{"action":"created","issue":{"url":"https://api.github.com/repos/lxc/lxd/issues/4531","repository_url":"https://api.github.com/repos/lxc/lxd","labels_url":"https://api.github.com/repos/lxc/lxd/issues/4531/labels{/name}","comments_url":"https://api.github.com/repos/lxc/lxd/issues/4531/comments","events_url":"https://api.github.com/repos/lxc/lxd/issues/4531/events","html_url":"https://github.com/lxc/lxd/issues/4531","id":319876190,"number":4531,"title":"/dev/tty: no such device or address","user":{"login":"dokime7","id":5148211,"avatar_url":"https://avatars2.githubusercontent.com/u/5148211?v=4","gravatar_id":"","url":"https://api.github.com/users/dokime7","html_url":"https://github.com/dokime7","followers_url":"https://api.github.com/users/dokime7/followers","following_url":"https://api.github.com/users/dokime7/following{/other_user}","gists_url":"https://api.github.com/users/dokime7/gists{/gist_id}","starred_url":"https://api.github.com/users/dokime7/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dokime7/subscriptions","organizations_url":"https://api.github.com/users/dokime7/orgs","repos_url":"https://api.github.com/users/dokime7/repos","events_url":"https://api.github.com/users/dokime7/events{/privacy}","received_events_url":"https://api.github.com/users/dokime7/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":15,"created_at":"2018-05-03T11:07:18Z","updated_at":"2018-05-03T16:54:47Z","closed_at":null,"author_association":"NONE","body":"# Required information\r\n\r\n * Distribution: Ubuntu\r\n * Distribution version: 18.04 LTS\r\n * The output of \"lxc info\" or if that fails:\r\n```\r\nconfig: {}\r\napi_extensions:\r\n- storage_zfs_remove_snapshots\r\n- container_host_shutdown_timeout\r\n- container_stop_priority\r\n- container_syscall_filtering\r\n- auth_pki\r\n- container_last_used_at\r\n- etag\r\n- patch\r\n- usb_devices\r\n- https_allowed_credentials\r\n- image_compression_algorithm\r\n- directory_manipulation\r\n- container_cpu_time\r\n- storage_zfs_use_refquota\r\n- storage_lvm_mount_options\r\n- network\r\n- profile_usedby\r\n- container_push\r\n- container_exec_recording\r\n- certificate_update\r\n- container_exec_signal_handling\r\n- gpu_devices\r\n- container_image_properties\r\n- migration_progress\r\n- id_map\r\n- network_firewall_filtering\r\n- network_routes\r\n- storage\r\n- file_delete\r\n- file_append\r\n- network_dhcp_expiry\r\n- storage_lvm_vg_rename\r\n- storage_lvm_thinpool_rename\r\n- network_vlan\r\n- image_create_aliases\r\n- container_stateless_copy\r\n- container_only_migration\r\n- storage_zfs_clone_copy\r\n- unix_device_rename\r\n- storage_lvm_use_thinpool\r\n- storage_rsync_bwlimit\r\n- network_vxlan_interface\r\n- storage_btrfs_mount_options\r\n- entity_description\r\n- image_force_refresh\r\n- storage_lvm_lv_resizing\r\n- id_map_base\r\n- file_symlinks\r\n- container_push_target\r\n- network_vlan_physical\r\n- storage_images_delete\r\n- container_edit_metadata\r\n- container_snapshot_stateful_migration\r\n- storage_driver_ceph\r\n- storage_ceph_user_name\r\n- resource_limits\r\n- storage_volatile_initial_source\r\n- storage_ceph_force_osd_reuse\r\n- storage_block_filesystem_btrfs\r\n- resources\r\n- kernel_limits\r\n- storage_api_volume_rename\r\n- macaroon_authentication\r\n- network_sriov\r\n- console\r\n- restrict_devlxd\r\n- migration_pre_copy\r\n- infiniband\r\n- maas_network\r\n- devlxd_events\r\n- proxy\r\n- network_dhcp_gateway\r\n- file_get_symlink\r\n- network_leases\r\n- unix_device_hotplug\r\n- storage_api_local_volume_handling\r\n- operation_description\r\n- clustering\r\n- event_lifecycle\r\n- storage_api_remote_volume_handling\r\n- nvidia_runtime\r\napi_status: stable\r\napi_version: \"1.0\"\r\nauth: trusted\r\npublic: false\r\nauth_methods:\r\n- tls\r\nenvironment:\r\n  addresses: []\r\n  architectures:\r\n  - x86_64\r\n  - i686\r\n  certificate: |\r\n    -----BEGIN CERTIFICATE-----\r\n######\r\n    -----END CERTIFICATE-----\r\n  certificate_fingerprint: d2964d844ooir0f3dc965b6a48ad7fd3b8e01372f28ea6eb676bb6289087b0b1\r\n  driver: lxc\r\n  driver_version: 3.0.0\r\n  kernel: Linux\r\n  kernel_architecture: x86_64\r\n  kernel_version: 4.15.0-20-generic\r\n  server: lxd\r\n  server_pid: 14676\r\n  server_version: 3.0.0\r\n  storage: btrfs\r\n  storage_version: 4.15.1\r\n  server_clustered: false\r\n  server_name: emos1\r\n```\r\n\r\n   * Kernel version: 4.15.0-20-generic #21-Ubuntu SMP x86_64\r\n   * LXC version: 3.0.0\r\n   * LXD version: 3.0.0\r\n   * Storage backend in use: btrfs\r\n\r\n# Issue description\r\n\r\nI'm trying to run https://mailcow.email/ docker in lxd container and I get this error :\r\n`ERROR: for netfilter-mailcow  Cannot start service netfilter-mailcow: OCI runtime create failed: container_linux.go:348: starting container process caused \"process_linux.go:402: container init caused \\\"rootfs_linux.go:70: creating device nodes caused \\\\\\\"open /var/lib/docker/btrfs/subvolumes/77cc0dd8362cc94816957585d98e7ca50dfa2ebcfeceea2f7cb47ea79a7ee7e7/dev/tty: no such device or address\\\\\\\"\\\"\": unknown`\r\n\r\n# Steps to reproduce\r\n\r\n 1. lxc launch ubuntu:18.04 docker1 -c security.nesting=true\r\nInto docker1 container :\r\n 2. apt-get install docker.io (or install docker-ce from docker)\r\n 3. git clone https://github.com/mailcow/mailcow-dockerized\r\n 4. ./generate_config.sh\r\n 5. docker-compose up\r\n\r\n# Information to attach\r\n\r\n - [ ] Container configuration (`lxc config show NAME --expanded`)\r\n```\r\narchitecture: x86_64\r\nconfig:\r\n  image.architecture: amd64\r\n  image.description: ubuntu 18.04 LTS amd64 (release) (20180426.2)\r\n  image.label: release\r\n  image.os: ubuntu\r\n  image.release: bionic\r\n  image.serial: \"20180426.2\"\r\n  image.version: \"18.04\"\r\n  linux.kernel_modules: bridge,br_netfilter,ip_tables,ip6_tables,ip_vs,netlink_diag,nf_nat,overlay,xt_conntrack\r\n  security.nesting: \"true\"\r\n  volatile.base_image: b36ec647e374da4816104a98807633a2cc387488083d3776557081c4d0333618\r\n  volatile.eth0.hwaddr: 00:16:3e:1b:5d:93\r\n  volatile.idmap.base: \"0\"\r\n  volatile.idmap.next: '[{\"Isuid\":true,\"Isgid\":false,\"Hostid\":100000,\"Nsid\":0,\"Maprange\":65536},{\"Isuid\":false,\"Isgid\":true,\"Hostid\":100000,\"Nsid\":0,\"Maprange\":65536}]'\r\n  volatile.last_state.idmap: '[{\"Isuid\":true,\"Isgid\":false,\"Hostid\":100000,\"Nsid\":0,\"Maprange\":65536},{\"Isuid\":false,\"Isgid\":true,\"Hostid\":100000,\"Nsid\":0,\"Maprange\":65536}]'\r\n  volatile.last_state.power: RUNNING\r\ndevices:\r\n  eth0:\r\n    name: eth0\r\n    nictype: bridged\r\n    parent: lxdbr0\r\n    type: nic\r\n  root:\r\n    path: /\r\n    pool: default\r\n    type: disk\r\nephemeral: false\r\nprofiles:\r\n- default\r\nstateful: false\r\ndescription: \"\"\r\n```\r\n\r\n- Output of docker-compose up :\r\n$ docker-compose up\r\n```\r\nRemoving mailcowdockerized_dockerapi-mailcow_1\r\nmailcowdockerized_clamd-mailcow_1 is up-to-date\r\nmailcowdockerized_memcached-mailcow_1 is up-to-date\r\nmailcowdockerized_sogo-mailcow_1 is up-to-date\r\nStarting mailcowdockerized_ipv6nat_1 ... \r\nmailcowdockerized_mysql-mailcow_1 is up-to-date\r\nmailcowdockerized_unbound-mailcow_1 is up-to-date\r\nRecreating a80fe0eeb0b4_mailcowdockerized_dockerapi-mailcow_1 ... \r\nmailcowdockerized_watchdog-mailcow_1 is up-to-date\r\nmailcowdockerized_redis-mailcow_1 is up-to-date\r\nmailcowdockerized_postfix-mailcow_1 is up-to-date\r\nmailcowdockerized_dovecot-mailcow_1 is up-to-date\r\nmailcowdockerized_php-fpm-mailcow_1 is up-to-date\r\nmailcowdockerized_nginx-mailcow_1 is up-to-date\r\nStarting mailcowdockerized_ipv6nat_1                          ... error\r\nmailcowdockerized_rspamd-mailcow_1 is up-to-date\r\nmailcowdockerized_acme-mailcow_1 is up-to-date\r\n\r\nERROR: for mailcowdockerized_ipv6nat_1  Cannot start service ipv6nat: OCI runtime create failed: container_linux.go:348: starting container process caused \"process_linux.go:402: container init caused \\\"rootfs_linux.go:70: creating device nodes caused \\\\\\\"open /var/lib/docStarting 86142ef4fcb0_mailcowdockerized_netfilter-mailcow_1   ... error\r\n\r\nRecreating a80fe0eeb0b4_mailcowdockerized_dockerapi-mailcow_1 ... error\r\nodes caused \\\\\\\"open /var/lib/docker/btrfs/subvolumes/77cc0dd8362cc94816957585d98e7ca50dfa2ebcfeceea2f7cb47ea79a7ee7e7/dev/tty: no such device or address\\\\\\\"\\\"\": unknown\r\n\r\nERROR: for a80fe0eeb0b4_mailcowdockerized_dockerapi-mailcow_1  Cannot start service dockerapi-mailcow: OCI runtime create failed: container_linux.go:348: starting container process caused \"process_linux.go:301: running exec setns process for init caused \\\"exit status 10\\\"\": unknown\r\n\r\nERROR: for ipv6nat  Cannot start service ipv6nat: OCI runtime create failed: container_linux.go:348: starting container process caused \"process_linux.go:402: container init caused \\\"rootfs_linux.go:70: creating device nodes caused \\\\\\\"open /var/lib/docker/btrfs/subvolumes/7d47eb7631eb7d4fa8a9e675107d6c54ed4a03852c4ce988c354e73d48023afd/dev/tty: no such device or address\\\\\\\"\\\"\": unknown\r\n\r\nERROR: for netfilter-mailcow  Cannot start service netfilter-mailcow: OCI runtime create failed: container_linux.go:348: starting container process caused \"process_linux.go:402: container init caused \\\"rootfs_linux.go:70: creating device nodes caused \\\\\\\"open /var/lib/docker/btrfs/subvolumes/77cc0dd8362cc94816957585d98e7ca50dfa2ebcfeceea2f7cb47ea79a7ee7e7/dev/tty: no such device or address\\\\\\\"\\\"\": unknown\r\n\r\nERROR: for dockerapi-mailcow  Cannot start service dockerapi-mailcow: OCI runtime create failed: container_linux.go:348: starting container process caused \"process_linux.go:301: running exec setns process for init caused \\\"exit status 10\\\"\": unknown\r\nERROR: Encountered errors while bringing up the project.\r\n```\r\n"},"comment":{"url":"https://api.github.com/repos/lxc/lxd/issues/comments/386362977","html_url":"https://github.com/lxc/lxd/issues/4531#issuecomment-386362977","issue_url":"https://api.github.com/repos/lxc/lxd/issues/4531","id":386362977,"user":{"login":"dokime7","id":5148211,"avatar_url":"https://avatars2.githubusercontent.com/u/5148211?v=4","gravatar_id":"","url":"https://api.github.com/users/dokime7","html_url":"https://github.com/dokime7","followers_url":"https://api.github.com/users/dokime7/followers","following_url":"https://api.github.com/users/dokime7/following{/other_user}","gists_url":"https://api.github.com/users/dokime7/gists{/gist_id}","starred_url":"https://api.github.com/users/dokime7/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dokime7/subscriptions","organizations_url":"https://api.github.com/users/dokime7/orgs","repos_url":"https://api.github.com/users/dokime7/repos","events_url":"https://api.github.com/users/dokime7/events{/privacy}","received_events_url":"https://api.github.com/users/dokime7/received_events","type":"User","site_admin":false},"created_at":"2018-05-03T16:54:47Z","updated_at":"2018-05-03T16:54:47Z","author_association":"NONE","body":"It's curious because other docker containers start well (on mailcow) and we found /dev/tty inside."}}
{"actor":{"display_login":"dokime7"}}