[libvirt-users] User Namespace in LXC

[Gao feng]

Hi Saurabh,

First of all. I think there are something wrong in you container configure file
the <idmap> should under <domain>.

such as

<domain type='lxc'>
  <name>xxx</name>
  <memory unit='KiB'>102400</memory>
  <currentMemory unit='KiB'>102400</currentMemory>
  <vcpu placement='static'>1</vcpu>
  <resource>
    <partition>/machine</partition>
  </resource>
  <os>
    <type arch='x86_64'>exe</type>
    <init>/bin/sh</init>
  </os>
  <idmap>
    <uid start='0' target='1000' count='10'/>
    <gid start='0' target='1000' count='10'/>
  </idmap>
  <clock offset='utc'/>
  <on_poweroff>destroy</on_poweroff>
  <on_reboot>restart</on_reboot>
  <on_crash>destroy</on_crash>
  <devices>
    <console type='pty'>
      <target type='lxc' port='0'/>
    </console>
  </devices>
</domain>

If your system doesn't support user namespace and your container has configure file,
then when you start container, this error will be threw out.
error: Failed to start domain xxx
error: internal error: guest failed to start: Kernel doesn't support user namespace:

If your configure file is right and the libvirt_lxc doesn't throw out error message,
it's a bug we should fix.

On 11/13/2013 01:24 PM, Saurabh Deochake wrote:
> Hi Gao,
> 
> I checked the output of "lxc-checkconfig" command and it showed 
> 
> --- Namespaces ---
> Namespaces: enabled
> Utsname namespace: enabled
> Ipc namespace: enabled
> Pid namespace: enabled
> *User namespace: missing*
> Network namespace: enabled
> Multiple /dev/pts instances: enabled
> 
> Here it shows that User namespace support is missing. I tried to check for Namespaces Support in kernel menuconfig. It has support for following namespaces only:
> 
>  --- Namespaces support
>  [*]   UTS namespace      
>  [*]   IPC namespace 
>  [*]   PID Namespaces    
>  [*]   Network namespace  
> 
> There is no User Namespace support. So do I need to patch the kernel for user namespace support? What should I do in order to get user namespace working?
> 
> Following are my system details:
> OS: Fedora 19
> Kernel: 3.9.5
> 

Disable the xfs filesystem, and then you will see User namespace under Namespaces support.
Enjoy it.

Thanks