[SOLVED] Restore LXC Backup error

[wan1977]

Hello,

I have a problem for restore an lxc backup with last version 5.3-11

When i restore a backup i have :

tar: ./var/spool/postfix/dev/random: Cannot mknod: Operation not permitted
tar: ./var/spool/postfix/dev/urandom: Cannot mknod: Operation not permitted

Test with fresh install and update
same result.

Please help

Thanks

 

[dietmar]

And unprivileged container does not have permissions to create /dev/random. I assume it works if you restore as privileged container?

 

[wan1977]

hello,

I create an ubuntu 18.04.1-1 lxc container, and untick unprivileged.

Backup my container, and remove my container.

And when restore my container

tar: ./var/spool/postfix/dev/random: Cannot mknod: Operation not permitted
tar: ./var/spool/postfix/dev/urandom: Cannot mknod: Operation not permitted

same error

And when restore and old backup container privileged.

tar: ./var/spool/postfix/dev/random: Cannot mknod: Operation not permitted
tar: ./var/spool/postfix/dev/urandom: Cannot mknod: Operation not permitted

thanks

 

[t.lamprecht]

Hi, we recently changed the default from "priviledged" CTs to "unpriviledged", but in the Web GUI only, API and CLI still behaves the same way.

And the container you have has a postfix configured to use chroot, postfix does not bind mounts the devices it needs but wants to make a mknod, which unprivileged CT do not allow if not explicitly whitelisted.
So this backup cannot be restored to a "unpriviledged", you'd simply need to untick the "unpriviledged" checkbox in the restore dialog too.

Or did I misunderstand you? Because I just tried to restore some CTs (old and new) from priv -> priv, unpriv -> unpriv, unpriv -> priv and also priv -> unpriv works if no such device nodes are in the backup.

 

[wan1977]

OK, thanks

I test tonight

 

[chebedewel]

Thanks for the hint, it did the job !

 

[Kaboom]

I try to change my containers from 'unpriv no' to 'unpriv yes' by restoring a backup. I also get this mknod error. Is there any way to restore them with 'unpriv yes'? Or any other solution?