<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 12 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{mso-style-priority:99;
mso-style-link:"Plain Text Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:10.5pt;
font-family:Consolas;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.PlainTextChar
{mso-style-name:"Plain Text Char";
mso-style-priority:99;
mso-style-link:"Plain Text";
font-family:Consolas;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=PL link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span lang=EN-US>Hi there!<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US>I am trying to turn on user namespace by adding following lines to the config:<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US> <idmap><o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US> <uid start='0' target='0' count='100000'/><o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US> <gid start='0' target='0' count='100000'/><o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US> </idmap><o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US>As you can see the root in container is mapped to the root outside. I was expected to see no difference after adding this lines, but unfortunately there are some (see details below). <o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US>Am I missing something or is there a problem with system, libvirt or kernel?<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US>Full libvirt config:<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US><domain type='lxc'><o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><name>test_with_idmap</name><o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><memory>102400</memory><o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><os><o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US> <type>exe</type><o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US> <init>/usr/lib/systemd/systemd</init><o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US></os><o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><on_poweroff>destroy</on_poweroff><o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><on_reboot>restart</on_reboot><o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><on_crash>destroy</on_crash><o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><idmap><o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US> <uid start='0' target='0' count='100000'/><o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US> <gid start='0' target='0' count='100000'/><o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US></idmap><o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><devices><o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US> <console type='pty'/><o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US> <filesystem type='mount'><o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US> <source dir='/guest'/><o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US> <target dir='/'/><o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US> </filesystem><o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US></devices><o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US></domain><o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US>root:~> uname -a<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US>Linux localhost 3.10.19-01077-g4a19d28-dirty #5 SMP PREEMPT Mon Jan 13<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US>12:56:09 CET 2014 armv7l GNU/Linux<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US>root:~> libvirtd --version<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US>libvirtd (libvirt) 1.2.1<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US>root:~> systemd --version<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US>systemd 204<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US>After adding idmap to config systemd can't start many of its services, in particular:<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US>Failed to mount Debug File System.<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US>Failed to mount Configuration File System.<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US>Failed to mount FUSE Control File System.<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US>Failed to start udev Kernel Device Manager.<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US>Failed to start Remount Root and Kernel File Systems.<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US>Failed to start Journal Service.<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US>systemctl status says:<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US>ExecMount=/bin/mount debugfs /sys/kernel/debug -t debugfs (code=exited, status=32)<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US>ExecMount=/bin/mount configfs /sys/kernel/config -t configfs (code=exited, status=32) ExecMount=/bin/mount fusectl /sys/fs/fuse/connections -t fusectl (code=exited, status=32) ExecStart=/usr/lib/systemd/systemd-udevd (code=exited,status=206/OOM_ADJUST)<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US>ExecStart=/usr/lib/systemd/systemd-remount-fs (code=exited,status=1/FAILURE)<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US>ExecStart=/usr/lib/systemd/systemd-journald (code=exited, status=218/CAPABILITIES)<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US>Thanks!<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div></body></html>