Frischer LXC Container startet nicht

L

Lithilion

New Member
Proxmox Subscriber
Feb 3, 2026
8
1
3
lithilion.at
Ich habe einen frischen LXC Container erzeugt, dieser startet aber nicht; schafft somit keinen ersten, initialen Reboot.
Der Container wird aus dem "offiziellen" Proxmox Debian 13.6-1 Template erzeugt mit 1 Core, 512MB RAM und Swap und 1GB Disk. Mit den exakt gleichen Specs läuft ein Debian Container bereits auf dem gleiche PVE Host. Ob ich dem Container eine NIC gebe, oder nicht macht keinen Unterschied. (RAM und Disk ist am Host noch genügend vorhanden)
Der Container wird (wie alle anderen Container auf dem Host) mit SSH-Keyfile und ohne Passwort erzeugt.
Beim Starten wird folgende Fehlermeldung angezeigt:
Code: 
sync_wait: 34 An error occurred in another process (expected sequence number 7)
__lxc_start: 2288 Failed to spawn container "109"
TASK ERROR: startup for container '109' failed

Weitere Fehlermeldungen gibt es nicht. Ein journalctl -u *109* -b fördert folgendes zutage:
Code: 
Aug 09 13:42:58 XX systemd[1]: Started pve-container@109.service - PVE LXC Container: 109.
Aug 09 13:43:00 XX systemd[1]: pve-container@109.service: Main process exited, code=exited, status=1/FAILURE
Aug 09 13:43:00 XX systemd[1]: pve-container@109.service: Failed with result 'exit-code'.
Aug 09 13:43:00 XX systemd[1]: pve-container@109.service: Consumed 750ms CPU time, 90.2M memory peak.

Auch nicht besonders hilfreich.

Der PVE-Node ist Standalone in der Version 9.2.4.
Bitte um Hilfe, was hab ich übersehen, was kann ich noch prüfen?
 
Teile
Bash: 
pct config 109
pct start 109 --debug
Warum so geizig mit den Resourcen? Vorallem die Festplatte.
 
Last edited:
  • Like
Reactions: Johannes S
Weil es für die Zwecke völlig ausreichend ist und der Host nicht unendlich Ressourcen hat.
Wenn ich die Ressourcen hochdreh, passiert auch nicht mehr...

Die Konfig
Code: 
arch: arm64
cores: 1
description: monitoring%0A
features: nesting=1
hostname: mon01
memory: 512
onboot: 1
ostype: debian
rootfs: local-zfs:subvol-109-disk-0,size=1G
swap: 512
unprivileged: 1

und der Start
Code: 
sync_wait: 34 An error occurred in another process (expected sequence number 7)
__lxc_start: 2288 Failed to spawn container "109"
- ../src/lxc/confile.c:set_config_idmaps:2297 - Read uid map: type g nsid 0 hostid 100000 range 65536
INFO     lsm - ../src/lxc/lsm/lsm.c:lsm_init_static:38 - Initialized LSM security driver AppArmor
INFO     utils - ../src/lxc/utils.c:run_script_argv:585 - Executing script "/usr/share/lxc/hooks/lxc-pve-prestart-hook" for container "109", config section "lxc"
INFO     cgfsng - ../src/lxc/cgroups/cgfsng.c:unpriv_systemd_create_scope:1268 - Running privileged, not using a systemd unit
DEBUG    seccomp - ../src/lxc/seccomp.c:parse_config_v2:664 - Host native arch is [3221225534]
INFO     seccomp - ../src/lxc/seccomp.c:parse_config_v2:815 - Processing "reject_force_umount  # comment this to allow umount -f;  not recommended"
INFO     seccomp - ../src/lxc/seccomp.c:do_resolve_add_rule:532 - Set seccomp rule to reject force umounts
INFO     seccomp - ../src/lxc/seccomp.c:do_resolve_add_rule:532 - Set seccomp rule to reject force umounts
INFO     seccomp - ../src/lxc/seccomp.c:do_resolve_add_rule:532 - Set seccomp rule to reject force umounts
INFO     seccomp - ../src/lxc/seccomp.c:parse_config_v2:815 - Processing "[all]"
INFO     seccomp - ../src/lxc/seccomp.c:parse_config_v2:815 - Processing "kexec_load errno 1"
INFO     seccomp - ../src/lxc/seccomp.c:do_resolve_add_rule:572 - Adding native rule for syscall[246:kexec_load] action[327681:errno] arch[0]
INFO     seccomp - ../src/lxc/seccomp.c:do_resolve_add_rule:572 - Adding compat rule for syscall[246:kexec_load] action[327681:errno] arch[1073741827]
INFO     seccomp - ../src/lxc/seccomp.c:do_resolve_add_rule:572 - Adding compat rule for syscall[246:kexec_load] action[327681:errno] arch[1073741886]
INFO     seccomp - ../src/lxc/seccomp.c:parse_config_v2:815 - Processing "open_by_handle_at errno 1"
INFO     seccomp - ../src/lxc/seccomp.c:do_resolve_add_rule:572 - Adding native rule for syscall[304:open_by_handle_at] action[327681:errno] arch[0]
INFO     seccomp - ../src/lxc/seccomp.c:do_resolve_add_rule:572 - Adding compat rule for syscall[304:open_by_handle_at] action[327681:errno] arch[1073741827]
INFO     seccomp - ../src/lxc/seccomp.c:do_resolve_add_rule:572 - Adding compat rule for syscall[304:open_by_handle_at] action[327681:errno] arch[1073741886]
INFO     seccomp - ../src/lxc/seccomp.c:parse_config_v2:815 - Processing "init_module errno 1"
INFO     seccomp - ../src/lxc/seccomp.c:do_resolve_add_rule:572 - Adding native rule for syscall[175:init_module] action[327681:errno] arch[0]
INFO     seccomp - ../src/lxc/seccomp.c:do_resolve_add_rule:572 - Adding compat rule for syscall[175:init_module] action[327681:errno] arch[1073741827]
INFO     seccomp - ../src/lxc/seccomp.c:do_resolve_add_rule:572 - Adding compat rule for syscall[175:init_module] action[327681:errno] arch[1073741886]
INFO     seccomp - ../src/lxc/seccomp.c:parse_config_v2:815 - Processing "finit_module errno 1"
INFO     seccomp - ../src/lxc/seccomp.c:do_resolve_add_rule:572 - Adding native rule for syscall[313:finit_module] action[327681:errno] arch[0]
INFO     seccomp - ../src/lxc/seccomp.c:do_resolve_add_rule:572 - Adding compat rule for syscall[313:finit_module] action[327681:errno] arch[1073741827]
INFO     seccomp - ../src/lxc/seccomp.c:do_resolve_add_rule:572 - Adding compat rule for syscall[313:finit_module] action[327681:errno] arch[1073741886]
INFO     seccomp - ../src/lxc/seccomp.c:parse_config_v2:815 - Processing "delete_module errno 1"
INFO     seccomp - ../src/lxc/seccomp.c:do_resolve_add_rule:572 - Adding native rule for syscall[176:delete_module] action[327681:errno] arch[0]
INFO     seccomp - ../src/lxc/seccomp.c:do_resolve_add_rule:572 - Adding compat rule for syscall[176:delete_module] action[327681:errno] arch[1073741827]
INFO     seccomp - ../src/lxc/seccomp.c:do_resolve_add_rule:572 - Adding compat rule for syscall[176:delete_module] action[327681:errno] arch[1073741886]
INFO     seccomp - ../src/lxc/seccomp.c:parse_config_v2:815 - Processing "ioctl errno 1 [1,0x9400,SCMP_CMP_MASKED_EQ,0xff00]"
INFO     seccomp - ../src/lxc/seccomp.c:do_resolve_add_rule:555 - arg_cmp[0]: SCMP_CMP(1, 7, 65280, 37888)
INFO     seccomp - ../src/lxc/seccomp.c:do_resolve_add_rule:572 - Adding native rule for syscall[16:ioctl] action[327681:errno] arch[0]
INFO     seccomp - ../src/lxc/seccomp.c:do_resolve_add_rule:555 - arg_cmp[0]: SCMP_CMP(1, 7, 65280, 37888)
INFO     seccomp - ../src/lxc/seccomp.c:do_resolve_add_rule:572 - Adding compat rule for syscall[16:ioctl] action[327681:errno] arch[1073741827]
INFO     seccomp - ../src/lxc/seccomp.c:do_resolve_add_rule:555 - arg_cmp[0]: SCMP_CMP(1, 7, 65280, 37888)
INFO     seccomp - ../src/lxc/seccomp.c:do_resolve_add_rule:572 - Adding compat rule for syscall[16:ioctl] action[327681:errno] arch[1073741886]
INFO     seccomp - ../src/lxc/seccomp.c:parse_config_v2:815 - Processing "keyctl errno 38"
INFO     seccomp - ../src/lxc/seccomp.c:do_resolve_add_rule:572 - Adding native rule for syscall[250:keyctl] action[327718:errno] arch[0]
INFO     seccomp - ../src/lxc/seccomp.c:do_resolve_add_rule:572 - Adding compat rule for syscall[250:keyctl] action[327718:errno] arch[1073741827]
INFO     seccomp - ../src/lxc/seccomp.c:do_resolve_add_rule:572 - Adding compat rule for syscall[250:keyctl] action[327718:errno] arch[1073741886]
INFO     seccomp - ../src/lxc/seccomp.c:parse_config_v2:815 - Processing "socket errno 97 [0,38,SCMP_CMP_EQ]"
INFO     seccomp - ../src/lxc/seccomp.c:do_resolve_add_rule:555 - arg_cmp[0]: SCMP_CMP(0, 4, 0, 38)
INFO     seccomp - ../src/lxc/seccomp.c:do_resolve_add_rule:572 - Adding native rule for syscall[41:socket] action[327777:errno] arch[0]
DEBUG    seccomp - ../src/lxc/seccomp.c:do_resolve_add_rule:549 - The syscall[41:socket] is not supported on compat arch[1073741827]
INFO     seccomp - ../src/lxc/seccomp.c:do_resolve_add_rule:555 - arg_cmp[0]: SCMP_CMP(0, 4, 0, 38)
INFO     seccomp - ../src/lxc/seccomp.c:do_resolve_add_rule:572 - Adding compat rule for syscall[41:socket] action[327777:errno] arch[1073741886]
INFO     seccomp - ../src/lxc/seccomp.c:parse_config_v2:1036 - Merging compat seccomp contexts into main context
INFO     start - ../src/lxc/start.c:lxc_init:1074 - Container "109" is initialized
INFO     cgfsng - ../src/lxc/cgroups/cgfsng.c:cgfsng_monitor_create:1442 - The monitor process uses "lxc.monitor/109" as cgroup
DEBUG    storage - ../src/lxc/storage/storage.c:storage_query:231 - Detected rootfs type "dir"
DEBUG    storage - ../src/lxc/storage/storage.c:storage_query:231 - Detected rootfs type "dir"
INFO     cgfsng - ../src/lxc/cgroups/cgfsng.c:cgfsng_payload_create:1550 - The container process uses "lxc/109/ns" as inner and "lxc/109" as limit cgroup
INFO     start - ../src/lxc/start.c:lxc_spawn:1959 - Cloned CLONE_NEWUSER
INFO     start - ../src/lxc/start.c:lxc_spawn:1959 - Cloned CLONE_NEWNS
INFO     start - ../src/lxc/start.c:lxc_spawn:1959 - Cloned CLONE_NEWPID
INFO     start - ../src/lxc/start.c:lxc_spawn:1959 - Cloned CLONE_NEWUTS
INFO     start - ../src/lxc/start.c:lxc_spawn:1959 - Cloned CLONE_NEWIPC
INFO     start - ../src/lxc/start.c:lxc_spawn:1959 - Cloned CLONE_NEWCGROUP
DEBUG    start - ../src/lxc/start.c:lxc_try_preserve_namespace:172 - Preserved user namespace via fd 17 and stashed path as user:/proc/153687/fd/17
DEBUG    start - ../src/lxc/start.c:lxc_try_preserve_namespace:172 - Preserved mnt namespace via fd 18 and stashed path as mnt:/proc/153687/fd/18
DEBUG    start - ../src/lxc/start.c:lxc_try_preserve_namespace:172 - Preserved pid namespace via fd 19 and stashed path as pid:/proc/153687/fd/19
DEBUG    start - ../src/lxc/start.c:lxc_try_preserve_namespace:172 - Preserved uts namespace via fd 20 and stashed path as uts:/proc/153687/fd/20
DEBUG    start - ../src/lxc/start.c:lxc_try_preserve_namespace:172 - Preserved ipc namespace via fd 21 and stashed path as ipc:/proc/153687/fd/21
DEBUG    start - ../src/lxc/start.c:lxc_try_preserve_namespace:172 - Preserved cgroup namespace via fd 22 and stashed path as cgroup:/proc/153687/fd/22
DEBUG    idmap_utils - ../src/lxc/idmap_utils.c:idmaptool_on_path_and_privileged:93 - The binary "/usr/bin/newuidmap" does have the setuid bit set
DEBUG    idmap_utils - ../src/lxc/idmap_utils.c:idmaptool_on_path_and_privileged:93 - The binary "/usr/bin/newgidmap" does have the setuid bit set
DEBUG    idmap_utils - ../src/lxc/idmap_utils.c:lxc_map_ids:178 - Functional newuidmap and newgidmap binary found
INFO     cgfsng - ../src/lxc/cgroups/cgfsng.c:cgfsng_setup_limits:2950 - Limits for the unified cgroup hierarchy have been setup
DEBUG    idmap_utils - ../src/lxc/idmap_utils.c:idmaptool_on_path_and_privileged:93 - The binary "/usr/bin/newuidmap" does have the setuid bit set
DEBUG    idmap_utils - ../src/lxc/idmap_utils.c:idmaptool_on_path_and_privileged:93 - The binary "/usr/bin/newgidmap" does have the setuid bit set
INFO     idmap_utils - ../src/lxc/idmap_utils.c:lxc_map_ids:176 - Caller maps host root. Writing mapping directly
NOTICE   utils - ../src/lxc/utils.c:lxc_drop_groups:1479 - Dropped supplimentary groups
INFO     start - ../src/lxc/start.c:do_start:1297 - Unshared CLONE_NEWNET
NOTICE   utils - ../src/lxc/utils.c:lxc_drop_groups:1479 - Dropped supplimentary groups
NOTICE   utils - ../src/lxc/utils.c:lxc_switch_uid_gid:1455 - Switched to gid 0
NOTICE   utils - ../src/lxc/utils.c:lxc_switch_uid_gid:1464 - Switched to uid 0
DEBUG    start - ../src/lxc/start.c:lxc_try_preserve_namespace:172 - Preserved net namespace via fd 5 and stashed path as net:/proc/153687/fd/5
DEBUG    conf - ../src/lxc/conf.c:lxc_mount_rootfs:1184 - Mounted rootfs "/var/lib/lxc/109/rootfs" onto "/usr/lib/x86_64-linux-gnu/lxc/rootfs" with options "(null)"
INFO     conf - ../src/lxc/conf.c:setup_utsname:671 - Set hostname to "mon01"
INFO     conf - ../src/lxc/conf.c:mount_autodev:1000 - Preparing "/dev"
INFO     conf - ../src/lxc/conf.c:mount_autodev:1047 - Prepared "/dev"
DEBUG    conf - ../src/lxc/conf.c:lxc_mount_auto_mounts:531 - Invalid argument - Tried to ensure procfs is unmounted
DEBUG    conf - ../src/lxc/conf.c:lxc_mount_auto_mounts:554 - Invalid argument - Tried to ensure sysfs is unmounted
DEBUG    conf - ../src/lxc/conf.c:mount_entry:2107 - Remounting "/sys/fs/fuse/connections" on "/usr/lib/x86_64-linux-gnu/lxc/rootfs/sys/fs/fuse/connections" to respect bind or remount options
DEBUG    conf - ../src/lxc/conf.c:mount_entry:2126 - Flags for "/sys/fs/fuse/connections" were 4110, required extra flags are 14
DEBUG    conf - ../src/lxc/conf.c:mount_entry:2170 - Mounted "/sys/fs/fuse/connections" on "/usr/lib/x86_64-linux-gnu/lxc/rootfs/sys/fs/fuse/connections" with filesystem type "none"
DEBUG    conf - ../src/lxc/conf.c:mount_entry:2170 - Mounted "proc" on "/usr/lib/x86_64-linux-gnu/lxc/rootfs/dev/.lxc/proc" with filesystem type "proc"
DEBUG    conf - ../src/lxc/conf.c:mount_entry:2170 - Mounted "sys" on "/usr/lib/x86_64-linux-gnu/lxc/rootfs/dev/.lxc/sys" with filesystem type "sysfs"
DEBUG    cgfsng - ../src/lxc/cgroups/cgfsng.c:__cgroupfs_mount:1869 - Mounted cgroup filesystem cgroup2 onto 19((null))
INFO     utils - ../src/lxc/utils.c:run_script_argv:585 - Executing script "/usr/share/lxcfs/lxc.mount.hook" for container "109", config section "lxc"
INFO     utils - ../src/lxc/utils.c:run_script_argv:585 - Executing script "/usr/share/lxc/hooks/lxc-pve-autodev-hook" for container "109", config section "lxc"
INFO     conf - ../src/lxc/conf.c:lxc_fill_autodev:1084 - Populating "/dev"
DEBUG    conf - ../src/lxc/conf.c:lxc_fill_autodev:1149 - Bind mounted host device 16(dev/full) to 18(full)
DEBUG    conf - ../src/lxc/conf.c:lxc_fill_autodev:1149 - Bind mounted host device 16(dev/null) to 18(null)
DEBUG    conf - ../src/lxc/conf.c:lxc_fill_autodev:1149 - Bind mounted host device 16(dev/random) to 18(random)
DEBUG    conf - ../src/lxc/conf.c:lxc_fill_autodev:1149 - Bind mounted host device 16(dev/tty) to 18(tty)
DEBUG    conf - ../src/lxc/conf.c:lxc_fill_autodev:1149 - Bind mounted host device 16(dev/urandom) to 18(urandom)
DEBUG    conf - ../src/lxc/conf.c:lxc_fill_autodev:1149 - Bind mounted host device 16(dev/zero) to 18(zero)
INFO     conf - ../src/lxc/conf.c:lxc_fill_autodev:1153 - Populated "/dev"
INFO     conf - ../src/lxc/conf.c:lxc_transient_proc:3206 - Caller's PID is 1; /proc/self points to 1
DEBUG    conf - ../src/lxc/conf.c:lxc_setup_devpts_child:1497 - Attached detached devpts mount 20 to 18/pts
DEBUG    conf - ../src/lxc/conf.c:lxc_setup_devpts_child:1528 - Created "/dev/ptmx" file as bind mount target
DEBUG    conf - ../src/lxc/conf.c:lxc_setup_devpts_child:1535 - Bind mounted "/dev/pts/ptmx" to "/dev/ptmx"
DEBUG    conf - ../src/lxc/conf.c:lxc_allocate_ttys:894 - Created tty with ptx fd 22 and pty fd 23 and index 1
DEBUG    conf - ../src/lxc/conf.c:lxc_allocate_ttys:894 - Created tty with ptx fd 24 and pty fd 25 and index 2
INFO     conf - ../src/lxc/conf.c:lxc_allocate_ttys:899 - Finished creating 2 tty devices
DEBUG    conf - ../src/lxc/conf.c:lxc_setup_ttys:855 - Bind mounted "pts/1" onto "tty1"
DEBUG    conf - ../src/lxc/conf.c:lxc_setup_ttys:855 - Bind mounted "pts/2" onto "tty2"
INFO     conf - ../src/lxc/conf.c:lxc_setup_ttys:862 - Finished setting up 2 /dev/tty<N> device(s)
INFO     conf - ../src/lxc/conf.c:setup_personality:1608 - Set personality to "0lx0"
DEBUG    conf - ../src/lxc/conf.c:capabilities_deny:2904 - Capabilities have been setup
NOTICE   conf - ../src/lxc/conf.c:lxc_setup:3919 - The container "109" is set up
INFO     apparmor - ../src/lxc/lsm/apparmor.c:apparmor_process_label_set_at:1227 - Set AppArmor label to "lxc-109_</var/lib/lxc>//&:lxc-109_<-var-lib-lxc>:"
INFO     apparmor - ../src/lxc/lsm/apparmor.c:apparmor_process_label_set:1272 - Changed AppArmor profile to lxc-109_</var/lib/lxc>//&:lxc-109_<-var-lib-lxc>:
DEBUG    terminal - ../src/lxc/terminal.c:lxc_terminal_peer_default:704 - No such device - The process does not have a controlling terminal
NOTICE   start - ../src/lxc/start.c:start:2375 - Exec'ing "/sbin/init"
ERROR    start - ../src/lxc/start.c:start:2378 - Exec format error - Failed to exec "/sbin/init"
ERROR    sync - ../src/lxc/sync.c:sync_wait:34 - An error occurred in another process (expected sequence number 7)
DEBUG    network - ../src/lxc/network.c:lxc_delete_network:4493 - Deleted network devices
ERROR    start - ../src/lxc/start.c:__lxc_start:2288 - Failed to spawn container "109"
WARN     start - ../src/lxc/start.c:lxc_abort:1229 - No such process - Failed to send SIGKILL via pidfd 16 for process 153757
startup for container '109' failed
 
Oh Gott... Kann man auch blind sein. Ich hab das falsche Template runtergeladen...
Zu meiner Verteidigung, das sieht man beim Runterladen auch nicht. Vllt kann man das in der UI anpassen?

Ja, Problem gelöst. Danke vielmals
Screenshot 2026-08-09 at 14.25.16.png
 
  • Like
Reactions: Impact
Das mit den zwei identischen Zeilen ist echt bescheiden, im Web-UI siehst du nur "debian-13-standard" ohne Arch, da tappt man leicht rein. Auf der CLI siehst du's klar: pveam available --section system zeigt den kompletten Dateinamen inkl. amd64 bzw. arm64, und mit pveam download <storage> <template> holst du dann gezielt das richtige. Für die UI-Anzeige würd ich nen Feature-Request auf bugzilla.proxmox.com aufmachen, so kleine Sachen werden da durchaus mal aufgegriffen.
 
Bei mir sehen die angebotenen Vorlagen auch aus:

temp.png
Also für mich OK ...
 
Last edited:
Hab keinen Zugriff auf das Enterprise Repo, aber wenn das so ist hilft nur warten, oder das Update aus dem No-Sub-Repo einspielen.
 
Last edited:
Ich würde das No-Sub-Repo auf einer Enterprise-Kiste nicht extra dazumischen, nur wegen der Template-Anzeige. Sind zwar dieselben Builds, aber wenn beide Repos aktiv sind, ziehst du dir beim nächsten apt upgrade auch andere Sachen mit. Enterprise hinkt eh ein paar Wochen hinterher, und für nen kosmetischen UI-Fix ist mir das den Repo-Mischmasch nicht wert. Falls du bis dahin öfter Templates ziehst: der Dateiname auf der CLI verrät die Arch sofort, dann brauchst du die UI-Spalte gar nicht.
 
  • Like
Reactions: Johannes S, Lithilion and JensF
Ich kann nicht anders: Finger weg von LXC-Grütze, soweit es immer nur geht! Erledige es per VM, feuere womöglich 100€ HW-Kosten in die Bude und du hättest keine Kopfschmerzen gehabt.
 
Last edited:
JensF said:
Seit pve-manager 9.2.7 sieht man den Unterschied bei der Template-Auswahl.
Ab Version 9.2.10 vom pve-manager kann man die unpassende Architektur gar nicht mehr auswählen.
Also einfach mal updaten. :)
Click to expand...
Wohin soll man mit 9.2.10 denn updaten? Oder soll man sich womöglich auf eine volatile Vorauswahl verlassen, statt zu lesen, was man installiert und stattdessen lieber vorher immer updaten?
 
Last edited:
You must log in or register to reply here.
Top Bottom
Back