Hello,
On our Proxmox 4.4 server we're unable to start containers, receiving the following error:
TASK ERROR: command 'systemctl start lxc@<ID>' failed: exit code 1
These are CentOS 7 containers.
# systemctl status lxc@100.service
● lxc@100.service - LXC Container: 100
Loaded: loaded (/lib/systemd/system/lxc@.service; disabled)
Drop-In: /usr/lib/systemd/system/lxc@.service.d
└─pve-reboot.conf
Active: failed (Result: exit-code) since Tue 2018-01-09 07:49:23 EST; 37min ago
Docs: man:lxc-start
man:lxc
Process: 29438 ExecStopPost=/usr/share/lxc/lxc-pve-reboot-trigger %i (code=exited, status=0/SUCCESS)
Process: 29701 ExecStart=/usr/bin/lxc-start -n %i (code=exited, status=1/FAILURE)
Main PID: 29944 (code=exited, status=1/FAILURE)
Jan 09 07:49:23 chinook lxc-start[29701]: lxc-start: tools/lxc_start.c: main: 366 The container failed to start.
Jan 09 07:49:23 chinook lxc-start[29701]: lxc-start: tools/lxc_start.c: main: 368 To get more details, run the container in foreground mode.
Jan 09 07:49:23 chinook lxc-start[29701]: lxc-start: tools/lxc_start.c: main: 370 Additional information can be obtained by setting ...ptions.
Jan 09 07:49:23 chinook systemd[1]: lxc@100.service: control process exited, code=exited status=1
Jan 09 07:49:23 chinook systemd[1]: Failed to start LXC Container: 100.
Jan 09 07:49:23 chinook systemd[1]: Unit lxc@100.service entered failed state.
Hint: Some lines were ellipsized, use -l to show in full.
Config for our container 100:
arch: amd64
cores: 2
hostname: xxxx
memory: 2048
nameserver: 10.10.0.149 10.10.0.181
net0: name=eth0,bridge=vmbr0,gw=xxxx,hwaddr=16:6C:4B:A7:74:AB,ip=xxxx/24,type=veth
ostype: centos
rootfs: zfspool:subvol-100-disk-1,size=30G
swap: 2048
# lxc-start -n 100 -d --logfile demo.log -l debug
lxc-start 20170109130917.631 INFO lxc_start_ui - tools/lxc_start.c:main:275 - using rcfile /var/lib/lxc/100/config
lxc-start 20170109130917.631 WARN lxc_confile - confile.c:config_pivotdir:1910 - lxc.pivotdir is ignored. It will soon become an er
ror.
lxc-start 20170109130917.632 DEBUG lxc_monitor - monitor.c:lxc_monitord_spawn:309 - Going to wait for pid 37922.
lxc-start 20170109130917.632 DEBUG lxc_monitor - monitor.c:lxc_monitord_spawn:328 - Trying to sync with child process.
lxc-start 20170109130917.633 INFO lxc_start - start.c:lxc_check_inherited:235 - Closed inherited fd: 3.
lxc-start 20170109130917.633 INFO lxc_start - start.c:lxc_check_inherited:235 - Closed inherited fd: 5.
lxc-start 20170109130917.633 DEBUG lxc_monitor - monitor.c:lxc_monitord_spawn:366 - Using pipe file descriptor 6 for monitord.
lxc-start 20170109130917.635 DEBUG lxc_monitor - monitor.c:lxc_monitord_spawn:343 - Sucessfully synced with child process.
lxc-start 20170109130917.636 DEBUG lxc_monitor - monitor.c:lxc_monitord_spawn:312 - Finished waiting on pid 37922.
lxc-start 20170109130917.636 INFO lxc_container - lxccontainer.c:do_lxcapi_start:804 - Attempting to set proc title to [lxc monitor] /var/lib/lxc 100
lxc-start 20170109130917.637 INFO lxc_start - start.c:lxc_check_inherited:235 - Closed inherited fd: 3.
lxc-start 20170109130917.637 DEBUG lxc_monitor - monitor.c:lxc_monitord_spawn:309 - Going to wait for pid 37926.
lxc-start 20170109130917.637 DEBUG lxc_monitor - monitor.c:lxc_monitord_spawn:328 - Trying to sync with child process.
lxc-start 20170109130917.638 INFO lxc_lsm - lsm/lsm.c:lsm_init:48 - LSM security driver AppArmor
lxc-start 20170109130917.638 INFO lxc_seccomp - seccomp.c
arse_config_v2:402 - processing: .reject_force_umount # comment this to allow umount -f; not recommended.
q
lxc-start 20170109130917.638 INFO lxc_seccomp - seccomp.carse_config_v2:567 - Adding native rule for reject_force_umount action 0.
lxc-start 20170109130917.638 INFO lxc_seccomp - seccomp.c:do_resolve_add_rule:251 - Setting Seccomp rule to reject force umounts.
lxc-start 20170109130917.638 INFO lxc_seccomp - seccomp.carse_config_v2:570 - Adding compat rule for reject_force_umount action 0.
lxc-start 20170109130917.638 INFO lxc_seccomp - seccomp.c:do_resolve_add_rule:251 - Setting Seccomp rule to reject force umounts.
lxc-start 20170109130917.638 INFO lxc_seccomp - seccomp.carse_config_v2:402 - processing: .[all].
lxc-start 20170109130917.638 INFO lxc_seccomp - seccomp.carse_config_v2:402 - processing: .kexec_load errno 1.
lxc-start 20170109130917.638 INFO lxc_seccomp - seccomp.carse_config_v2:567 - Adding native rule for kexec_load action 327681.
lxc-start 20170109130917.638 INFO lxc_seccomp - seccomp.carse_config_v2:570 - Adding compat rule for kexec_load action 327681.
lxc-start 20170109130917.638 INFO lxc_seccomp - seccomp.carse_config_v2:402 - processing: .open_by_handle_at errno 1.
lxc-start 20170109130917.638 INFO lxc_seccomp - seccomp.carse_config_v2:567 - Adding native rule for open_by_handle_at action 327681.
lxc-start 20170109130917.638 INFO lxc_seccomp - seccomp.carse_config_v2:570 - Adding compat rule for open_by_handle_at action 327681.
lxc-start 20170109130917.638 INFO lxc_seccomp - seccomp.carse_config_v2:402 - processing: .init_module errno 1.
lxc-start 20170109130917.638 INFO lxc_seccomp - seccomp.carse_config_v2:567 - Adding native rule for init_module action 327681.
lxc-start 20170109130917.638 INFO lxc_seccomp - seccomp.carse_config_v2:570 - Adding compat rule for init_module action 327681.
lxc-start 20170109130917.638 INFO lxc_seccomp - seccomp.carse_config_v2:402 - processing: .finit_module errno 1.
lxc-start 20170109130917.638 INFO lxc_seccomp - seccomp.carse_config_v2:567 - Adding native rule for finit_module action 327681.
lxc-start 20170109130917.638 WARN lxc_seccomp - seccomp.c:do_resolve_add_rule:270 - Seccomp: got negative for syscall: -10085: finit_module.
lxc-start 20170109130917.638 WARN lxc_seccomp - seccomp.c:do_resolve_add_rule:271 - This syscall will NOT be blacklisted.
lxc-start 20170109130917.638 INFO lxc_seccomp - seccomp.carse_config_v2:570 - Adding compat rule for finit_module action 327681.
lxc-start 20170109130917.638 WARN lxc_seccomp - seccomp.c:do_resolve_add_rule:270 - Seccomp: got negative for syscall: -10085: finit_module.
lxc-start 20170109130917.638 WARN lxc_seccomp - seccomp.c:do_resolve_add_rule:271 - This syscall will NOT be blacklisted.
lxc-start 20170109130917.638 INFO lxc_seccomp - seccomp.carse_config_v2:402 - processing: .delete_module errno 1.
lxc-start 20170109130917.638 INFO lxc_seccomp - seccomp.carse_config_v2:567 - Adding native rule for delete_module action 327681.
lxc-start 20170109130917.638 INFO lxc_seccomp - seccomp.carse_config_v2:570 - Adding compat rule for delete_module action 327681.
lxc-start 20170109130917.638 INFO lxc_seccomp - seccomp.carse_config_v2:580 - Merging in the compat Seccomp ctx into the main one.
lxc-start 20170109130917.638 INFO lxc_conf - conf.c:run_script_argv:424 - Executing script "/usr/share/lxc/hooks/lxc-pve-prestart-hook" for container "100", config section "lxc".
lxc-start 20170109130917.638 INFO lxc_start - start.c:lxc_check_inherited:235 - Closed inherited fd: 3.
lxc-start 20170109130917.638 INFO lxc_start - start.c:lxc_check_inherited:235 - Closed inherited fd: 5.
lxc-start 20170109130917.638 DEBUG lxc_monitor - monitor.c:lxc_monitord_spawn:366 - Using pipe file descriptor 6 for monitord.
lxc-start 20170109130917.641 DEBUG lxc_monitor - monitor.c:lxc_monitord_spawn:343 - Sucessfully synced with child process.
lxc-start 20170109130917.641 DEBUG lxc_monitor - monitor.c:lxc_monitord_spawn:312 - Finished waiting on pid 37926.
lxc-start 20170109130917.641 INFO lxc_monitor - monitor.c:lxc_monitor_sock_name:185 - Using monitor socket name "lxc/ad055575fe28ddd5//var/lib/lxc".
lxc-start 20170109130917.968 ERROR lxc_conf - conf.c:run_buffer:405 - Script exited with status 2.
lxc-start 20170109130917.968 ERROR lxc_start - start.c:lxc_init:450 - Failed to run lxc.hook.pre-start for container "100".
lxc-start 20170109130917.968 ERROR lxc_start - start.c:__lxc_start:1321 - Failed to initialize container "100".
lxc-start 20170109130917.968 WARN lxc_commands - commands.c:lxc_cmd_rsp_recv:172 - Command get_cgroup failed to receive response: Connection reset by peer.
lxc-start 20170109130922.974 ERROR lxc_start_ui - tools/lxc_start.c:main:366 - The container failed to start.
lxc-start 20170109130922.974 ERROR lxc_start_ui - tools/lxc_start.c:main:368 - To get more details, run the container in foreground mode.
lxc-start 20170109130922.974 ERROR lxc_start_ui - tools/lxc_start.c:main:370 - Additional information can be obtained by setting the --logfile and --logpriority options.
Any ideas or help appreciated.
On our Proxmox 4.4 server we're unable to start containers, receiving the following error:
TASK ERROR: command 'systemctl start lxc@<ID>' failed: exit code 1
These are CentOS 7 containers.
# systemctl status lxc@100.service
● lxc@100.service - LXC Container: 100
Loaded: loaded (/lib/systemd/system/lxc@.service; disabled)
Drop-In: /usr/lib/systemd/system/lxc@.service.d
└─pve-reboot.conf
Active: failed (Result: exit-code) since Tue 2018-01-09 07:49:23 EST; 37min ago
Docs: man:lxc-start
man:lxc
Process: 29438 ExecStopPost=/usr/share/lxc/lxc-pve-reboot-trigger %i (code=exited, status=0/SUCCESS)
Process: 29701 ExecStart=/usr/bin/lxc-start -n %i (code=exited, status=1/FAILURE)
Main PID: 29944 (code=exited, status=1/FAILURE)
Jan 09 07:49:23 chinook lxc-start[29701]: lxc-start: tools/lxc_start.c: main: 366 The container failed to start.
Jan 09 07:49:23 chinook lxc-start[29701]: lxc-start: tools/lxc_start.c: main: 368 To get more details, run the container in foreground mode.
Jan 09 07:49:23 chinook lxc-start[29701]: lxc-start: tools/lxc_start.c: main: 370 Additional information can be obtained by setting ...ptions.
Jan 09 07:49:23 chinook systemd[1]: lxc@100.service: control process exited, code=exited status=1
Jan 09 07:49:23 chinook systemd[1]: Failed to start LXC Container: 100.
Jan 09 07:49:23 chinook systemd[1]: Unit lxc@100.service entered failed state.
Hint: Some lines were ellipsized, use -l to show in full.
Config for our container 100:
arch: amd64
cores: 2
hostname: xxxx
memory: 2048
nameserver: 10.10.0.149 10.10.0.181
net0: name=eth0,bridge=vmbr0,gw=xxxx,hwaddr=16:6C:4B:A7:74:AB,ip=xxxx/24,type=veth
ostype: centos
rootfs: zfspool:subvol-100-disk-1,size=30G
swap: 2048
# lxc-start -n 100 -d --logfile demo.log -l debug
lxc-start 20170109130917.631 INFO lxc_start_ui - tools/lxc_start.c:main:275 - using rcfile /var/lib/lxc/100/config
lxc-start 20170109130917.631 WARN lxc_confile - confile.c:config_pivotdir:1910 - lxc.pivotdir is ignored. It will soon become an er
ror.
lxc-start 20170109130917.632 DEBUG lxc_monitor - monitor.c:lxc_monitord_spawn:309 - Going to wait for pid 37922.
lxc-start 20170109130917.632 DEBUG lxc_monitor - monitor.c:lxc_monitord_spawn:328 - Trying to sync with child process.
lxc-start 20170109130917.633 INFO lxc_start - start.c:lxc_check_inherited:235 - Closed inherited fd: 3.
lxc-start 20170109130917.633 INFO lxc_start - start.c:lxc_check_inherited:235 - Closed inherited fd: 5.
lxc-start 20170109130917.633 DEBUG lxc_monitor - monitor.c:lxc_monitord_spawn:366 - Using pipe file descriptor 6 for monitord.
lxc-start 20170109130917.635 DEBUG lxc_monitor - monitor.c:lxc_monitord_spawn:343 - Sucessfully synced with child process.
lxc-start 20170109130917.636 DEBUG lxc_monitor - monitor.c:lxc_monitord_spawn:312 - Finished waiting on pid 37922.
lxc-start 20170109130917.636 INFO lxc_container - lxccontainer.c:do_lxcapi_start:804 - Attempting to set proc title to [lxc monitor] /var/lib/lxc 100
lxc-start 20170109130917.637 INFO lxc_start - start.c:lxc_check_inherited:235 - Closed inherited fd: 3.
lxc-start 20170109130917.637 DEBUG lxc_monitor - monitor.c:lxc_monitord_spawn:309 - Going to wait for pid 37926.
lxc-start 20170109130917.637 DEBUG lxc_monitor - monitor.c:lxc_monitord_spawn:328 - Trying to sync with child process.
lxc-start 20170109130917.638 INFO lxc_lsm - lsm/lsm.c:lsm_init:48 - LSM security driver AppArmor
lxc-start 20170109130917.638 INFO lxc_seccomp - seccomp.c
arse_config_v2:402 - processing: .reject_force_umount # comment this to allow umount -f; not recommended.q
lxc-start 20170109130917.638 INFO lxc_seccomp - seccomp.c
arse_config_v2:567 - Adding native rule for reject_force_umount action 0.lxc-start 20170109130917.638 INFO lxc_seccomp - seccomp.c:do_resolve_add_rule:251 - Setting Seccomp rule to reject force umounts.
lxc-start 20170109130917.638 INFO lxc_seccomp - seccomp.c
arse_config_v2:570 - Adding compat rule for reject_force_umount action 0.lxc-start 20170109130917.638 INFO lxc_seccomp - seccomp.c:do_resolve_add_rule:251 - Setting Seccomp rule to reject force umounts.
lxc-start 20170109130917.638 INFO lxc_seccomp - seccomp.c
arse_config_v2:402 - processing: .[all].lxc-start 20170109130917.638 INFO lxc_seccomp - seccomp.c
arse_config_v2:402 - processing: .kexec_load errno 1.lxc-start 20170109130917.638 INFO lxc_seccomp - seccomp.c
arse_config_v2:567 - Adding native rule for kexec_load action 327681.lxc-start 20170109130917.638 INFO lxc_seccomp - seccomp.c
arse_config_v2:570 - Adding compat rule for kexec_load action 327681.lxc-start 20170109130917.638 INFO lxc_seccomp - seccomp.c
arse_config_v2:402 - processing: .open_by_handle_at errno 1.lxc-start 20170109130917.638 INFO lxc_seccomp - seccomp.c
arse_config_v2:567 - Adding native rule for open_by_handle_at action 327681.lxc-start 20170109130917.638 INFO lxc_seccomp - seccomp.c
arse_config_v2:570 - Adding compat rule for open_by_handle_at action 327681.lxc-start 20170109130917.638 INFO lxc_seccomp - seccomp.c
arse_config_v2:402 - processing: .init_module errno 1.lxc-start 20170109130917.638 INFO lxc_seccomp - seccomp.c
arse_config_v2:567 - Adding native rule for init_module action 327681.lxc-start 20170109130917.638 INFO lxc_seccomp - seccomp.c
arse_config_v2:570 - Adding compat rule for init_module action 327681.lxc-start 20170109130917.638 INFO lxc_seccomp - seccomp.c
arse_config_v2:402 - processing: .finit_module errno 1.lxc-start 20170109130917.638 INFO lxc_seccomp - seccomp.c
arse_config_v2:567 - Adding native rule for finit_module action 327681.lxc-start 20170109130917.638 WARN lxc_seccomp - seccomp.c:do_resolve_add_rule:270 - Seccomp: got negative for syscall: -10085: finit_module.
lxc-start 20170109130917.638 WARN lxc_seccomp - seccomp.c:do_resolve_add_rule:271 - This syscall will NOT be blacklisted.
lxc-start 20170109130917.638 INFO lxc_seccomp - seccomp.c
arse_config_v2:570 - Adding compat rule for finit_module action 327681.lxc-start 20170109130917.638 WARN lxc_seccomp - seccomp.c:do_resolve_add_rule:270 - Seccomp: got negative for syscall: -10085: finit_module.
lxc-start 20170109130917.638 WARN lxc_seccomp - seccomp.c:do_resolve_add_rule:271 - This syscall will NOT be blacklisted.
lxc-start 20170109130917.638 INFO lxc_seccomp - seccomp.c
arse_config_v2:402 - processing: .delete_module errno 1.lxc-start 20170109130917.638 INFO lxc_seccomp - seccomp.c
arse_config_v2:567 - Adding native rule for delete_module action 327681.lxc-start 20170109130917.638 INFO lxc_seccomp - seccomp.c
arse_config_v2:570 - Adding compat rule for delete_module action 327681.lxc-start 20170109130917.638 INFO lxc_seccomp - seccomp.c
arse_config_v2:580 - Merging in the compat Seccomp ctx into the main one.lxc-start 20170109130917.638 INFO lxc_conf - conf.c:run_script_argv:424 - Executing script "/usr/share/lxc/hooks/lxc-pve-prestart-hook" for container "100", config section "lxc".
lxc-start 20170109130917.638 INFO lxc_start - start.c:lxc_check_inherited:235 - Closed inherited fd: 3.
lxc-start 20170109130917.638 INFO lxc_start - start.c:lxc_check_inherited:235 - Closed inherited fd: 5.
lxc-start 20170109130917.638 DEBUG lxc_monitor - monitor.c:lxc_monitord_spawn:366 - Using pipe file descriptor 6 for monitord.
lxc-start 20170109130917.641 DEBUG lxc_monitor - monitor.c:lxc_monitord_spawn:343 - Sucessfully synced with child process.
lxc-start 20170109130917.641 DEBUG lxc_monitor - monitor.c:lxc_monitord_spawn:312 - Finished waiting on pid 37926.
lxc-start 20170109130917.641 INFO lxc_monitor - monitor.c:lxc_monitor_sock_name:185 - Using monitor socket name "lxc/ad055575fe28ddd5//var/lib/lxc".
lxc-start 20170109130917.968 ERROR lxc_conf - conf.c:run_buffer:405 - Script exited with status 2.
lxc-start 20170109130917.968 ERROR lxc_start - start.c:lxc_init:450 - Failed to run lxc.hook.pre-start for container "100".
lxc-start 20170109130917.968 ERROR lxc_start - start.c:__lxc_start:1321 - Failed to initialize container "100".
lxc-start 20170109130917.968 WARN lxc_commands - commands.c:lxc_cmd_rsp_recv:172 - Command get_cgroup failed to receive response: Connection reset by peer.
lxc-start 20170109130922.974 ERROR lxc_start_ui - tools/lxc_start.c:main:366 - The container failed to start.
lxc-start 20170109130922.974 ERROR lxc_start_ui - tools/lxc_start.c:main:368 - To get more details, run the container in foreground mode.
lxc-start 20170109130922.974 ERROR lxc_start_ui - tools/lxc_start.c:main:370 - Additional information can be obtained by setting the --logfile and --logpriority options.
Any ideas or help appreciated.