{"action":"closed","issue":{"url":"https://api.github.com/repos/lxc/lxd/issues/2498","repository_url":"https://api.github.com/repos/lxc/lxd","labels_url":"https://api.github.com/repos/lxc/lxd/issues/2498/labels{/name}","comments_url":"https://api.github.com/repos/lxc/lxd/issues/2498/comments","events_url":"https://api.github.com/repos/lxc/lxd/issues/2498/events","html_url":"https://github.com/lxc/lxd/issues/2498","id":183010724,"number":2498,"title":"Allow swap to be enabled with the option limits.memory.enforce: hard so that memory can be limited in combination with using swap.","user":{"login":"marcoroest87","id":6566898,"avatar_url":"https://avatars.githubusercontent.com/u/6566898?v=3","gravatar_id":"","url":"https://api.github.com/users/marcoroest87","html_url":"https://github.com/marcoroest87","followers_url":"https://api.github.com/users/marcoroest87/followers","following_url":"https://api.github.com/users/marcoroest87/following{/other_user}","gists_url":"https://api.github.com/users/marcoroest87/gists{/gist_id}","starred_url":"https://api.github.com/users/marcoroest87/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/marcoroest87/subscriptions","organizations_url":"https://api.github.com/users/marcoroest87/orgs","repos_url":"https://api.github.com/users/marcoroest87/repos","events_url":"https://api.github.com/users/marcoroest87/events{/privacy}","received_events_url":"https://api.github.com/users/marcoroest87/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2016-10-14T10:01:26Z","updated_at":"2016-10-14T20:41:17Z","closed_at":"2016-10-14T20:41:17Z","body":"The template below is mostly useful for bug reports and support questions.\r\nFeel free to remove anything which doesn't apply to you and add more information where it makes sense.\r\n\r\n# Required information\r\n\r\n * Distribution: Ubuntu \r\n * Distribution version: 16.04\r\n * The output of \"lxc info\" or if that fails:\r\n```\r\napiextensions:\r\n- storage_zfs_remove_snapshots\r\n- container_host_shutdown_timeout\r\n- container_syscall_filtering\r\n- auth_pki\r\n- container_last_used_at\r\n- etag\r\n- patch\r\n- usb_devices\r\n- https_allowed_credentials\r\n- image_compression_algorithm\r\n- directory_manipulation\r\n- container_cpu_time\r\n- storage_zfs_use_refquota\r\napistatus: stable\r\napiversion: \"1.0\"\r\nauth: trusted\r\nenvironment:\r\n  addresses:\r\n  - 5.200.25.98:8443\r\n  - 10.255.1.1:8443\r\n  architectures:\r\n  - x86_64\r\n  - i686\r\n  certificate: |\r\n    -----BEGIN CERTIFICATE-----\r\n--- removed ---\r\n    -----END CERTIFICATE-----\r\n  certificatefingerprint: \r\n--- removed ---\r\n  driver: lxc\r\n  driverversion: 2.0.1\r\n  kernel: Linux\r\n  kernelarchitecture: x86_64\r\n  kernelversion: 4.4.0-38-generic\r\n  server: lxd\r\n  serverpid: 39943\r\n  serverversion: \"2.2\"\r\n  storage: lvm\r\n  storageversion: 2.02.133(2) (2015-10-30) / 1.02.110 (2015-10-30) / 4.34.0\r\nconfig:\r\n  core.https_address: '[::]:8443'\r\n  core.trust_password: true\r\n  images.remote_cache_expiry: \"1\"\r\n  storage.lvm_vg_name: vg-system\r\n  storage.lvm_volume_size: 80Gib\r\npublic: false\r\n```\r\n\r\n# Issue description\r\nSwap can only be enabled for containers when limits.memory.enforce is set to soft\r\n\r\nA brief description of what failed or what could be improved.\r\nAllow swap to be enabled with the option limits.memory.enforce: hard so that memory can be limited in combination with using swap.\r\n\r\n# Steps to reproduce\r\n\r\n 1. Step one\r\nCreate an container with the following option if the container profile:\r\n```\r\nlimits.memory: 3072MB\r\nlimits.memory.enforce: hard\r\nlimits.memory.swap: \"true\"\r\n```\r\nrun `free -m` in the container.\r\nThe following output is returned:\r\n```\r\n              total        used        free      shared  buff/cache   available\r\nMem:           3072         729        1764        9644         578        1764\r\nSwap:             0           0           0\r\n```\r\n\r\nIn this situation I would except swap to be enabled while the actual memory of the container is limited to 3072MB (the memory limit is working fine, but swap is off).\r\n\r\n 2. Step two\r\nCreate an container with the following option if the container profile:\r\n```\r\nlimits.memory: 3072MB\r\nlimits.memory.enforce: soft\r\nlimits.memory.swap: \"true\"\r\n```\r\nrun `free -m` in the container.\r\nThe following output is returned:\r\n```\r\n              total        used        free      shared  buff/cache   available\r\nMem:          64323         729       63015        9668         578       63015\r\nSwap:         63283         697       62586\r\n```\r\n\r\nIn this situation the container has access to the full swap amount of the host (~64GB). This is ok because swap is not limited. However we do not want to have to have access to the full memory amount of the host (64GB).\r\n\r\n# Information to attach\r\n\r\n- Swapiness on the host is set to 1\r\n```\r\nhypershop@hs01 ~ $ sysctl vm.swappiness\r\nvm.swappiness = 1\r\n```\r\n\r\n- the following kernel boot options are enabled on the host:\r\n```\r\nhypershop@hs01 ~ $ cat /proc/cmdline\r\nBOOT_IMAGE=/boot/vmlinuz-4.4.0-38-generic.efi.signed root=/dev/mapper/vg--system-v--root ro cgroup_enable=memory swapaccount=1 transparent_hugepage=never\r\n```\r\n\r\n - [ ] any relevant kernel output (dmesg)\r\n - [X] container log (lxc info NAME --show-log)\r\n```\r\nName: tikkieondeugend\r\nArchitecture: x86_64\r\nCreated: 2016/09/05 16:20 UTC\r\nStatus: Running\r\nType: persistent\r\nProfiles: tikkieondeugend\r\nPid: 4123923\r\nIps:\r\n  eth0:\tinet\t10.255.1.108\tvethOEYH6H\r\n  eth0:\tinet6\tfe80::216:3eff:fe98:5c62\tvethOEYH6H\r\n  eth1:\tinet\t10.0.108.2\tvethWUETNT\r\n  eth1:\tinet6\tfe80::216:3eff:fef6:94c7\tvethWUETNT\r\n  eth2:\tinet6\tfe80::216:3eff:fe90:ac71\tvethFI07FX\r\n  lo:\tinet\t127.0.0.1\r\n  lo:\tinet6\t::1\r\nResources:\r\n  Processes: 451\r\n  CPU usage:\r\n    CPU usage (in seconds): 16\r\n  Memory usage:\r\n    Memory (current): 1020.07MB\r\n    Memory (peak): 1020.07MB\r\n    Swap (current): -45056 bytes\r\n  Network usage:\r\n    eth2:\r\n      Bytes received: 260 bytes\r\n      Bytes sent: 1.04kB\r\n      Packets received: 5\r\n      Packets sent: 18\r\n    lo:\r\n      Bytes received: 50.77kB\r\n      Bytes sent: 50.77kB\r\n      Packets received: 328\r\n      Packets sent: 328\r\n    eth0:\r\n      Bytes received: 2.62kB\r\n      Bytes sent: 1.73kB\r\n      Packets received: 14\r\n      Packets sent: 22\r\n    eth1:\r\n      Bytes received: 260 bytes\r\n      Bytes sent: 1.38kB\r\n      Packets received: 5\r\n      Packets sent: 27\r\n\r\nLog:\r\n            lxc 20161014115628.472 INFO     lxc_start - start.c:lxc_check_inherited:251 - closed inherited fd 3\r\n            lxc 20161014115628.472 INFO     lxc_start - start.c:lxc_check_inherited:251 - closed inherited fd 8\r\n            lxc 20161014115628.473 INFO     lxc_container - lxccontainer.c:do_lxcapi_start:797 - Attempting to set proc title to [lxc monitor] /var/lib/lxd/containers tikkieondeugend\r\n            lxc 20161014115628.473 INFO     lxc_start - start.c:lxc_check_inherited:251 - closed inherited fd 8\r\n            lxc 20161014115628.473 INFO     lxc_lsm - lsm/lsm.c:lsm_init:48 - LSM security driver AppArmor\r\n            lxc 20161014115628.473 INFO     lxc_seccomp - seccomp.c:parse_config_v2:342 - processing: ..\r\n            lxc 20161014115628.473 INFO     lxc_seccomp - seccomp.c:parse_config_v2:446 - Adding native rule for  action 0\r\n            lxc 20161014115628.473 WARN     lxc_seccomp - seccomp.c:do_resolve_add_rule:228 - Seccomp: failed to resolve syscall:\r\n            lxc 20161014115628.473 WARN     lxc_seccomp - seccomp.c:do_resolve_add_rule:229 - This syscall will NOT be blacklisted\r\n            lxc 20161014115628.473 INFO     lxc_seccomp - seccomp.c:parse_config_v2:449 - Adding compat rule for  action 0\r\n            lxc 20161014115628.473 WARN     lxc_seccomp - seccomp.c:do_resolve_add_rule:228 - Seccomp: failed to resolve syscall:\r\n            lxc 20161014115628.473 WARN     lxc_seccomp - seccomp.c:do_resolve_add_rule:229 - This syscall will NOT be blacklisted\r\n            lxc 20161014115628.473 INFO     lxc_seccomp - seccomp.c:parse_config_v2:342 - processing: .reject_force_umount  # comment this to allow umount -f;  not recommended.\r\n            lxc 20161014115628.473 INFO     lxc_seccomp - seccomp.c:parse_config_v2:446 - Adding native rule for reject_force_umount action 0\r\n            lxc 20161014115628.473 INFO     lxc_seccomp - seccomp.c:do_resolve_add_rule:216 - Setting seccomp rule to reject force umounts\r\n\r\n            lxc 20161014115628.473 INFO     lxc_seccomp - seccomp.c:parse_config_v2:449 - Adding compat rule for reject_force_umount action 0\r\n            lxc 20161014115628.473 INFO     lxc_seccomp - seccomp.c:do_resolve_add_rule:216 - Setting seccomp rule to reject force umounts\r\n\r\n            lxc 20161014115628.473 INFO     lxc_seccomp - seccomp.c:parse_config_v2:342 - processing: .[all].\r\n            lxc 20161014115628.473 INFO     lxc_seccomp - seccomp.c:parse_config_v2:342 - processing: .kexec_load errno 38.\r\n            lxc 20161014115628.473 INFO     lxc_seccomp - seccomp.c:parse_config_v2:446 - Adding native rule for kexec_load action 327718\r\n            lxc 20161014115628.473 INFO     lxc_seccomp - seccomp.c:parse_config_v2:449 - Adding compat rule for kexec_load action 327718\r\n            lxc 20161014115628.473 INFO     lxc_seccomp - seccomp.c:parse_config_v2:342 - processing: .open_by_handle_at errno 38.\r\n            lxc 20161014115628.473 INFO     lxc_seccomp - seccomp.c:parse_config_v2:446 - Adding native rule for open_by_handle_at action 327718\r\n            lxc 20161014115628.473 INFO     lxc_seccomp - seccomp.c:parse_config_v2:449 - Adding compat rule for open_by_handle_at action 327718\r\n            lxc 20161014115628.473 INFO     lxc_seccomp - seccomp.c:parse_config_v2:342 - processing: .init_module errno 38.\r\n            lxc 20161014115628.473 INFO     lxc_seccomp - seccomp.c:parse_config_v2:446 - Adding native rule for init_module action 327718\r\n            lxc 20161014115628.473 INFO     lxc_seccomp - seccomp.c:parse_config_v2:449 - Adding compat rule for init_module action 327718\r\n            lxc 20161014115628.473 INFO     lxc_seccomp - seccomp.c:parse_config_v2:342 - processing: .finit_module errno 38.\r\n            lxc 20161014115628.473 INFO     lxc_seccomp - seccomp.c:parse_config_v2:446 - Adding native rule for finit_module action 327718\r\n            lxc 20161014115628.473 INFO     lxc_seccomp - seccomp.c:parse_config_v2:449 - Adding compat rule for finit_module action 327718\r\n            lxc 20161014115628.473 INFO     lxc_seccomp - seccomp.c:parse_config_v2:342 - processing: .delete_module errno 38.\r\n            lxc 20161014115628.473 INFO     lxc_seccomp - seccomp.c:parse_config_v2:446 - Adding native rule for delete_module action 327718\r\n            lxc 20161014115628.473 INFO     lxc_seccomp - seccomp.c:parse_config_v2:449 - Adding compat rule for delete_module action 327718\r\n            lxc 20161014115628.473 INFO     lxc_seccomp - seccomp.c:parse_config_v2:456 - Merging in the compat seccomp ctx into the main one\r\n            lxc 20161014115628.473 INFO     lxc_conf - conf.c:run_script_argv:367 - Executing script '/usr/bin/lxd callhook /var/lib/lxd 68 start' for container 'tikkieondeugend', config section 'lxc'\r\n            lxc 20161014115628.473 INFO     lxc_start - start.c:lxc_check_inherited:251 - closed inherited fd 3\r\n            lxc 20161014115628.474 INFO     lxc_start - start.c:lxc_check_inherited:251 - closed inherited fd 8\r\n            lxc 20161014115628.475 INFO     lxc_monitor - monitor.c:lxc_monitor_sock_name:178 - using monitor sock name lxc/d78a9d7e97b4b375//var/lib/lxd/containers\r\n            lxc 20161014115628.504 DEBUG    lxc_start - start.c:setup_signal_fd:289 - sigchild handler set\r\n            lxc 20161014115628.505 DEBUG    lxc_console - console.c:lxc_console_peer_default:469 - no console peer\r\n            lxc 20161014115628.505 INFO     lxc_start - start.c:lxc_init:488 - 'tikkieondeugend' is initialized\r\n            lxc 20161014115628.505 DEBUG    lxc_start - start.c:__lxc_start:1326 - Not dropping cap_sys_boot or watching utmp\r\n            lxc 20161014115628.509 DEBUG    lxc_conf - conf.c:instantiate_veth:2614 - instantiated veth 'vethOEYH6H/vethO1FN6B', index is '278'\r\n            lxc 20161014115628.513 DEBUG    lxc_conf - conf.c:instantiate_veth:2614 - instantiated veth 'vethWUETNT/veth7IBU6F', index is '280'\r\n            lxc 20161014115628.517 DEBUG    lxc_conf - conf.c:instantiate_veth:2614 - instantiated veth 'vethFI07FX/vethAX3G9O', index is '282'\r\n            lxc 20161014115628.517 INFO     lxc_cgroup - cgroup.c:cgroup_init:68 - cgroup driver cgroupfs-ng initing for tikkieondeugend\r\n            lxc 20161014115628.520 DEBUG    lxc_cgfsng - cgfsng.c:cgfsng_setup_limits:1667 - cgroup 'devices.deny' set to 'a'\r\n            lxc 20161014115628.520 DEBUG    lxc_cgfsng - cgfsng.c:cgfsng_setup_limits:1667 - cgroup 'devices.allow' set to 'b *:* m'\r\n            lxc 20161014115628.520 DEBUG    lxc_cgfsng - cgfsng.c:cgfsng_setup_limits:1667 - cgroup 'devices.allow' set to 'c *:* m'\r\n            lxc 20161014115628.520 DEBUG    lxc_cgfsng - cgfsng.c:cgfsng_setup_limits:1667 - cgroup 'devices.allow' set to 'c 136:* rwm'\r\n            lxc 20161014115628.520 DEBUG    lxc_cgfsng - cgfsng.c:cgfsng_setup_limits:1667 - cgroup 'devices.allow' set to 'c 1:3 rwm'\r\n            lxc 20161014115628.520 DEBUG    lxc_cgfsng - cgfsng.c:cgfsng_setup_limits:1667 - cgroup 'devices.allow' set to 'c 1:5 rwm'\r\n            lxc 20161014115628.520 DEBUG    lxc_cgfsng - cgfsng.c:cgfsng_setup_limits:1667 - cgroup 'devices.allow' set to 'c 1:7 rwm'\r\n            lxc 20161014115628.520 DEBUG    lxc_cgfsng - cgfsng.c:cgfsng_setup_limits:1667 - cgroup 'devices.allow' set to 'c 1:8 rwm'\r\n            lxc 20161014115628.520 DEBUG    lxc_cgfsng - cgfsng.c:cgfsng_setup_limits:1667 - cgroup 'devices.allow' set to 'c 1:9 rwm'\r\n            lxc 20161014115628.520 DEBUG    lxc_cgfsng - cgfsng.c:cgfsng_setup_limits:1667 - cgroup 'devices.allow' set to 'c 5:0 rwm'\r\n            lxc 20161014115628.520 DEBUG    lxc_cgfsng - cgfsng.c:cgfsng_setup_limits:1667 - cgroup 'devices.allow' set to 'c 5:1 rwm'\r\n            lxc 20161014115628.520 DEBUG    lxc_cgfsng - cgfsng.c:cgfsng_setup_limits:1667 - cgroup 'devices.allow' set to 'c 5:2 rwm'\r\n            lxc 20161014115628.520 DEBUG    lxc_cgfsng - cgfsng.c:cgfsng_setup_limits:1667 - cgroup 'devices.allow' set to 'c 10:229 rwm'\r\n            lxc 20161014115628.520 DEBUG    lxc_cgfsng - cgfsng.c:cgfsng_setup_limits:1667 - cgroup 'devices.allow' set to 'c 10:200 rwm'\r\n            lxc 20161014115628.520 DEBUG    lxc_cgfsng - cgfsng.c:cgfsng_setup_limits:1667 - cgroup 'memory.limit_in_bytes' set to '3221225472'\r\n            lxc 20161014115628.520 DEBUG    lxc_cgfsng - cgfsng.c:cgfsng_setup_limits:1667 - cgroup 'memory.memsw.limit_in_bytes' set to '3221225472'\r\n            lxc 20161014115628.520 INFO     lxc_cgfsng - cgfsng.c:cgfsng_setup_limits:1671 - cgroup has been setup\r\n            lxc 20161014115628.573 DEBUG    lxc_conf - conf.c:lxc_assign_network:3048 - move 'eth0' to '4123923'\r\n            lxc 20161014115628.609 DEBUG    lxc_conf - conf.c:lxc_assign_network:3048 - move 'eth1' to '4123923'\r\n            lxc 20161014115628.641 DEBUG    lxc_conf - conf.c:lxc_assign_network:3048 - move 'eth2' to '4123923'\r\n            lxc 20161014115628.642 DEBUG    lxc_conf - conf.c:setup_rootfs:1215 - mounted '/var/lib/lxd/containers/tikkieondeugend/rootfs' on '/usr/lib/x86_64-linux-gnu/lxc'\r\n            lxc 20161014115628.642 INFO     lxc_conf - conf.c:setup_utsname:843 - 'tikkieondeugend' hostname has been setup\r\n            lxc 20161014115628.661 DEBUG    lxc_conf - conf.c:setup_hw_addr:2145 - mac address '00:16:3e:98:5c:62' on 'eth0' has been setup\r\n            lxc 20161014115628.661 DEBUG    lxc_conf - conf.c:setup_netdev:2372 - 'eth0' has been setup\r\n            lxc 20161014115628.677 DEBUG    lxc_conf - conf.c:setup_hw_addr:2145 - mac address '00:16:3e:f6:94:c7' on 'eth1' has been setup\r\n            lxc 20161014115628.677 DEBUG    lxc_conf - conf.c:setup_netdev:2372 - 'eth1' has been setup\r\n            lxc 20161014115628.705 DEBUG    lxc_conf - conf.c:setup_hw_addr:2145 - mac address '00:16:3e:90:ac:71' on 'eth2' has been setup\r\n            lxc 20161014115628.705 DEBUG    lxc_conf - conf.c:setup_netdev:2372 - 'eth2' has been setup\r\n            lxc 20161014115628.705 INFO     lxc_conf - conf.c:setup_network:2393 - network has been setup\r\n            lxc 20161014115628.705 INFO     lxc_conf - conf.c:mount_autodev:1072 - Mounting container /dev\r\n            lxc 20161014115628.708 INFO     lxc_conf - conf.c:mount_autodev:1095 - Mounted tmpfs onto /usr/lib/x86_64-linux-gnu/lxc/dev\r\n            lxc 20161014115628.708 INFO     lxc_conf - conf.c:mount_autodev:1113 - Mounted container /dev\r\n            lxc 20161014115628.709 DEBUG    lxc_conf - conf.c:mount_entry:1707 - mounted 'mqueue' on '/usr/lib/x86_64-linux-gnu/lxc/dev/mqueue', type 'mqueue'\r\n            lxc 20161014115628.709 DEBUG    lxc_conf - conf.c:mount_entry:1657 - remounting /dev/fuse on /usr/lib/x86_64-linux-gnu/lxc/dev/fuse to respect bind or remount options\r\n            lxc 20161014115628.709 DEBUG    lxc_conf - conf.c:mount_entry:1672 - (at remount) flags for /dev/fuse was 4098, required extra flags are 2\r\n            lxc 20161014115628.709 DEBUG    lxc_conf - conf.c:mount_entry:1707 - mounted '/dev/fuse' on '/usr/lib/x86_64-linux-gnu/lxc/dev/fuse', type 'none'\r\n            lxc 20161014115628.709 DEBUG    lxc_conf - conf.c:mount_entry:1657 - remounting /dev/net/tun on /usr/lib/x86_64-linux-gnu/lxc/dev/net/tun to respect bind or remount options\r\n            lxc 20161014115628.709 DEBUG    lxc_conf - conf.c:mount_entry:1672 - (at remount) flags for /dev/net/tun was 4098, required extra flags are 2\r\n            lxc 20161014115628.709 DEBUG    lxc_conf - conf.c:mount_entry:1707 - mounted '/dev/net/tun' on '/usr/lib/x86_64-linux-gnu/lxc/dev/net/tun', type 'none'\r\n            lxc 20161014115628.709 DEBUG    lxc_conf - conf.c:mount_entry:1657 - remounting /proc/sys/fs/binfmt_misc on /usr/lib/x86_64-linux-gnu/lxc/proc/sys/fs/binfmt_misc to respect bind or remount options\r\n            lxc 20161014115628.709 DEBUG    lxc_conf - conf.c:mount_entry:1672 - (at remount) flags for /proc/sys/fs/binfmt_misc was 4096, required extra flags are 0\r\n            lxc 20161014115628.709 DEBUG    lxc_conf - conf.c:mount_entry:1681 - mountflags already was 20480, skipping remount\r\n            lxc 20161014115628.709 DEBUG    lxc_conf - conf.c:mount_entry:1707 - mounted '/proc/sys/fs/binfmt_misc' on '/usr/lib/x86_64-linux-gnu/lxc/proc/sys/fs/binfmt_misc', type 'none'\r\n            lxc 20161014115628.709 DEBUG    lxc_conf - conf.c:mount_entry:1657 - remounting /sys/firmware/efi/efivars on /usr/lib/x86_64-linux-gnu/lxc/sys/firmware/efi/efivars to respect bind or remount options\r\n            lxc 20161014115628.709 DEBUG    lxc_conf - conf.c:mount_entry:1672 - (at remount) flags for /sys/firmware/efi/efivars was 4110, required extra flags are 14\r\n            lxc 20161014115628.709 DEBUG    lxc_conf - conf.c:mount_entry:1707 - mounted '/sys/firmware/efi/efivars' on '/usr/lib/x86_64-linux-gnu/lxc/sys/firmware/efi/efivars', type 'none'\r\n            lxc 20161014115628.709 DEBUG    lxc_conf - conf.c:mount_entry:1657 - remounting /sys/fs/fuse/connections on /usr/lib/x86_64-linux-gnu/lxc/sys/fs/fuse/connections to respect bind or remount options\r\n            lxc 20161014115628.709 DEBUG    lxc_conf - conf.c:mount_entry:1672 - (at remount) flags for /sys/fs/fuse/connections was 4096, required extra flags are 0\r\n            lxc 20161014115628.709 DEBUG    lxc_conf - conf.c:mount_entry:1681 - mountflags already was 20480, skipping remount\r\n            lxc 20161014115628.709 DEBUG    lxc_conf - conf.c:mount_entry:1707 - mounted '/sys/fs/fuse/connections' on '/usr/lib/x86_64-linux-gnu/lxc/sys/fs/fuse/connections', type 'none'\r\n            lxc 20161014115628.709 DEBUG    lxc_conf - conf.c:mount_entry:1657 - remounting /sys/fs/pstore on /usr/lib/x86_64-linux-gnu/lxc/sys/fs/pstore to respect bind or remount options\r\n            lxc 20161014115628.709 DEBUG    lxc_conf - conf.c:mount_entry:1672 - (at remount) flags for /sys/fs/pstore was 4110, required extra flags are 14\r\n            lxc 20161014115628.709 DEBUG    lxc_conf - conf.c:mount_entry:1707 - mounted '/sys/fs/pstore' on '/usr/lib/x86_64-linux-gnu/lxc/sys/fs/pstore', type 'none'\r\n            lxc 20161014115628.709 DEBUG    lxc_conf - conf.c:mount_entry:1657 - remounting /sys/kernel/debug on /usr/lib/x86_64-linux-gnu/lxc/sys/kernel/debug to respect bind or remount options\r\n            lxc 20161014115628.709 DEBUG    lxc_conf - conf.c:mount_entry:1672 - (at remount) flags for /sys/kernel/debug was 4096, required extra flags are 0\r\n            lxc 20161014115628.709 DEBUG    lxc_conf - conf.c:mount_entry:1681 - mountflags already was 20480, skipping remount\r\n            lxc 20161014115628.709 DEBUG    lxc_conf - conf.c:mount_entry:1707 - mounted '/sys/kernel/debug' on '/usr/lib/x86_64-linux-gnu/lxc/sys/kernel/debug', type 'none'\r\n            lxc 20161014115628.709 DEBUG    lxc_conf - conf.c:mount_entry:1657 - remounting /sys/kernel/security on /usr/lib/x86_64-linux-gnu/lxc/sys/kernel/security to respect bind or remount options\r\n            lxc 20161014115628.709 DEBUG    lxc_conf - conf.c:mount_entry:1672 - (at remount) flags for /sys/kernel/security was 4110, required extra flags are 14\r\n            lxc 20161014115628.709 DEBUG    lxc_conf - conf.c:mount_entry:1707 - mounted '/sys/kernel/security' on '/usr/lib/x86_64-linux-gnu/lxc/sys/kernel/security', type 'none'\r\n            lxc 20161014115628.709 DEBUG    lxc_conf - conf.c:mount_entry:1657 - remounting /var/lib/lxd/devlxd on /usr/lib/x86_64-linux-gnu/lxc/dev/lxd to respect bind or remount options\r\n            lxc 20161014115628.709 DEBUG    lxc_conf - conf.c:mount_entry:1672 - (at remount) flags for /var/lib/lxd/devlxd was 3072, required extra flags are 0\r\n            lxc 20161014115628.709 DEBUG    lxc_conf - conf.c:mount_entry:1681 - mountflags already was 4096, skipping remount\r\n            lxc 20161014115628.709 DEBUG    lxc_conf - conf.c:mount_entry:1707 - mounted '/var/lib/lxd/devlxd' on '/usr/lib/x86_64-linux-gnu/lxc/dev/lxd', type 'none'\r\n            lxc 20161014115628.709 DEBUG    lxc_conf - conf.c:mount_entry:1657 - remounting /var/lib/lxd/shmounts/tikkieondeugend on /usr/lib/x86_64-linux-gnu/lxc/dev/.lxd-mounts to respect bind or remount options\r\n            lxc 20161014115628.709 DEBUG    lxc_conf - conf.c:mount_entry:1672 - (at remount) flags for /var/lib/lxd/shmounts/tikkieondeugend was 3072, required extra flags are 0\r\n            lxc 20161014115628.709 DEBUG    lxc_conf - conf.c:mount_entry:1681 - mountflags already was 4096, skipping remount\r\n            lxc 20161014115628.709 DEBUG    lxc_conf - conf.c:mount_entry:1707 - mounted '/var/lib/lxd/shmounts/tikkieondeugend' on '/usr/lib/x86_64-linux-gnu/lxc/dev/.lxd-mounts', type 'none'\r\n            lxc 20161014115628.709 INFO     lxc_conf - conf.c:mount_file_entries:1926 - mount points have been setup\r\n            lxc 20161014115628.709 INFO     lxc_conf - conf.c:run_script_argv:367 - Executing script '/usr/share/lxcfs/lxc.mount.hook' for container 'tikkieondeugend', config section 'lxc'\r\n            lxc 20161014115628.719 INFO     lxc_conf - conf.c:fill_autodev:1141 - Creating initial consoles under container /dev\r\n            lxc 20161014115628.719 INFO     lxc_conf - conf.c:fill_autodev:1152 - Populating container /dev\r\n            lxc 20161014115628.719 INFO     lxc_conf - conf.c:fill_autodev:1189 - Populated container /dev\r\n            lxc 20161014115628.719 INFO     lxc_conf - conf.c:setup_dev_console:1437 - console has been setup\r\n            lxc 20161014115628.719 INFO     lxc_utils - utils.c:mount_proc_if_needed:1726 - I am 1, /proc/self points to '1'\r\n            lxc 20161014115628.737 DEBUG    lxc_conf - conf.c:setup_rootfs_pivot_root:1050 - pivot_root syscall to '/usr/lib/x86_64-linux-gnu/lxc' successful\r\n            lxc 20161014115628.742 INFO     lxc_conf - conf.c:setup_tty:995 - 0 tty(s) has been setup\r\n            lxc 20161014115628.742 INFO     lxc_conf - conf.c:setup_personality:1393 - set personality to '0x0'\r\n            lxc 20161014115628.742 DEBUG    lxc_conf - conf.c:setup_caps:2056 - drop capability 'mac_admin' (33)\r\n            lxc 20161014115628.742 DEBUG    lxc_conf - conf.c:setup_caps:2056 - drop capability 'mac_override' (32)\r\n            lxc 20161014115628.742 DEBUG    lxc_conf - conf.c:setup_caps:2056 - drop capability 'sys_time' (25)\r\n            lxc 20161014115628.742 DEBUG    lxc_conf - conf.c:setup_caps:2056 - drop capability 'sys_module' (16)\r\n            lxc 20161014115628.742 DEBUG    lxc_conf - conf.c:setup_caps:2056 - drop capability 'sys_rawio' (17)\r\n            lxc 20161014115628.742 DEBUG    lxc_conf - conf.c:setup_caps:2065 - capabilities have been setup\r\n            lxc 20161014115628.742 NOTICE   lxc_conf - conf.c:lxc_setup:3839 - 'tikkieondeugend' is setup.\r\n            lxc 20161014115628.742 DEBUG    lxc_cgfsng - cgfsng.c:cgfsng_setup_limits:1667 - cgroup 'devices.deny' set to 'a'\r\n            lxc 20161014115628.742 DEBUG    lxc_cgfsng - cgfsng.c:cgfsng_setup_limits:1667 - cgroup 'devices.allow' set to 'b *:* m'\r\n            lxc 20161014115628.742 DEBUG    lxc_cgfsng - cgfsng.c:cgfsng_setup_limits:1667 - cgroup 'devices.allow' set to 'c *:* m'\r\n            lxc 20161014115628.742 DEBUG    lxc_cgfsng - cgfsng.c:cgfsng_setup_limits:1667 - cgroup 'devices.allow' set to 'c 136:* rwm'\r\n            lxc 20161014115628.742 DEBUG    lxc_cgfsng - cgfsng.c:cgfsng_setup_limits:1667 - cgroup 'devices.allow' set to 'c 1:3 rwm'\r\n            lxc 20161014115628.742 DEBUG    lxc_cgfsng - cgfsng.c:cgfsng_setup_limits:1667 - cgroup 'devices.allow' set to 'c 1:5 rwm'\r\n            lxc 20161014115628.742 DEBUG    lxc_cgfsng - cgfsng.c:cgfsng_setup_limits:1667 - cgroup 'devices.allow' set to 'c 1:7 rwm'\r\n            lxc 20161014115628.742 DEBUG    lxc_cgfsng - cgfsng.c:cgfsng_setup_limits:1667 - cgroup 'devices.allow' set to 'c 1:8 rwm'\r\n            lxc 20161014115628.742 DEBUG    lxc_cgfsng - cgfsng.c:cgfsng_setup_limits:1667 - cgroup 'devices.allow' set to 'c 1:9 rwm'\r\n            lxc 20161014115628.742 DEBUG    lxc_cgfsng - cgfsng.c:cgfsng_setup_limits:1667 - cgroup 'devices.allow' set to 'c 5:0 rwm'\r\n            lxc 20161014115628.742 DEBUG    lxc_cgfsng - cgfsng.c:cgfsng_setup_limits:1667 - cgroup 'devices.allow' set to 'c 5:1 rwm'\r\n            lxc 20161014115628.742 DEBUG    lxc_cgfsng - cgfsng.c:cgfsng_setup_limits:1667 - cgroup 'devices.allow' set to 'c 5:2 rwm'\r\n            lxc 20161014115628.742 DEBUG    lxc_cgfsng - cgfsng.c:cgfsng_setup_limits:1667 - cgroup 'devices.allow' set to 'c 10:229 rwm'\r\n            lxc 20161014115628.742 DEBUG    lxc_cgfsng - cgfsng.c:cgfsng_setup_limits:1667 - cgroup 'devices.allow' set to 'c 10:200 rwm'\r\n            lxc 20161014115628.742 DEBUG    lxc_cgfsng - cgfsng.c:cgfsng_setup_limits:1667 - cgroup 'memory.limit_in_bytes' set to '3221225472'\r\n            lxc 20161014115628.742 DEBUG    lxc_cgfsng - cgfsng.c:cgfsng_setup_limits:1667 - cgroup 'memory.memsw.limit_in_bytes' set to '3221225472'\r\n            lxc 20161014115628.742 INFO     lxc_cgfsng - cgfsng.c:cgfsng_setup_limits:1671 - cgroup has been setup\r\n            lxc 20161014115628.742 INFO     lxc_apparmor - lsm/apparmor.c:apparmor_process_label_set:229 - apparmor profile unchanged\r\n            lxc 20161014115628.742 NOTICE   lxc_start - start.c:start:1435 - exec'ing '/sbin/init'\r\n            lxc 20161014115628.745 NOTICE   lxc_start - start.c:post_start:1446 - '/sbin/init' started with pid '4123923'\r\n            lxc 20161014115628.745 WARN     lxc_start - start.c:signal_handler:337 - invalid pid for SIGCHLD\r\n            lxc 20161014115628.745 DEBUG    lxc_commands - commands.c:lxc_cmd_handler:893 - peer has disconnected\r\n            lxc 20161014115628.746 DEBUG    lxc_commands - commands.c:lxc_cmd_handler:893 - peer has disconnected\r\n            lxc 20161014115628.746 DEBUG    lxc_commands - commands.c:lxc_cmd_get_state:579 - 'tikkieondeugend' is in 'RUNNING' state\r\n            lxc 20161014115629.455 DEBUG    lxc_commands - commands.c:lxc_cmd_handler:893 - peer has disconnected\r\n            lxc 20161014115629.455 DEBUG    lxc_commands - commands.c:lxc_cmd_handler:893 - peer has disconnected\r\n```\r\n - [ ] main daemon log (/var/log/lxd.log)\r\n - [ ] output of the client with --debug\r\n - [ ] output of the daemon with --debug\r\n"}}
{"actor":{"display_login":"stgraber"}}