 lxc.idmap = g 0 165536 65536 student@ubuntu:~$ ll ~/.config/lxc/default.conf -rw-rw-r-- 1 student student 162 Oct 3 22:23 /home/student/.config/lxc/default.conf
0
Categories
- All Categories
- 177 LFX Mentorship
- 177 LFX Mentorship: Linux Kernel
- 755 Linux Foundation IT Professional Programs
- 375 Cloud Engineer IT Professional Program
- 170 Advanced Cloud Engineer IT Professional Program
- 74 DevOps IT Professional Program - Discontinued
- 5 DevOps & GitOps IT Professional Program
- 100 Cloud Native Developer IT Professional Program
- 7.6K Training Courses & Learning Paths
- 2 AI & ML Training
- 1 Blockchain & Decentralized Identity Training
- 5 Cloud & Containers Training
- 1 Cybersecurity Training
- 2 DevOps & Site-Reliability Training
- 1 Linux Kernel Development Training
- 1 Networking Training
- 2 Open Source Best Practice Training
- 2 System Administration Training
- 1 System Engineering Training
- 1 Web & Application Development Training
- 794 Hardware
- 202 Drivers
- 68 I/O Devices
- 37 Monitors
- 95 Multimedia
- 173 Networking
- 91 Printers & Scanners
- 89 Storage
- 769 Linux Distributions
- 81 Debian
- 68 Fedora
- 22 Linux Mint
- 13 Mageia
- 24 openSUSE
- 150 Red Hat Enterprise
- 31 Slackware
- 13 SUSE Enterprise
- 356 Ubuntu
- 465 Linux System Administration
- 31 Cloud Computing
- 73 Command Line/Scripting
- Github systems admin projects
- 98 Linux Security
- 78 Network Management
- 101 System Management
- 46 Web Management
- 112 Mobile Computing
- 20 Android
- 77 Development
- 1.2K New to Linux
- 1K Getting Started with Linux
- 393 Off Topic
- 121 Introductions
- 182 Small Talk
- 29 Study Material
- 980 Programming and Development
- 310 Kernel Development
- 652 Software Development
- 995 Software
- 387 Applications
- 182 Command Line
- 5 Compiling/Installing
- 68 Games
- 317 Installation
- Archived
- 2 LFD140 Class Forum
- 1.4K LFS258 Class Forum
Upcoming Training
-
August 20, 2018
Kubernetes Administration (LFS458)
-
August 20, 2018
Linux System Administration (LFS301)
-
August 27, 2018
Open Source Virtualization (LFS462)
-
August 27, 2018
Linux Kernel Debugging and Security (LFD440)