Ubuntu
lxc package

  1. Bug #1342960
  2. Comment #4

Comment 4 for bug 1342960

Revision history for this message
Serge Hallyn (serge-hallyn) wrote : Re: Error setting cgroup devices.deny limit with nested lxc container

Thanks for verifying. What is happening is actually vaguely explained in the mountcgroup hook itself, and is an unfortunate side effect of a somewhat recent kernel change:

cd /sys/fs/cgroup/devices
sudo mkdir a
echo a | sudo tee -a a/devices.deny # succeeds
sudo mkdir -p b/c
echo a | sudo tee -a b/devices.deny # fails

If a devices cgroup has any child cgroups, then you can no longer make certain changes to it.

Marking this confirmed and changing the title to reflect that the comments in /usr/share/lxc/config/ubuntu.common.conf need to be changed.