{"action":"created","issue":{"url":"https://api.github.com/repos/checkpoint-restore/criu/issues/444","repository_url":"https://api.github.com/repos/checkpoint-restore/criu","labels_url":"https://api.github.com/repos/checkpoint-restore/criu/issues/444/labels{/name}","comments_url":"https://api.github.com/repos/checkpoint-restore/criu/issues/444/comments","events_url":"https://api.github.com/repos/checkpoint-restore/criu/issues/444/events","html_url":"https://github.com/checkpoint-restore/criu/issues/444","id":296191828,"number":444,"title":"CRIU/apparmor error during container migration","user":{"login":"ibrahimagha","id":33454213,"avatar_url":"https://avatars2.githubusercontent.com/u/33454213?v=4","gravatar_id":"","url":"https://api.github.com/users/ibrahimagha","html_url":"https://github.com/ibrahimagha","followers_url":"https://api.github.com/users/ibrahimagha/followers","following_url":"https://api.github.com/users/ibrahimagha/following{/other_user}","gists_url":"https://api.github.com/users/ibrahimagha/gists{/gist_id}","starred_url":"https://api.github.com/users/ibrahimagha/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ibrahimagha/subscriptions","organizations_url":"https://api.github.com/users/ibrahimagha/orgs","repos_url":"https://api.github.com/users/ibrahimagha/repos","events_url":"https://api.github.com/users/ibrahimagha/events{/privacy}","received_events_url":"https://api.github.com/users/ibrahimagha/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2018-02-11T13:54:47Z","updated_at":"2018-03-15T00:30:27Z","closed_at":null,"author_association":"NONE","body":"hi guys,\r\nI am trying to migreate containers between 2 lxd hosts, the container is hosting squid, but when I try to live migrate them it gives me this error\r\nsudo lxc move squid me:\r\nerror: Failed container creation:\r\n - https://192.168.2.233:8443: migration restore failed\r\n(00.038247) Warn  (criu/apparmor.c:401): binary rewriting of apparmor policies not supported right now, not renaming usr.lib.connman.scripts.dhclient-script.2 to \r\n(00.038278) Warn  (criu/apparmor.c:401): binary rewriting of apparmor policies not supported right now, not renaming usr.lib.NetworkManager.nm-dhcp-client.action.1 to \r\n(00.038281) Warn  (criu/apparmor.c:401): binary rewriting of apparmor policies not supported right now, not renaming sbin.dhclient.0 to \r\n(00.038300) Warn  (criu/apparmor.c:421): apparmor namespace /sys/kernel/security/apparmor/policy/namespaces/lxd-squid_<var-lib-lxd> already exists, restoring into it\r\n(00.042309) Error (criu/apparmor.c:460): write AA policy failed: Protocol error\r\n(00.042766) Error (criu/apparmor.c:479): failed to restore aa namespace, worker exited: 256\r\n - https://192.168.56.1:8443: x509: certificate is valid for livetest-VirtualBox, not live-VirtualBox\r\n\r\nI tried to stop Apparmor in the container with those commands \r\nprintf \"mount fstype=nfs,\\nmount fstype=nfs4,\" | lxc config set squid raw.apparmor -\r\nlxc config set squid raw.lxc \"lxc.aa_profile=unconfined\"\r\n\r\nbut still shows the same error.\r\nany ideas ? \r\n"},"comment":{"url":"https://api.github.com/repos/checkpoint-restore/criu/issues/comments/373220088","html_url":"https://github.com/checkpoint-restore/criu/issues/444#issuecomment-373220088","issue_url":"https://api.github.com/repos/checkpoint-restore/criu/issues/444","id":373220088,"user":{"login":"avagin","id":1049830,"avatar_url":"https://avatars1.githubusercontent.com/u/1049830?v=4","gravatar_id":"","url":"https://api.github.com/users/avagin","html_url":"https://github.com/avagin","followers_url":"https://api.github.com/users/avagin/followers","following_url":"https://api.github.com/users/avagin/following{/other_user}","gists_url":"https://api.github.com/users/avagin/gists{/gist_id}","starred_url":"https://api.github.com/users/avagin/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/avagin/subscriptions","organizations_url":"https://api.github.com/users/avagin/orgs","repos_url":"https://api.github.com/users/avagin/repos","events_url":"https://api.github.com/users/avagin/events{/privacy}","received_events_url":"https://api.github.com/users/avagin/received_events","type":"User","site_admin":false},"created_at":"2018-03-15T00:30:26Z","updated_at":"2018-03-15T00:30:26Z","author_association":"OWNER","body":"@brauner, could you help us with this issue? Do you have non-upstream patches for criu?"}}
{"actor":{"display_login":"avagin"}}