I would like to see an appliance for sandstorm.io

Ovidiu

Renowned Member
Apr 27, 2014
324
12
83
I'm currently struggling to install sandstorm into a plain Debian 8 container.

Seeign stuff like problems with apparmor and after making the container uncontained I get stuff like:

Code:
modprobe fuse
modprobe: ERROR: ../libkmod/libkmod.c:557 kmod_search_moddep() could not open moddep file '/lib/modules/4.2.3-2-pve/modules.dep.bin'

So having an appliance for it would be awesome!
 
Kernel modules need to be loaded on the host, try it and see if there's anything else that fails.
Also which apparmor errors do you see when it's enabled?
(Maybe unprivileged containers will solve this once they're available.)
 
Thanks. I enabled the module on the host with modprobe fuse yet inside the lxc container trying to start sandstorm still gives me this error:

** Server monitor died. Aborting.stack: 0x4dd6f3 0x4dcb1f 0x4fb520 0x4fa6d9 0x4fa6ca 0x43ca41 0x43d6c5
sandstorm/run-bundle.c++:1122: failed: mount("/dev/fuse", "dev/fuse", nullptr, MS_BIND, nullptr): No such file or directory
*** Uncaught exception ***
** Starting Sandstorm at: Mon Nov 23 19:52:31 2015

The apparmor was fixed with: lxc.aa_profile = unconfined
but the only error log I still found was:
Nov 14 15:21:10 james kernel: [109570.531049] audit: type=1400 audit(1447510870.554:10705): apparmor="DENIED" operation="mount" info="failed flags match" error=-13 profile="lxc-container-default" name="/" pid=21731 comm="sandstorm" flags="rw, rprivate"
/var/log/kern.log:Nov 12 22:28:15 bayley kernel: [477637.723141] audit: type=1400 audit(1447367295.249:454816): apparmor="DENIED" operation="sendmsg" profile="/usr/sbin/named" nam
e="/run/systemd/journal/dev-log" pid=1177 comm="named" requested_mask="w" denied_mask="w" fsuid=109 ouid=0

Btw. if you are interested, here is the support thread on their forum: https://github.com/sandstorm-io/sandstorm/issues/1156
 
Ah yes you'd have to include the fuse device in the container.
Eg you can add
Code:
lxc.mount.entry /dev/fuse dev/fuse none bind,create=file 0 0
and restart the container.
 
Awesome, thanks so much. I figured it out needs to look like this and then it just worked :)

lxc.mount.entry = /dev/fuse dev/fuse none bind,create=file 0 0
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!