[libvirt] [PATCH] lxc: Add virCgroupSetOwner()

[Richard Weinberger]

Am 14.02.2014 11:21, schrieb Stephan Sachse:
> this patch works for me. container is starting fine. but a login
> (ssh/console) is not possible.

Thanks for testing!
But I fear my patch is not the culprit for your login issues.

> host: centos6
> kernel: 3.13.2
> libvirt: 1.2.1 (+ lxc: Add virCgroupSetOwner())
> 
> container logs says
> 
> agetty[38]: /dev/tty1: cannot get controlling tty: Operation not permitted
> agetty[38]: /dev/tty1: cannot get controlling tty: Operation not permitted
> agetty[38]: /dev/tty1: cannot set process group: Inappropriate ioctl for device

Is this really the reason why the login fails? Does getty not start or does the login fail?
I've never tested an upstart based distro maybe it is somehow confused. :)

Can you please collect more details why a login via ssh is failing?

Also keep in mind that running a compete distro within LXC + user namespaces requires
some changes. Like disabling pam_loginuid.so in pam.
For systemd distros you have to remove OOMScoreAdjust= and CapabilityBoundingSet= from all units...

Thanks,
//richard