[libvirt] [PATCH v3 00/12] Add user namespace support for libvirt lxc

[Richard Weinberger]

Hi!

Am 04.06.2013 13:03, schrieb Daniel P. Berrange:
>> It's still under review. needs some ACK.
>> If you can help to test or ACK this patchset, it will be very helpful. :)
>>
>> Actually, I just want to ping...
>
> I've been away on holiday for 2 weeks, so not had a chance to review
> it yet. I'll get to it this week. I hope we'll get this in the 1.0.6
> release this month.

Finally I've found some time to test version 4 of the userns patch set.
But I'm unable to create a container.

---cut---
linux:~ # LANG=C /opt/libvirt/bin/virsh -c lxc:/// create c1.conf
error: Failed to create domain from c1.conf
error: Interner Fehler guest failed to start: PATH=/bin:/sbin TERM=linux container=lxc-libvirt container_uuid=3f86c48b-b027-4838-ba17-6202a1d7398b 
LIBVIRT_LXC_UUID=3f86c48b-b027-4838-ba17-6202a1d7398b LIBVIRT_LXC_NAME=c1 /bin/bash
error receiving signal from container: Input/output error
---cut---

lxcContainerWaitForContinue() in src/lxc/lxc_controller.c fails with EIO.
Maybe because the clone()'ed child dies and the file descriptor used for synchronization becomes invalid.

Here my container config:
---cut---
<domain type='lxc'>
   <name>c1</name>
   <memory>102400</memory>
   <os>
     <type>exe</type>
     <init>/bin/bash</init>
   </os>
   <idmap>
         <uid start='0' target='100000' count='100000'/>
         <gid start='0' target='100000' count='100000'/>
   </idmap>
   <devices>
     <console type='pty'/>
         <filesystem type='mount'>
           <source dir='/root/c1/rootfs'/>
           <target dir='/'/>
         </filesystem>
   </devices>
</domain>
---cut---

Any ideas how to debug this further?
This is Linux 3.9.0 with all namespaces enabled.

Thanks,
//richard