lxc. procps can not be installed

Thanks for reporting this bug. Could you please post the contents of

/var/log/upstart/procps*

/var/log/upstart/procps.log

error: permission denied on key 'kernel.printk'
net.ipv6.conf.all.use_tempaddr = 2
net.ipv6.conf.default.use_tempaddr = 2
error: permission denied on key 'kernel.kptr_restrict'
net.ipv4.conf.default.rp_filter = 1
net.ipv4.conf.all.rp_filter = 1
error: permission denied on key 'kernel.yama.ptrace_scope'
vm.mmap_min_addr = 65536
error: permission denied on key 'kernel.core_uses_pid'
error: permission denied on key 'fs.suid_dumpable'
error: "Invalid argument" setting key "net.core.somaxconn"
net.ipv4.conf.default.rp_filter = 1
net.ipv4.conf.all.rp_filter = 1
net.ipv4.conf.all.accept_redirects = 0
net.ipv6.conf.all.accept_redirects = 0
net.ipv4.conf.all.send_redirects = 0
net.ipv4.conf.all.accept_source_route = 0
net.ipv6.conf.all.accept_source_route = 0
net.ipv4.icmp_echo_ignore_broadcasts = 1
error: permission denied on key 'kernel.printk'
net.ipv6.conf.all.use_tempaddr = 2
net.ipv6.conf.default.use_tempaddr = 2
error: permission denied on key 'kernel.kptr_restrict'
net.ipv4.conf.default.rp_filter = 1
net.ipv4.conf.all.rp_filter = 1
error: permission denied on key 'kernel.yama.ptrace_scope'
vm.mmap_min_addr = 65536
error: permission denied on key 'kernel.core_uses_pid'
error: permission denied on key 'fs.suid_dumpable'
error: "Invalid argument" setting key "net.core.somaxconn"
net.ipv4.conf.default.rp_filter = 1
net.ipv4.conf.all.rp_filter = 1
net.ipv4.conf.all.accept_redirects = 0
net.ipv6.conf.all.accept_redirects = 0
net.ipv4.conf.all.send_redirects = 0
net.ipv4.conf.all.accept_source_route = 0
net.ipv6.conf.all.accept_source_route = 0
net.ipv4.icmp_echo_ignore_broadcasts = 1
error: permission denied on key 'kernel.printk'
net.ipv6.conf.all.use_tempaddr = 2
net.ipv6.conf.default.use_tempaddr = 2
error: permission denied on key 'kernel.kptr_restrict'
net.ipv4.conf.default.rp_filter = 1
net.ipv4.conf.all.rp_filter = 1
error: permission denied on key 'kernel.yama.ptrace_scope'
vm.mmap_min_addr = 65536
error: permission denied on key 'kernel.core_uses_pid'
error: permission denied on key 'fs.suid_dumpable'
error: "Invalid argument" setting key "net.core.somaxconn"
net.ipv4.conf.default.rp_filter = 1
net.ipv4...

Thanks for the info. I was mis-remembering and thought we had
changed the procps job to ignore eperm failures, but in fact it
only ignores failures due to unknown keys.

A container is in fact not allowed to change any sysctl values
other than /proc/sys/kernel/shm*.

We could make sysctl ignore the write failures, but that may not
be the safest thing to do long-term.

In the meantime, in your container you should edit /etc/sysctl.conf
and /etc/sysctl.d/* and remove the net.core.somaxconn, fs.suid_dumpable,
kernel.yama.ptrace_scope, kernel.core_uses_pid, kernel.printk, and
kernel,ptr_restrict entries.

thanks! now the problem is resolved.

Thanks. I've been thinking about what to do with this bug... I could be
persuaded otherwise, but currently my thinking is: (a) it is not safe to
always ignore errors, as users should be told if they have a bad sysctl
listed in case it is important; (b) for the same reason, it is best not to
ignore all errors in containers. Therefore I will mark this bug invalid.