touch-packages team mailing list archive
-
touch-packages team
-
Mailing list archive
-
Message #79466
[Bug 1457054] Re: journal is broken in unprivileged LXC and nspawn containers
Status changed to 'Confirmed' because the bug affects multiple users.
** Changed in: systemd (Ubuntu Vivid)
Status: New => Confirmed
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to systemd in Ubuntu.
https://bugs.launchpad.net/bugs/1457054
Title:
journal is broken in unprivileged LXC and nspawn containers
Status in systemd package in Ubuntu:
In Progress
Status in systemd source package in Vivid:
Confirmed
Status in systemd source package in Wily:
In Progress
Bug description:
Test case
-------------
- Under Ubuntu 15.04 (or 15.10), set up an unprivileged container as in https://www.stgraber.org/2014/01/17/lxc-1-0-unprivileged-containers/
- Boot it. You'll get a lot of errors like
[FAILED] Failed to start Journal Service.
systemd-journald-audit.socket failed to listen on sockets: Operation not permitted
[FAILED] Failed to listen on Journal Audit Socket.
- The same happens with systemd-nspawn -b.
As a result, the journal isn't working at all.
With a fixed systemd package, systemd in the container should realize
that it cannot listen to the audit socket (as the kernel doesn't allow
that -- the audit subsystem isn't fit for namespaces right now), and
"sudo journalctl" should show the journal and systemd-journald.service
should be running.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1457054/+subscriptions
References