[SOLVED] snapd lxc - container ubuntu 18.04 problems Error message

[redjohn]

Hello everyone,

I have a ubuntu lxc - container with ubuntu 18.04 and installed snapd, but with problems. In my lxc config I have the following lines added:

features: nesting=1,fuse=1,mount=nfs
lxc.cap.drop:

I can start the snapd container with rocketchat server but in syslog I have the following error:

 audit: type=1400 audit(1567013721.993:14130357): apparmor="DENIED" operation="open" namespace="root//lxc-111_<-var-lib-lxc>" profile="snap.rocketchat-server.rocketchat-mongo" name="/proc/549/net/netstat" pid=2002 comm="ftdc" requested_mask="r" denied_mask="r" fsuid=0 ouid=0

audit: type=1400 audit(1567013803.088:14130495): apparmor="STATUS" operation="profile_load" label="lxc-111_</var/lib/lxc>//&:lxc-111_<-var-lib-lxc>:unconfined" name="/usr/bin/man" pid=26358 comm="apparmor_parser"

audit: type=1400 audit(1567013816.156:14130559): apparmor="DENIED" operation="ptrace" namespace="root//lxc-111_<-var-lib-lxc>" profile="snap.rocketchat-server.rocketchat-server" pid=27441 comm="ps" requested_mask="trace" denied_mask="trace" peer="unconfined"

I don't know what I can do, my syslog have thousand of this entrys how can I stop or fix it?

Regards,

Oliver

 

[Stefan_R]

Solved in german forum, TL;DR: it's an upstream bug from Rocket.Chat, unrelated to LXC.