[SOLVED] Proxmox VE 9.0 BETA LCX Docker not working

jsterr said:
Thanks I also needed to restart docker via systemctl restart docker on every boot. If I dont, docker does not work on my side.
Click to expand...
I am not seeing that here. The LXCs are now behaving like they did before the update, starting docker without a problem. One thing that I can think of that people might forget, is not only to update the repos of the distribution to trixie but also the docker repo....
 
Twilek said:
I am not seeing that here. The LXCs are now behaving like they did before the update, starting docker without a problem. One thing that I can think of that people might forget, is not only to update the repos of the distribution to trixie but also the docker repo....
Click to expand...

Thanks! Good point, but this was not the solution for me. I noticed that the containers will start exactly after 5 minutes. Seems like a different problem. So waiting 5 minutes is ok for me atm. In case someone wants to update the debian containers to trixie to make the workaround actually work:

Code: 
# inside a debian-12 container

sed -i 's/bookworm/trixie/g' /etc/apt/sources.list
find /etc/apt/sources.list.d -type f -exec sed -i 's/bookworm/trixie/g' {} \;
apt update && apt dist-upgrade -y

After that you can set the container-features on the hypervisor via:

Code: 
pct shutdown <ct-id>
pct set <ct-id> --features "fuse=1,mknod=1,nesting=1,keyctl=1"

edit the config file in /etc/pve/lxc/<ct-id>.conf and put: lxc.apparmor.profile: unconfined on the very bottom.

pct start <ct-id>
 
Last edited:
  • Like
Reactions: Johannes S
@wbumiller updated the bugtracker with a working solution:

Looks like the apparmor profile needs to allow mqueue access specifically with trixie apparmor userspace versions (despite the ABI declared in the profile being the same still).

Can you confirm that adding this to /etc/pve/lxc/105.conf fixes the issue for you?

lxc.apparmor.raw: allow mqueue,

(Note: the trailing comma must be included!)
Click to expand...

Can confirm, after adding "lxc.apparmor.raw: allow mqueue," to the config, everything is working fine. All LXC Container are up and running. Thank you for your support!
 
Last edited:
  • Like
Reactions: Johannes S
A new pve-container package with version 6.0.3 has just been uploaded, it contains a fix to generates the relevant mqueue apparmor rule by default.

Please note though that enabling keyctl and other features might still be required and is not considered a bug.
 
You must log in or register to reply here.
Top Bottom