error in cpanel lxc containers. Worry or not?

sahostking

Renowned Member
Jun 21 21:03:01 cloud1 kernel: [172369.205633] audit: type=1400 audit(1466535781.075:31725): apparmor="DENIED" operation="mount" info="failed type match" error=-13 profile="lxc-container-default" name="/home/virtfs/delorun/opt/" pid=17248 comm="jailshell" srcname="/opt/" flags="rw, bind"
 
Check out your ftp client is working ok, the only system that is working not too bad are a couple of Direct Admin servers with ProFtp as pureftp was too hit and miss all the time, these are just my own servers as I would not put any clients on 4.2 yet as if any lag say you do a couple of backups on the host the cpu shows at 12.19 etc etc but it also shows up as such in the containers so they will send out warning emails to your customers of high cpu load when really they should be independent on the cpu load.
The load and lag is really bad after openvz and I have 8 core cpus and 32 gig of ram so should not be getting any of these problems. By the way I have added the modprobe ftp to the host and also the passive ports 30000:50000 and some machines will run pureftp but no connections and other will not even start on these other systems I have tried, proftp is the only one worth using at the mo.
 
Last edited:
I noticed that yes.

When you run:

uname -a

also shows host details now.

Also cpu load is servers cpu load not vps :/

lots of issues on cpanel. pureftp I also have issues and crontab with pipe now also and then iptables with csf and xt_connlimit. Tyring to search web to fix these things. Really hate that a I moved over.

Update: Just did this as per proxmox and most works not sure how it affects auto startup of services but seems to help, pureftp works now perfectly.:

PTY Allocation
When ssh to VPS then you experience error "lxc Server refused to allocate pty":

  1. Enter to VPS, edit /etc/rc.sysinit
  2. Find /sbin/start_udev then comment out: #/sbin/start_udev
  3. Reboot VPS
 
Last edited:
Anyone know where to do this as per cpanel:?

If your system uses AppArmor, you must uncomment the following line in the lxc.conf file:
lxc.aa_profile = unconfined

Should I just add it to eah conf file of each lxc container or is there a global one?
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!