apt-get install lxc doesn't load required apparmor profiles
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
apparmor (Ubuntu) |
Fix Released
|
Critical
|
Unassigned | ||
init-system-helpers (Ubuntu) |
Fix Released
|
Medium
|
Martin Pitt | ||
lxc (Ubuntu) |
Fix Released
|
Medium
|
Martin Pitt | ||
squid3 (Ubuntu) |
Fix Released
|
Undecided
|
Unassigned | ||
upstart (Ubuntu) |
Fix Released
|
Medium
|
Martin Pitt |
Bug Description
I'm trying to use LXC on my openstack instance which runs vivid daily:
$ sudo apt-get install lxc -y
$ sudo lxc-create -t ubuntu-cloud --name=vivid -- --flush-cache --stream=daily --release=vivid
$ sudo lxc-start --name vivid --logfile=lxc.log
lxc-start: lxc_start.c: main: 344 The container failed to start.
lxc-start: lxc_start.c: main: 346 To get more details, run the container in foreground mode.
lxc-start: lxc_start.c: main: 348 Additional information can be obtained by setting the --logfile and --logpriority options.
In the log file (lxc.log) I observe the following error:
lxc-start 1426516387.814 ERROR lxc_apparmor - lsm/apparmor.
This profile *exists* under /etc/apparmor.
This issue disappears if I:
(a) reload apparmor profile manually: sudo /etc/init.
or
(b) reboot the instance
I'd expect that 'apt-get install lxc' has to load all appropriate apparmor profiles to allow starting containers w/o profile reloading / rebooting.
description: | updated |
Changed in apparmor (Ubuntu): | |
importance: | Undecided → Critical |
Changed in init-system-helpers (Ubuntu): | |
importance: | Undecided → Critical |
Changed in upstart (Ubuntu): | |
importance: | Undecided → Critical |
Changed in lxc (Ubuntu): | |
status: | In Progress → Fix Committed |
Changed in upstart (Ubuntu): | |
assignee: | nobody → Martin Pitt (pitti) |
importance: | Critical → Medium |
status: | Triaged → In Progress |
Changed in init-system-helpers (Ubuntu): | |
status: | Triaged → In Progress |
I couldn't reproduce this. I installed a fresh vivid vm, did apt-get install lxc,
then
ubuntu@lxc-aa:~$ sudo aa-status bin/lxc- start lib/NetworkMana ger/nm- dhcp-client. action lib/NetworkMana ger/nm- dhcp-helper lib/connman/ scripts/ dhclient- script sbin/tcpdump container- default container- default- with-mounting container- default- with-nesting
apparmor module is loaded.
9 profiles are loaded.
9 profiles are in enforce mode.
/sbin/dhclient
/usr/
/usr/
/usr/
/usr/
/usr/
lxc-
lxc-
lxc-
and
ubuntu@lxc-aa:~$ sudo lxc-create -t ubuntu-cloud --name=vivid ------- ------- ------- ------- ------- ---
[...]
ubuntu@lxc-aa:~$ sudo lxc-start -n vivid
ubuntu@lxc-aa:~$ sudo lxc-ls -f
NAME STATE IPV4 IPV6 GROUPS AUTOSTART
-------
vivid RUNNING - - - NO