Permissions on devices.list and devices.allow

[2cadz]

Hello,

I saw a few posts dealing with the subject but nothing really conclusive on the resolution, so I opened a new question.

For me the problem occurred when updating the base in a MariaDB LXC container:
MariaDB-server-maria-10.1.14 + 1 ~ jessie -> MariaDB-server-maria-10.1.16 + 1 ~ jessie


It starts with the following error when installing the new server :

...
Jul 19 8:13:36 xxxx systemd [1]: Failed to set devices.allow we /lxc/136/system.slice/mariadb.service: Permission denied
Jul 19 8:13:36 xxxx systemd [1]: Failed to set devices.allow we /lxc/136/system.slice/mariadb.service: Permission denied
Jul 19 8:13:36 xxxx systemd [1]: Failed to set devices.allow we /lxc/136/system.slice/mariadb.service: Permission denied
...

then after a restart the container on almost all services:

...
Jul 19 8:13:36 xxxx systemd [1]: Failed to reset devices.list we /lxc/136/system.slice/zabbix-agent.service: Permission denied
Jul 19 8:13:36 xxxx systemd [1]: Failed to reset devices.list we /lxc/136/system.slice/php5-fpm.service: Permission denied
Jul 19 8:13:36 xxxx systemd [1]: Failed to reset devices.list we /lxc/136/system.slice/cron.service: Permission denied
Jul 19 8:13:36 xxxx systemd [1]: Failed to reset devices.list we /lxc/136/system.slice/nginx.service: Permission denied
Jul 19 8:13:36 xxxx systemd [1]: Failed to reset devices.list we /lxc/136/system.slice/rc-local.service: Permission denied
...

Does anyone has a working track to solve these problems ?

Thanks

Regards

 

[LnxBil]

As far as I know, there are still bugs with systemd on LXC, at least they were there in 4.0 and 4.1. Therefore the normal Jessie LXC template ships with sysvinit instead of systemd.

 

[2cadz]

@LnxBil: Thank for your reply, i try a container with sysvinit.