HAVP AV Proxy - mount: /var/spool/havp failed

[kuumaur]

Hi,
I try to install the HAVP Proxy into a LXC Debian 11 Container.
Iam receiving this error, when bringing up the Service:
systemctl status havp.service
* havp.service - LSB: HAVP virus-scanning HTTP proxy
Loaded: loaded (/etc/init.d/havp; generated)
Active: failed (Result: exit-code) since Mon 2021-11-15 12:47:30 UTC; 10min ago
Docs: man:systemd-sysv-generator(8)
Process: 404 ExecStart=/etc/init.d/havp start (code=exited, status=1/FAILURE)
CPU: 12ms

Nov 15 12:47:30 proxy-test systemd[1]: Starting LSB: HAVP virus-scanning HTTP proxy...
Nov 15 12:47:30 proxy-test havp[404]: Mounting /var/lib/havp/havp.loop under /var/spool/havp ...
Nov 15 12:47:30 proxy-test havp[411]: mount: /var/spool/havp: mount failed: Operation not permitted.
Nov 15 12:47:30 proxy-test systemd[1]: havp.service: Control process exited, code=exited, status=1/FAILURE
Nov 15 12:47:30 proxy-test systemd[1]: havp.service: Failed with result 'exit-code'.
Nov 15 12:47:30 proxy-test systemd[1]: Failed to start LSB: HAVP virus-scanning HTTP proxy.

Any suggestions?
Thanx in advance

The Container config looks like this:
arch: amd64
cores: 2
features: fuse=1,keyctl=1,nesting=1
hostname: proxy-test
memory: 1024
net0: name=eth0,bridge=vmbr0,firewall=1,gw=192.168.200.2,hwaddr=D2:9C:60:6C:38:C0,ip=192.168.200.111/24,type=veth
ostype: debian
rootfs: sdb1:111/vm-111-disk-0.raw,size=8G
swap: 0
unprivileged: 1
lxc.apparmor.profile: unconfined
lxc.cgroup.devices.allow: a
lxc.cap.drop:
lxc.mount.auto: proc:rw sys:rw
lxc.mount.entry: /lib/modules lib/modules none bind 0 0
lxc.mount.entry: /dev/loop-control dev/loop-control none bind,create=file 0 0

Environment:
Linux MSI-GE60 5.11.22-5-pve #1 SMP PVE 5.11.22-10 (Tue, 28 Sep 2021 08:15:41 +0200) x86_64 GNU/Linux
pve-manager/7.0-13/7aa7e488 (running kernel: 5.11.22-5-pve)

 

[kuumaur]

After I played around with lxc.mount.entry, I receive the following error messages when starting HAVP service:
systemctl status havp.service
* havp.service - LSB: HAVP virus-scanning HTTP proxy
Loaded: loaded (/etc/init.d/havp; generated)
Active: failed (Result: exit-code) since Mon 2021-11-15 13:08:59 UTC; 3min 4s ago
Docs: man:systemd-sysv-generator(8)
Process: 293 ExecStart=/etc/init.d/havp start (code=exited, status=1/FAILURE)
CPU: 15ms

Nov 15 13:08:59 proxy-test systemd[1]: Starting LSB: HAVP virus-scanning HTTP proxy...
Nov 15 13:08:59 proxy-test havp[293]: Cleaning up /var/spool/havp... done
Nov 15 13:08:59 proxy-test havp[293]: Starting havp:
Nov 15 13:08:59 proxy-test havp[322]: Starting HAVP Version: 0.93
Nov 15 13:08:59 proxy-test havp[325]: Filesystem not supporting mandatory locks!
Nov 15 13:08:59 proxy-test havp[325]: On Linux, you need to mount filesystem with "-o mand"
Nov 15 13:08:59 proxy-test havp[322]: Exiting..
Nov 15 13:08:59 proxy-test systemd[1]: havp.service: Control process exited, code=exited, status=1/FAILURE
Nov 15 13:08:59 proxy-test systemd[1]: havp.service: Failed with result 'exit-code'.
Nov 15 13:08:59 proxy-test systemd[1]: Failed to start LSB: HAVP virus-scanning HTTP proxy.

The container config:
arch: amd64
cores: 2
features: fuse=1,keyctl=1,nesting=1
hostname: proxy-test
memory: 1024
net0: name=eth0,bridge=vmbr0,firewall=1,gw=192.168.200.2,hwaddr=D2:9C:60:6C:38:C0,ip=192.168.200.111/24,type=veth
ostype: debian
rootfs: sdb1:111/vm-111-disk-0.raw,size=8G
swap: 0
unprivileged: 1
lxc.apparmor.profile: unconfined
lxc.cgroup.devices.allow: a
lxc.cap.drop:
lxc.mount.auto: proc:rw sys:rw
lxc.mount.entry: /lib/modules lib/modules none bind 0 0
lxc.mount.entry: /dev/loop0 dev/loop0 none bind,create=file 0 0
lxc.mount.entry: /dev/loop1 dev/loop1 none bind,create=file 0 0
lxc.mount.entry: /dev/loop-control dev/loop-control none bind,create=file 0 0

Where can I set the "-o mand" flag?