Re: LXC unprivileged containers

[Johannes Graumann <johannes_graumann@web.de>]

Darren Baginski wrote:

> Hello!
> 
> 
> I'm trying to spawn unprivileged  LXC containers as described here
> http://www.flockport.com/lxc-using-unprivileged-containers/ , however
> getting:
> 
> lxc-create -n myvm -t debian -- -r jessie
> unshare: Operation not permitted
> read pipe: No such file or directory
> lxc_container: lxccontainer.c: do_create_container_dir: 760 Failed to
> chown container dir lxc_container: lxc_create.c: main: 271 Error creating
> container myvm
> 
> My setups is testing / unstable (stable doesn't support unprivileged
> containers due to lxc version at least ): ~$ uname -v
> #1 SMP Debian 3.16.7-ckt9-3 (2015-04-23
> ~$ lxc-info --version
> 1.0.7
> 
> 
> What could be wrong ?

Try to set

PROMPT> sudo echo 1 > /sys/fs/cgroup/cpuset/cgroup.clone_children
PROMPT> sudo echo 1 > /proc/sys/kernel/unprivileged_userns_clone

before the "lxc-creat' call.

Sincerely, Joh