[libvirt] Fwd: Re: Lxc support

[Jean-Philippe Menil]

-------- Message original --------
Sujet: Re: [libvirt] Lxc support
Date : Fri, 29 Oct 2010 13:13:16 +0200
De : Jean-Philippe Menil <jean-philippe.menil at univ-nantes.fr>
Répondre à : jean-philippe.menil at univ-nantes.fr
Organisation : IRTS - DSI - Université de Nantes
Pour : Daniel P. Berrange <berrange at redhat.com>

Le 29/10/2010 12:39, Daniel P. Berrange a écrit :
> On Fri, Oct 29, 2010 at 12:27:59PM +0200, Jean-Philippe Menil wrote:
>> Le 29/10/2010 12:00, Osier a écrit :
>>> On 10/29/2010 04:42 PM, Jean-Philippe Menil wrote:
>>>> Hi,
>>>>
>>>> i'm trying to test the lxc support in libvirt, but but libvirt failed to
>>>> start container with error "lxcContainerAvailable:897 : clone call
>>>> returned Operation not permitted, container support is not enabled"
>>>>
>>>
>>> What's the kernel version you use? Just as the error message says, the
>>> system call 'clone' failed, It's probly caused by lacking of kernel
>>> support.
>>>
>>> At least you should make sure 'clone' support these flags:
>>>
>>> CLONE_NEWPID, CLONE_NEWNS, CLONE_NEWUTS, CLONE_NEWIPC, SIGCHLD
>
>> thanks for your response.
>> The kernel is a 2.6.36 wit hthe following:
>> root at redbreast:/tmp# cat /boot/config-2.6.36-dsiun-1a | grep -i  pid
>> CONFIG_PROC_PID_CPUSET=y
>> CONFIG_PID_NS=y
>> # CONFIG_SPI_SPIDEV is not set
>> CONFIG_HID_PID=y
>
> You need to check for _NS=  here, and want to see the following
>
> $ grep _NS= /boot/config-2.6.34.6-54.fc13.x86_64
> CONFIG_CGROUP_NS=y
> CONFIG_UTS_NS=y
> CONFIG_IPC_NS=y
> CONFIG_USER_NS=y
> CONFIG_PID_NS=y
> CONFIG_NET_NS=y
>
> Daniel
Sorry, forgot to cc the list

Ok,
So my kernel lokks fine:

root at redbreast:/tmp# cat /boot/config-2.6.36-dsiun-1a | grep _NS
CONFIG_CGROUP_NS=y
CONFIG_UTS_NS=y
CONFIG_IPC_NS=y
CONFIG_USER_NS=y
CONFIG_PID_NS=y
CONFIG_NET_NS=y

Libvirt was compiled with following:

--with-qemu --with-qemu-user=libvirt-qemu --with-qemu-group=kvm
--without-xen --without-openvz --without-avahi --without-sasl
--without-polkit --without-udev --without-hal --with-storage-fs
--with-storage-lvm --without-storage-iscsi --with-storage-disk
--with-init-scripts=none --without-numactl --without-selinux
--without-esx --without-libssh2 --without-capng --with-macvtap
--enable-debug --with-lxc


-------------- next part --------------
A non-text attachment was scrubbed...
Name: jean-philippe_menil.vcf
Type: text/x-vcard
Size: 447 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/libvir-list/attachments/20101029/c72a27fd/attachment-0001.vcf>