RPM spec files for building lxc-3 on Fedora COPR
License: MIT License
Contains spec files to build the latest stable LXC/LXD RPMs and associated packages in Copr using tito and git-annex.
| Spec File | Copr Build Status |
|---|---|
| lxc.spec |  |
| lxcfs.spec |  |
| lxc-templates-extra.spec |  |
| lxd.spec |  |
| python2-lxc.spec |  |
| python3-lxc.spec |  |
| rubygem-ruby-lxc.spec |  |
| vagrant-lxc.spec |  |
| distrobuilder.spec |  |
License: MIT
Building the rubygem-ruby-lxc RPM with mock for EPEL 7 fails with:
Building target platforms: x86_64
Building for target x86_64
Executing(%prep): /bin/sh -e /var/tmp/rpm-tmp.ti81iR
+ umask 022
+ cd /builddir/build/BUILD
+ gem unpack /builddir/build/SOURCES/ruby-lxc-1.2.2.gem
Unpacked gem: '/builddir/build/BUILD/ruby-lxc-1.2.2'
+ cd /builddir/build/BUILD
+ cd ruby-lxc-1.2.2
+ /usr/bin/chmod -Rf a+rX,u+w,g-w,o-w .
+ echo 'Patch #0 (ruby-lxc-1.2.2-Fix-build-with-LXC-3.0.patch):'
Patch #0 (ruby-lxc-1.2.2-Fix-build-with-LXC-3.0.patch):
+ /usr/bin/cat /builddir/build/SOURCES/ruby-lxc-1.2.2-Fix-build-with-LXC-3.0.patch
+ /usr/bin/patch -p1 --fuzz=0
patching file ext/lxc/lxc.c
+ gem spec /builddir/build/SOURCES/ruby-lxc-1.2.2.gem -l --ruby
+ exit 0
Executing(%build): /bin/sh -e /var/tmp/rpm-tmp.hBK7mN
+ umask 022
+ cd /builddir/build/BUILD
+ cd ruby-lxc-1.2.2
+ gem build ruby-lxc.gemspec
WARNING: licenses is empty
Successfully built RubyGem
Name: ruby-lxc
Version: 1.2.2
File: ruby-lxc-1.2.2.gem
+ mkdir -p ./usr/share/gems
+ CONFIGURE_ARGS='--with-cflags='\''-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m$
4 -mtune=generic'\'' '
+ gem install -V --local --install-dir ./usr/share/gems --bindir ./usr/bin --force --document=ri,rdoc ruby-lxc-1.2.2.gem
Installing gem ruby-lxc-1.2.2
/builddir/build/BUILD/ruby-lxc-1.2.2/usr/share/gems/gems/ruby-lxc-1.2.2/ext/lxc/extconf.rb
/builddir/build/BUILD/ruby-lxc-1.2.2/usr/share/gems/gems/ruby-lxc-1.2.2/ext/lxc/lxc.c
/builddir/build/BUILD/ruby-lxc-1.2.2/usr/share/gems/gems/ruby-lxc-1.2.2/lib/lxc.rb
/builddir/build/BUILD/ruby-lxc-1.2.2/usr/share/gems/gems/ruby-lxc-1.2.2/lib/lxc/version.rb
Building native extensions. This could take a while...
/usr/bin/ruby extconf.rb
checking for lxc_container_new() in -llxc... yes
checking for lxc/lxccontainer.h... yes
checking for rb_thread_call_without_gvl()... yes
checking for rb_thread_blocking_region()... yes
creating Makefile
make "DESTDIR="
gcc -I. -I/usr/include -I/usr/include/ruby/backward -I/usr/include -I. -DHAVE_LXC_LXCCONTAINER_H -DHAVE_RB_THREAD_CALL_WITHOUT_GVL -DHAVE_RB_THREAD_CALL_WITHOUT_GVL -DHA$
E_RB_THREAD_BLOCKING_REGION -DHAVE_RB_THREAD_BLOCKING_REGION -fPIC -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer$
size=4 -grecord-gcc-switches -m64 -mtune=generic -Wall -m64 -o lxc.o -c lxc.c
rm -f lxc.so
gcc -shared -o lxc.so lxc.o -L. -L/usr/lib64 -L. -Wl,-z,relro -fstack-protector -rdynamic -Wl,-export-dynamic -m64 -lruby -llxc -lpthread -lrt -ldl -lcrypt -lm -lc
make "DESTDIR=" install
/usr/bin/mkdir -p ./.gem.20180608-27-1fjh1zt/lxc
exit > .RUBYARCHDIR.time
/usr/bin/install -c -m 0755 lxc.so ./.gem.20180608-27-1fjh1zt/lxc
unable to convert "\xC0" from ASCII-8BIT to UTF-8 for lib/lxc/lxc.so, skipping
Successfully installed ruby-lxc-1.2.2
Parsing documentation for ruby-lxc-1.2.2
Installing ri documentation for ruby-lxc-1.2.2
Installing darkfish documentation for ruby-lxc-1.2.2
1 gem installed
+ exit 0
Executing(%install): /bin/sh -e /var/tmp/rpm-tmp.LJdlmO
+ umask 022
+ cd /builddir/build/BUILD
+ '[' /builddir/build/BUILDROOT/rubygem-ruby-lxc-1.2.2-0.1.el7.x86_64 '!=' / ']'
+ rm -rf /builddir/build/BUILDROOT/rubygem-ruby-lxc-1.2.2-0.1.el7.x86_64
++ dirname /builddir/build/BUILDROOT/rubygem-ruby-lxc-1.2.2-0.1.el7.x86_64
+ mkdir -p /builddir/build/BUILDROOT
+ mkdir /builddir/build/BUILDROOT/rubygem-ruby-lxc-1.2.2-0.1.el7.x86_64
+ cd ruby-lxc-1.2.2
+ mkdir -p /builddir/build/BUILDROOT/rubygem-ruby-lxc-1.2.2-0.1.el7.x86_64/usr/share/gems
+ cp -a ./usr/share/gems/build_info ./usr/share/gems/cache ./usr/share/gems/doc ./usr/share/gems/gems ./usr/share/gems/specifications /builddir/build/BUILDROOT/rubygem-ru
by-lxc-1.2.2-0.1.el7.x86_64/usr/share/gems/
+ mkdir -p /builddir/build/BUILDROOT/rubygem-ruby-lxc-1.2.2-0.1.el7.x86_64/usr/lib64/gems/ruby/ruby-lxc-1.2.2
+ cp -a ./usr/lib64/gems/ruby/ruby-lxc-1.2.2/gem.build_complete ./usr/lib64/gems/ruby/ruby-lxc-1.2.2/lxc /builddir/build/BUILDROOT/rubygem-ruby-lxc-1.2.2-0.1.el7.x86_64/u
sr/lib64/gems/ruby/ruby-lxc-1.2.2/
cp: cannot stat './usr/lib64/gems/ruby/ruby-lxc-1.2.2/gem.build_complete': No such file or directory
cp: cannot stat './usr/lib64/gems/ruby/ruby-lxc-1.2.2/lxc': No such file or directory
error: Bad exit status from /var/tmp/rpm-tmp.LJdlmO (%install)
RPM build errors:
Bad exit status from /var/tmp/rpm-tmp.LJdlmO (%install)
ERROR: Exception(SRPMS/rubygem-ruby-lxc-1.2.2-0.1.el7.src.rpm) Config(epel-7-x86_64) 0 minutes 48 seconds
The spec file was originally created with gem2rpm on Fedora 27 (ruby-2.4.4-88.fc27) and then manually adjusted to correctly manage the shared library and its dependencies. The EPEL 7 build environment still runs ruby-2.0.0.648-33.el7_4.
The recent update to lxc-libs-3.1.0-0.1 in the ganto-lxc3 COPR repository causes dependency resolving issues on Fedora 29/30 that already contains lxcfs-3.0.3-1:
# dnf update
Last metadata expiration check: 0:36:27 ago on Tue 05 Feb 2019 02:32:15 PM PST.
Dependencies resolved.
Problem: package lxc-templates-3.0.3-1.fc29.x86_64 requires lxc-libs(x86-64) = 3.0.3-1.fc29, but none of the providers can be installed
- cannot install both lxc-libs-3.1.0-0.1.fc29.x86_64 and lxc-libs-3.0.3-1.fc29.x86_64
- cannot install both lxc-libs-3.0.3-1.fc29.x86_64 and lxc-libs-3.1.0-0.1.fc29.x86_64
- cannot install the best update candidate for package lxc-templates-3.0.3-1.fc29.x86_64
- cannot install the best update candidate for package lxc-libs-3.0.3-1.fc29.x86_64
====================================================================================================================================================================================================================
Package Arch Version Repository Size
====================================================================================================================================================================================================================
Upgrading:
lxd x86_64 3.9-0.1.fc29 ganto-lxc3 8.1 M
lxd-client x86_64 3.9-0.1.fc29 ganto-lxc3 4.5 M
Skipping packages with conflicts:
(add '--best --allowerasing' to command line to force their upgrade):
lxc-libs x86_64 3.1.0-0.1.fc29 ganto-lxc3 456 k
Transaction Summary
====================================================================================================================================================================================================================
Upgrade 2 Packages
Skip 1 Package
Total download size: 13 M
Is this ok [y/N]:
Running the test suite for github.com/lxc/lxd/lxc-to-lxd fails when trying to build the RPM via mock:
+ go test -buildmode pie -compiler gc -ldflags ' -extldflags '\''-Wl,-z,relro -specs=/usr/lib/rpm/redhat/redhat-hardened-ld '\''' github.com/lxc/lxd/lxc-to-lxd
2018/08/10 17:51:25 Running test #0: container migrated
Checking whether container has already been migrated
2018/08/10 17:51:25 Running test #1: container name missmatch (1)
Checking whether container has already been migrated
2018/08/10 17:51:25 Running test #2: container name missmatch (2)
Checking whether container has already been migrated
2018/08/10 17:51:25 Running test #3: incomplete AppArmor support (1)
Checking whether container has already been migrated
Validating whether incomplete AppArmor support is enabled
2018/08/10 17:51:25 Running test #4: incomplete AppArmor support (2)
Checking whether container has already been migrated
Validating whether incomplete AppArmor support is enabled
2018/08/10 17:51:25 Running test #5: missing minimal /dev filesystem
Checking whether container has already been migrated
Validating whether incomplete AppArmor support is enabled
Validating whether mounting a minimal /dev is enabled
2018/08/10 17:51:25 Running test #6: missing lxc.rootfs key
Checking whether container has already been migrated
Validating whether incomplete AppArmor support is enabled
Validating whether mounting a minimal /dev is enabled
Validating container rootfs
2018/08/10 17:51:25 Running test #7: invalid lxc.rootfs key
Checking whether container has already been migrated
Validating whether incomplete AppArmor support is enabled
Validating whether mounting a minimal /dev is enabled
Validating container rootfs
2018/08/10 17:51:25 Running test #8: non-existent rootfs path
Checking whether container has already been migrated
Validating whether incomplete AppArmor support is enabled
Validating whether mounting a minimal /dev is enabled
Validating container rootfs
2018/08/10 17:51:25 Running test #0: loopback only
--- FAIL: TestConvertNetworkConfig (0.00s)
require.go:794:
Error Trace: main_migrate_test.go:228
Error: Received unexpected error:
creating the container failed
Test: TestConvertNetworkConfig
2018/08/10 17:51:25 Running test #0: invalid path
Processing storage configuration
2018/08/10 17:51:25 Running test #1: invalid rootfs
Processing storage configuration
2018/08/10 17:51:25 Running test #2: ignored default mounts
Processing storage configuration
2018/08/10 17:51:25 Running test #3: ignored mounts
Processing storage configuration
2018/08/10 17:51:25 Running test #4: valid mount configuration
Processing storage configuration
--- FAIL: TestConvertStorageConfig (0.00s)
require.go:157:
Error Trace: main_migrate_test.go:355
Error: Not equal:
expected: types.Devices{"convert_mount1":map[string]string{"type":"disk", "readonly":"true", "source":"/usr/lib", "path":"/usr/lib
"}, "convert_mount2":map[string]string{"source":"/lib64", "path":"/lib64", "type":"disk", "readonly":"true"}, "convert_mount3":map[string]string{"source":"/sys/kernel/sec
urity", "path":"/sys/kernel/security", "type":"disk", "readonly":"true", "optional":"true"}, "convert_mount4":map[string]string{"readonly":"true", "source":"/mnt", "path"
:"/mnt", "type":"disk"}, "convert_mount0":map[string]string{"source":"/lib", "path":"/lib", "type":"disk", "readonly":"true"}}
actual : types.Devices{"mount4":map[string]string{"type":"disk", "readonly":"true", "source":"/mnt", "path":"/mnt"}, "mount0":map
[string]string{"type":"disk", "readonly":"true", "source":"/lib", "path":"/lib"}, "mount1":map[string]string{"readonly":"true", "source":"/usr/lib", "path":"/usr/lib", "t
ype":"disk"}, "mount2":map[string]string{"source":"/lib64", "path":"/lib64", "type":"disk", "readonly":"true"}, "mount3":map[string]string{"source":"/sys/kernel/security"
, "path":"/sys/kernel/security", "type":"disk", "readonly":"true", "optional":"true"}}
Diff:
--- Expected
+++ Actual
@@ -1,3 +1,3 @@
(types.Devices) (len=5) {
- (string) (len=14) "convert_mount0": (map[string]string) (len=4) {
+ (string) (len=6) "mount0": (map[string]string) (len=4) {
(string) (len=4) "path": (string) (len=4) "/lib",
@@ -7,3 +7,3 @@
},
- (string) (len=14) "convert_mount1": (map[string]string) (len=4) {
+ (string) (len=6) "mount1": (map[string]string) (len=4) {
(string) (len=4) "path": (string) (len=8) "/usr/lib",
@@ -13,3 +13,3 @@
},
- (string) (len=14) "convert_mount2": (map[string]string) (len=4) {
+ (string) (len=6) "mount2": (map[string]string) (len=4) {
(string) (len=4) "path": (string) (len=6) "/lib64",
@@ -19,3 +19,3 @@
},
- (string) (len=14) "convert_mount3": (map[string]string) (len=5) {
+ (string) (len=6) "mount3": (map[string]string) (len=5) {
(string) (len=8) "optional": (string) (len=4) "true",
@@ -26,3 +26,3 @@
},
- (string) (len=14) "convert_mount4": (map[string]string) (len=4) {
+ (string) (len=6) "mount4": (map[string]string) (len=4) {
(string) (len=4) "path": (string) (len=4) "/mnt",
Test: TestConvertStorageConfig
2018/08/10 17:51:25 Running test #0: missing lxc.rootfs key
2018/08/10 17:51:25 Running test #1: invalid lxc.rootfs key
2018/08/10 17:51:25 Running test #2: valid lxc.rootfs key
FAIL
FAIL github.com/lxc/lxd/lxc-to-lxd 0.012s
Hi there,
First, thanks for making a Copr repository available for lxc3 on Fedora! This is a great way to use it w/ minimal fiddling.
I am currently trying to use it for unprivileged containers on Fedora30 and this fails with a symbol lookup error (running as root works fine):
$ lxc-create -n mycontainer -t download -- --dist fedora --release 29 --arch amd64
lxc-create: mycontainer: conf.c: chown_mapped_root: 3182 lxc-usernsexec failed: lxc-usernsexec: symbol lookup error: lxc-usernsexec: undefined symbol: add_elem_to_mount_list
lxc-create: mycontainer: tools/lxc_create.c: main: 331 Failed to create container mycontainer
I think I have the setup right:
$ id
uid=1000(vincent) gid=1000(vincent) groups=1000(vincent),10(wheel),1001(docker) context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
$ cat /etc/subgid
vincent:100000:65536
$ cat /etc/subuid
vincent:100000:65536
$ cat ~/.config/lxc/default.conf
lxc.include = /etc/lxc/default.conf
lxc.idmap = u 0 100000 65536
lxc.idmap = g 0 100000 65536
And yet this still fails. Looking at the lxc source code, I see it's when chown_mapped_root does an execve of the binary that this ends up failing but ldd shows all libs as being resolved correctly.
Would you have some pointers? Below is my system info.
Thanks much!
$ cat /etc/redhat-release
Fedora release 30 (Thirty)
$ which lxc-usernsexec |xargs rpm -qf
lxc-3.2.1-0.3.fc30.x86_64
$ ldd /usr/bin/lxc-usernsexec
linux-vdso.so.1 (0x00007ffddf719000)
liblxc.so.1 => /lib64/liblxc.so.1 (0x00007f80dd253000)
libcrypto.so.1.1 => /lib64/libcrypto.so.1.1 (0x00007f80dcf72000)
libutil.so.1 => /lib64/libutil.so.1 (0x00007f80dcf6d000)
libpthread.so.0 => /lib64/libpthread.so.0 (0x00007f80dcf4c000)
libgcc_s.so.1 => /lib64/libgcc_s.so.1 (0x00007f80dcf32000)
libc.so.6 => /lib64/libc.so.6 (0x00007f80dcd6c000)
libselinux.so.1 => /lib64/libselinux.so.1 (0x00007f80dcd3d000)
libseccomp.so.2 => /lib64/libseccomp.so.2 (0x00007f80dccf4000)
libcap.so.2 => /lib64/libcap.so.2 (0x00007f80dcced000)
/lib64/ld-linux-x86-64.so.2 (0x00007f80dd35b000)
libz.so.1 => /lib64/libz.so.1 (0x00007f80dccd3000)
libdl.so.2 => /lib64/libdl.so.2 (0x00007f80dcccd000)
libpcre2-8.so.0 => /lib64/libpcre2-8.so.0 (0x00007f80dcc3f000)
The spec file for lua-lxc-3.0.0-0.1 from this repository fails to build in an EPEL 7 build root with the following message:
ENTER ['do'](['bash', '--login', '-c', '/usr/bin/rpmbuild -bb --target x86_64 --nodeps /builddir/build/SPECS/lua-lxc.spec'], chrootPath='/var/lib/mock/742680-epel-7-x86_64-1524077113.699223/root'env={'TERM': 'vt100', 'SHELL': '/bin/bash', 'HOME': '/builddir', 'HOSTNAME': 'mock', 'PATH': '/usr/bin:/bin:/usr/sbin:/sbin', 'PROMPT_COMMAND': 'printf "\\033]0;<mock-chroot>\\007"', 'PS1': '<mock-chroot> \\s-\\v\\$ ', 'LANG': 'en_US.UTF-8'}shell=Falselogger=<mockbuild.trace_decorator.getLog object at 0x7f48a1197b70>timeout=0uid=1001gid=135user='mockbuild'nspawn_args=[]unshare_net=TrueprintOutput=True)
Executing command: ['/usr/bin/systemd-nspawn', '-q', '-M', '345a1a3fdf0241b99e3ac0905b04012c', '-D', '/var/lib/mock/742680-epel-7-x86_64-1524077113.699223/root', '-a', '--setenv=TERM=vt100', '--setenv=SHELL=/bin/bash', '--setenv=HOME=/builddir', '--setenv=HOSTNAME=mock', '--setenv=PATH=/usr/bin:/bin:/usr/sbin:/sbin', '--setenv=PROMPT_COMMAND=printf "\\033]0;<mock-chroot>\\007"', '--setenv=PS1=<mock-chroot> \\s-\\v\\$ ', '--setenv=LANG=en_US.UTF-8', '-u', 'mockbuild', 'bash', '--login', '-c', '/usr/bin/rpmbuild -bb --target x86_64 --nodeps /builddir/build/SPECS/lua-lxc.spec'] with env {'TERM': 'vt100', 'SHELL': '/bin/bash', 'HOME': '/builddir', 'HOSTNAME': 'mock', 'PATH': '/usr/bin:/bin:/usr/sbin:/sbin', 'PROMPT_COMMAND': 'printf "\\033]0;<mock-chroot>\\007"', 'PS1': '<mock-chroot> \\s-\\v\\$ ', 'LANG': 'en_US.UTF-8'} and shell False
Building target platforms: x86_64
Building for target x86_64
Executing(%prep): /bin/sh -e /var/tmp/rpm-tmp.S4OtUy
+ umask 022
+ cd /builddir/build/BUILD
+ cd /builddir/build/BUILD
+ rm -rf lua-lxc-3.0.0
+ /usr/bin/gzip -dc /builddir/build/SOURCES/lua-lxc-3.0.0.tar.gz
+ /usr/bin/tar -xf -
+ STATUS=0
+ '[' 0 -ne 0 ']'
+ cd lua-lxc-3.0.0
+ /usr/bin/chmod -Rf a+rX,u+w,g-w,o-w .
+ exit 0
Executing(%build): /bin/sh -e /var/tmp/rpm-tmp.iNusCj
+ umask 022
+ cd /builddir/build/BUILD
+ cd lua-lxc-3.0.0
+ ./autogen.sh
+ test -d autom4te.cache
+ libtoolize
libtoolize: Consider adding `AC_CONFIG_MACRO_DIR([m4])' to configure.ac and
libtoolize: rerunning libtoolize, to keep the correct libtool macros in-tree.
+ aclocal -I config
+ autoheader
+ autoconf
BUILDSTDERR: configure.ac:61: error: possibly undefined macro: PKG_CHECK_VAR
BUILDSTDERR: If this token and others are legitimate, please use m4_pattern_allow.
BUILDSTDERR: See the Autoconf documentation.
+ exit 1
BUILDSTDERR: error: Bad exit status from /var/tmp/rpm-tmp.iNusCj (%build)
RPM build errors:
BUILDSTDERR: Bad exit status from /var/tmp/rpm-tmp.iNusCj (%build)
Child return code was: 1
EXCEPTION: [Error()]
Traceback (most recent call last):
File "/usr/lib/python3.6/site-packages/mockbuild/trace_decorator.py", line 96, in trace
result = func(*args, **kw)
File "/usr/lib/python3.6/site-packages/mockbuild/util.py", line 626, in do
raise exception.Error("Command failed: \n # %s\n%s" % (command, output), child.returncode)
mockbuild.exception.Error: Command failed:
# /usr/bin/systemd-nspawn -q -M 345a1a3fdf0241b99e3ac0905b04012c -D /var/lib/mock/742680-epel-7-x86_64-1524077113.699223/root -a --setenv=TERM=vt100 --setenv=SHELL=/bin/bash --setenv=HOME=/builddir --setenv=HOSTNAME=mock --setenv=PATH=/usr/bin:/bin:/usr/sbin:/sbin --setenv=PROMPT_COMMAND=printf "\033]0;<mock-chroot>\007" --setenv=PS1=<mock-chroot> \s-\v\$ --setenv=LANG=en_US.UTF-8 -u mockbuild bash --login -c /usr/bin/rpmbuild -bb --target x86_64 --nodeps /builddir/build/SPECS/lua-lxc.spec
Still have to investigate if there is something missing or if this is a version issue.
LXC 3.2.1 and LXCFS 3.1.2 Released on the 24th of July 2019 are there any plans on building these for fedora 30?
Hi @ganto. What do you think about making lxd-client available from official Fedora 29+ repositories? It is convenient to have it there for easy setup of remote access to LXD servers.
Running Fedora 31 and have LXD installed via the steps on https://copr.fedorainfracloud.org/coprs/ganto/lxc3/ . Everything was working really well although for systemd containers I had to set lxc config set <container-name> raw.lxc 'lxc.init.cmd = /sbin/init systemd.unified_cgroup_hierarchy' for them to be able to work properly (found that command from https://discuss.linuxcontainers.org/t/cgroups-v2-adoption/6074/9 )-- biggest tell that they were not working was that they would not get a ipv4 IP an can only be stopped via --force. That wasn't a big deal since it only needed to be set once per container. I upgraded to LXD 3.20 today and now I cannot get any containers to work even after setting that.
Wanted to post here before asking in the general LXD forum since it may be specific to this distribution for Fedora/CentOS with cgroups2 enabled. I do not want to disable cgroupv2 but can provide any logging or debug output that could be useful just let me know what to run to get the output as I am only a general lxd user.
Thanks!
I know you are working on LXD 4 for Fedora, but I got into a pickle. I had lxd 3.22 from Fedora 31, and upgraded to Fedora 32. This worked just fine till I uninstalled lxd 3.22 and tried to reinstall it. I found I only got 3.21 for Fedora 32. But then lxd wouldn't start because the "data" version was higher. I tried to compile 3.22 for Fedora 32, but that failed on tests. I then set the $releasever in the repo file to 31 and reinstalled 3.22. It would be nice if people could just straight install 3.22 on Fedora 32 until 4 is avaliable.
When building lxd.spec with release 3.6 or later, the go test of github.com/lxc/lxd/shared/generate/db aborts with:
+ go test -buildmode pie -compiler gc -v -tags libsqlite3 -ldflags ' -extldflags '\''-Wl,-z,relro -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld '\''' github.com/lxc/lxd/shared/generate/db
=== RUN TestPackages
--- FAIL: TestPackages (0.00s)
parse_test.go:25:
Error Trace: parse_test.go:25
Error: Expected value not to be nil.
Test: TestPackages
=== RUN TestParse
--- PASS: TestParse (0.00s)
FAIL
FAIL github.com/lxc/lxd/shared/generate/db 0.008s
Error happens on Fedora 28 (golang-1.10.5-1.fc28.x86_64) and CentOS 7 (golang-1.11.2-3.el7.x86_64). Issue originally mentioned in #11 (comment)
When running the test against the release tarball with manually compiled bundled libraries, the error cannot be reproduced:
[vagrant@localhost ~]$ export GOPATH=/home/vagrant/lxd-3.8/dist
[vagrant@localhost ~]$ export CGO_CFLAGS="-I/home/vagrant/lxd-3.8/dist/sqlite/ -I/home/vagrant/lxd-3.8/dist/dqlite/include/"
[vagrant@localhost ~]$ export CGO_LDFLAGS="-L/home/vagrant/lxd-3.8/dist/sqlite/.libs/ -L/home/vagrant/lxd-3.8/dist/dqlite/.libs/"
[vagrant@localhost ~]$ export LD_LIBRARY_PATH="/home/vagrant/lxd-3.8/dist/sqlite/.libs/:/home/vagrant/lxd-3.8/dist/dqlite/.libs/"
[vagrant@localhost ~]$ go test -v github.com/lxc/lxd/shared/generate/db
=== RUN TestPackages
--- PASS: TestPackages (0.04s)
=== RUN TestParse
--- PASS: TestParse (0.00s)
PASS
ok github.com/lxc/lxd/shared/generate/db 0.060s
Currently lxd cannot be build on CentOS 8 because libuv-devel package is missing in the repository. The reason is the new modularity system used for NodeJS where libuv-devel is involved.
From the official CentOS 8 announcement:
Known RHEL-8 packages missing -devel
- libblueray-devel
- liba52-devel
- libXvMC-devel
- libdvdnav-devel
- gfbgraph-devel
- libuv-devel
- rest-devel
- qgpgme-devel
The reason seems to be as following:
- Until modularity and module builds are implemented in EPEL, there
will be many packages which can not be built for EPEL. This is mainly
due to RHEL-8 not shipping many -devel packages and the need for us to
rebuild those packages in a module to make those -devel available to
build against.
There already exists an issue in the EPEL Pagure issue tracker which I hope will be updated once there is some progress: #64: libuv-devel missing from CRB
When starting the lxd service on a Fedora 27 with SELinux enabled, the following AVC is triggered:
type=AVC msg=audit(1527521822.187:967): avc: denied { nosuid_transition } for pid=21577 comm="lxd" scontext=system_u:system_r:container_runtime_t:s0 tcontext=system_u:system_r:spc_t:s0 tclass=process2 permissive=1
However, the service is still successfully started and no loss of functionality could be experienced so far.
~ lxc launch ubuntu:18.04 local:u18
Error: Get http://unix.socket/1.0: dial unix /run/lxd.socket: connect: no such file or directory
Where could be the problem?
➜ ~ systemctl status lxd-containers.service
● lxd-containers.service - LXD - container startup/shutdown
Loaded: loaded (/usr/lib/systemd/system/lxd-containers.service; enabled; vendor preset: disabled)
Active: inactive (dead)
Docs: man:lxd(1)
➜ ~ systemctl status lxd.socket
● lxd.socket - LXD - unix socket
Loaded: loaded (/usr/lib/systemd/system/lxd.socket; enabled; vendor preset: disabled)
Active: inactive (dead)
Docs: man:lxd(1)
Listen: /run/lxd.socket (Stream)
➜ ~ systemctl status lxd.service
● lxd.service - LXD - main daemon
Loaded: loaded (/usr/lib/systemd/system/lxd.service; indirect; vendor preset: disabled)
Active: inactive (dead)
Docs: man:lxd(1)
The current COPR build of lxd-3.0.0-0.3 fail to build successfully because the %check step fails to start the lxd daemon with the following error:
Executing(%check): /bin/sh -e /var/tmp/rpm-tmp.sqpmNo
+ umask 022
+ cd /builddir/build/BUILD
+ cd lxd-3.0.0
+ export GOPATH=/builddir/build/BUILDROOT/lxd-3.0.0-0.3.fc27.x86_64//usr/share/gocode:/usr/share/gocode
+ GOPATH=/builddir/build/BUILDROOT/lxd-3.0.0-0.3.fc27.x86_64//usr/share/gocode:/usr/share/gocode
+ go test -buildmode pie -compiler gc -ldflags ' -extldflags '\''-Wl,-z,relro -specs=/usr/lib/rpm/redhat/redhat-hardened-ld '\''' github.com/lxc/lxd/lxc
ok github.com/lxc/lxd/lxc 0.038s
+ go test -buildmode pie -compiler gc -ldflags ' -extldflags '\''-Wl,-z,relro -specs=/usr/lib/rpm/redhat/redhat-hardened-ld '\''' github.com/lxc/lxd/lxd
--- FAIL: TestCluster_Bootstrap (0.02s)
testing.go:36: 08:21:55.000 info Kernel uid/gid map:
testing.go:36: 08:21:55.001 info - u 0 0 4294967295
testing.go:36: 08:21:55.001 info - g 0 0 4294967295
testing.go:36: 08:21:55.001 info Configured LXD uid/gid map:
testing.go:36: 08:21:55.001 info - u 0 100000 65536
testing.go:36: 08:21:55.001 info - g 0 100000 65536
testing.go:36: 08:21:55.001 warn AppArmor support has been disabled because of lack of kernel support
testing.go:36: 08:21:55.002 info LXD 3.0.0 is starting in mock mode path=/var/lib/lxd
testing.go:36: 08:21:55.002 info Kernel uid/gid map:
testing.go:36: 08:21:55.002 info - u 0 0 4294967295
testing.go:36: 08:21:55.002 info - g 0 0 4294967295
testing.go:36: 08:21:55.002 info Configured LXD uid/gid map:
testing.go:36: 08:21:55.002 info - u 0 100000 65536
testing.go:36: 08:21:55.002 info - g 0 100000 65536
testing.go:36: 08:21:55.002 warn AppArmor support has been disabled because of lack of kernel support
testing.go:36: 08:21:55.011 info Initializing database gateway
testing.go:36: 08:21:55.011 info Start database node address= id=1
testing.go:36: 08:21:55.012 info Raft: Initial configuration (index=1): [{Suffrage:Voter ID:1 Address:0}]
testing.go:36: 08:21:55.012 info Raft: Node at 0 [Leader] entering Leader state
testing.go:36: 08:21:55.014 info LXD isn't socket activated
testing.go:36: 08:21:55.014 info Stopping REST API handler:
testing.go:36: 08:21:55.014 info Stopping /dev/lxd handler
testing.go:36: 08:21:55.014 eror Failed to start the daemon: local endpoint: cannot bind socket: listen unix /run/lxd.socket: bind: permission denied
testing.go:36: 08:21:55.014 info Starting shutdown sequence
testing.go:36: 08:21:55.014 info Stop database gateway
testing.go:36: 08:21:55.014 info Stop raft instance
testing.go:36: 08:21:55.014 dbug Not unmounting temporary filesystems (containers are still running)
testing.go:36: 08:21:55.014 info Saving simplestreams cache
testing.go:36: 08:21:55.014 info Saved simplestreams cache
daemon_integration_test.go:40:
Error Trace: daemon_integration_test.go:40
api_cluster_test.go:21
Error: Received unexpected error:
local endpoint: cannot bind socket: listen unix /run/lxd.socket: bind: permission denied
Test: TestCluster_Bootstrap
--- FAIL: TestCluster_Get (0.01s)
[...]
--- FAIL: TestContainerTestSuite (0.12s)
--- FAIL: TestContainerTestSuite/TestContainer_IsPrivileged_Privileged (0.01s)
main_test.go:63: failed to start daemon: local endpoint: cannot bind socket: listen unix /run/lxd.socket: bind: permission denied
--- FAIL: TestContainerTestSuite/TestContainer_IsPrivileged_Unprivileged (0.01s)
main_test.go:63: failed to start daemon: local endpoint: cannot bind socket: listen unix /run/lxd.socket: bind: permission denied
--- FAIL: TestContainerTestSuite/TestContainer_LoadFromDB (0.01s)
main_test.go:63: failed to start daemon: local endpoint: cannot bind socket: listen unix /run/lxd.socket: bind: permission denied
--- FAIL: TestContainerTestSuite/TestContainer_LogPath (0.01s)
main_test.go:63: failed to start daemon: local endpoint: cannot bind socket: listen unix /run/lxd.socket: bind: permission denied
--- FAIL: TestContainerTestSuite/TestContainer_Path_Regular (0.01s)
main_test.go:63: failed to start daemon: local endpoint: cannot bind socket: listen unix /run/lxd.socket: bind: permission denied
--- FAIL: TestContainerTestSuite/TestContainer_Path_Snapshot (0.01s)
main_test.go:63: failed to start daemon: local endpoint: cannot bind socket: listen unix /run/lxd.socket: bind: permission denied
--- FAIL: TestContainerTestSuite/TestContainer_ProfilesDefault (0.01s)
main_test.go:63: failed to start daemon: local endpoint: cannot bind socket: listen unix /run/lxd.socket: bind: permission denied
--- FAIL: TestContainerTestSuite/TestContainer_ProfilesMulti (0.01s)
main_test.go:63: failed to start daemon: local endpoint: cannot bind socket: listen unix /run/lxd.socket: bind: permission denied
--- FAIL: TestContainerTestSuite/TestContainer_ProfilesOverwriteDefaultNic (0.01s)
main_test.go:63: failed to start daemon: local endpoint: cannot bind socket: listen unix /run/lxd.socket: bind: permission denied
--- FAIL: TestContainerTestSuite/TestContainer_Rename (0.01s)
main_test.go:63: failed to start daemon: local endpoint: cannot bind socket: listen unix /run/lxd.socket: bind: permission denied
--- FAIL: TestContainerTestSuite/TestContainer_findIdmap_isolated (0.01s)
main_test.go:63: failed to start daemon: local endpoint: cannot bind socket: listen unix /run/lxd.socket: bind: permission denied
--- FAIL: TestContainerTestSuite/TestContainer_findIdmap_maxed (0.01s)
main_test.go:63: failed to start daemon: local endpoint: cannot bind socket: listen unix /run/lxd.socket: bind: permission denied
--- FAIL: TestContainerTestSuite/TestContainer_findIdmap_mixed (0.01s)
main_test.go:63: failed to start daemon: local endpoint: cannot bind socket: listen unix /run/lxd.socket: bind: permission denied
--- FAIL: TestContainerTestSuite/TestContainer_findIdmap_raw (0.01s)
main_test.go:63: failed to start daemon: local endpoint: cannot bind socket: listen unix /run/lxd.socket: bind: permission denied
--- FAIL: TestDaemonImagesTestSuite (0.01s)
--- FAIL: TestDaemonImagesTestSuite/TestUseCachedImagesIfAvailable (0.01s)
main_test.go:63: failed to start daemon: local endpoint: cannot bind socket: listen unix /run/lxd.socket: bind: permission denied
--- FAIL: TestIntegration_UnixSocket (0.01s)
[...]
FAIL
FAIL github.com/lxc/lxd/lxd 0.320s
RPM build errors:
error: Bad exit status from /var/tmp/rpm-tmp.sqpmNo (%check)
Bad exit status from /var/tmp/rpm-tmp.sqpmNo (%check)
ERROR: Exception(/var/lib/copr-rpmbuild/results/lxd-3.0.0-0.3.fc27.src.rpm) Config(744744-fedora-27-x86_64) 7 minutes 5 seconds
Obviously the regular user running the build and test operations doesn't have the permissions to write to /run which is only writable to root.
When trying to start a container with lxd-3.0.0-0.4 the command would abort with:
[vagrant@localhost ~]$ lxc start u1
Error: Failed to run: /usr/libexec/lxd/lxd forkstart u1 /var/lib/lxd/containers /var/log/lxd/u1/lxc.conf:
Try `lxc info --show-log u1` for more info
[vagrant@localhost ~]$ lxc info --show-log u1
Name: u1
Remote: unix://
Architecture: x86_64
Created: 2018/05/08 19:32 UTC
Status: Stopped
Type: persistent
Profiles: default
Log:
lxc 20180508194042.239 ERROR lxc_conf - conf.c:run_buffer:347 - Script exited with status 1
lxc 20180508194042.239 ERROR lxc_start - start.c:lxc_init:815 - Failed to run lxc.hook.pre-start for container "u1"
lxc 20180508194042.239 ERROR lxc_start - start.c:__lxc_start:1832 - Failed to initialize container "u1"
lxc 20180508194042.240 ERROR lxc_container - lxccontainer.c:wait_on_daemonized_start:815 - No such file or directory - Failed to receive the container state
When stracing the lxd process, it seems that there are some commands invoked which are not aware of the custom set LXD_SOCKET:
[pid 23297] 23:40:17.425930 execve("/bin/sh", ["sh", "-c", "exec /usr/libexec/lxd/lxd callhook /var/lib/lxd 2 start u1 lxc pre-start"], [/* 14 vars */]) = 0 <0.001295>
...
[pid 23297] 23:40:17.594356 connect(3<socket:[56737]>, {sa_family=AF_LOCAL, sun_path="/var/lib/lxd/unix.socket"}, 27 <unfinished ...>
[pid 23297] 23:40:17.594462 <... connect resumed> ) = -1 ENOENT (No such file or directory) <0.000084>
...
[pid 23297] 23:40:17.594935 write(2<pipe:[56716]>, "Error: Get http://unix.socket/1.0: dial unix /var/lib/lxd/unix.socket: connect: no such file or directory\n", 106 = 106 <0.000095>
[pid 23296] 23:40:17.595061 <... read resumed> "Error: Get http://unix.socket/1.0: dial unix /var/lib/lxd/unix.socket: connect: no such file or directory\n", 4096) = 106
<0.169504>
Error happens when building the github.com/CanonicalLtd/raft-test go module:
BUILDSTDERR: github.com/lxc/lxd/vendor/github.com/CanonicalLtd/raft-test
BUILDSTDERR: mkdir -p $WORK/github.com/lxc/lxd/vendor/github.com/CanonicalLtd/raft-test/_obj/
BUILDSTDERR: cd /builddir/build/BUILD/lxd-3.0.0/_output/src/github.com/lxc/lxd/vendor/github.com/CanonicalLtd/raft-test
BUILDSTDERR: /usr/lib/golang/pkg/tool/linux_amd64/compile -o $WORK/github.com/lxc/lxd/vendor/github.com/CanonicalLtd/raft-test.a -trimpath $WORK -shared -p github.com/lxc/lxd/vendor/github.com/CanonicalLtd/raft-test -complete -installsuffix shared -buildid 9131365ab51a64889a7a1ca780fa643c604ecc84 -importmap github.com/CanonicalLtd/raft-test/internal/raftext=github.com/lxc/lxd/vendor/github.com/CanonicalLtd/raft-test/internal/raftext -importmap github.com/hashicorp/raft=github.com/lxc/lxd/vendor/github.com/hashicorp/raft -importmap github.com/stretchr/testify/require=github.com/lxc/lxd/vendor/github.com/stretchr/testify/require -D _/builddir/build/BUILD/lxd-3.0.0/_output/src/github.com/lxc/lxd/vendor/github.com/CanonicalLtd/raft-test -I $WORK -I /builddir/build/BUILD/lxd-3.0.0/_output/pkg/linux_amd64_shared -pack ./cluster.go ./config.go ./control.go ./duration.go ./fsm.go ./fsm_watcher.go ./log.go ./network.go ./node.go ./notify.go ./scenarios.go ./servers.go ./transport.go
BUILDSTDERR: # github.com/lxc/lxd/vendor/github.com/CanonicalLtd/raft-test
BUILDSTDERR: _output/src/github.com/lxc/lxd/vendor/github.com/CanonicalLtd/raft-test/cluster.go:50: t.Helper undefined (type testing.TB has no field or method Helper)
BUILDSTDERR: _output/src/github.com/lxc/lxd/vendor/github.com/CanonicalLtd/raft-test/cluster.go:120: t.Helper undefined (type testing.TB has no field or method Helper)
BUILDSTDERR: _output/src/github.com/lxc/lxd/vendor/github.com/CanonicalLtd/raft-test/cluster.go:169: t.Helper undefined (type testing.TB has no field or method Helper)
BUILDSTDERR: _output/src/github.com/lxc/lxd/vendor/github.com/CanonicalLtd/raft-test/cluster.go:226: t.Helper undefined (type testing.TB has no field or method Helper)
BUILDSTDERR: _output/src/github.com/lxc/lxd/vendor/github.com/CanonicalLtd/raft-test/cluster.go:285: t.Helper undefined (type testing.TB has no field or method Helper)
BUILDSTDERR: _output/src/github.com/lxc/lxd/vendor/github.com/CanonicalLtd/raft-test/cluster.go:313: t.Helper undefined (type testing.TB has no field or method Helper)
BUILDSTDERR: _output/src/github.com/lxc/lxd/vendor/github.com/CanonicalLtd/raft-test/control.go:39: c.t.Helper undefined (type testing.TB has no field or method Helper)
BUILDSTDERR: _output/src/github.com/lxc/lxd/vendor/github.com/CanonicalLtd/raft-test/control.go:50: c.t.Helper undefined (type testing.TB has no field or method Helper)
BUILDSTDERR: _output/src/github.com/lxc/lxd/vendor/github.com/CanonicalLtd/raft-test/control.go:89: c.t.Helper undefined (type testing.TB has no field or method Helper)
BUILDSTDERR: _output/src/github.com/lxc/lxd/vendor/github.com/CanonicalLtd/raft-test/control.go:127: c.t.Helper undefined (type testing.TB has no field or method Helper)
BUILDSTDERR: _output/src/github.com/lxc/lxd/vendor/github.com/CanonicalLtd/raft-test/control.go:127: too many errors
Running the test suite for github.com/lxc/lxd/lxd/cluster fails when trying to build the RPM via mock:
Executing(%check): /bin/sh -e /var/tmp/rpm-tmp.AMy8SO
+ umask 022
+ cd /builddir/build/BUILD
+ cd lxd-3.1
+ export GOPATH=/builddir/build/BUILDROOT/lxd-3.1-0.1.fc27.x86_64//usr/share/gocode:/usr/share/gocode
+ GOPATH=/builddir/build/BUILDROOT/lxd-3.1-0.1.fc27.x86_64//usr/share/gocode:/usr/share/gocode
+ unset LXD_SOCKET
+ go test -buildmode pie -compiler gc -ldflags ' -extldflags '\''-Wl,-z,relro -specs=/usr/lib/rpm/redhat/redhat-hardened-ld '\''' github.com/lxc/lxd/lxc
ok github.com/lxc/lxd/lxc 0.030s
+ go test -buildmode pie -compiler gc -ldflags ' -extldflags '\''-Wl,-z,relro -specs=/usr/lib/rpm/redhat/redhat-hardened-ld '\''' github.com/lxc/lxd/lxd
ok github.com/lxc/lxd/lxd 59.556s
+ go test -buildmode pie -compiler gc -ldflags ' -extldflags '\''-Wl,-z,relro -specs=/usr/lib/rpm/redhat/redhat-hardened-ld '\''' github.com/lxc/lxd/lxd/cluster
--- FAIL: TestHeartbeat (5.93s)
heartbeat_test.go:125: create bootstrap node for test cluster
testing.go:36: 07:21:46.186 info Initializing database gateway
testing.go:36: 07:21:46.186 info Start database node id=1 address=
testing.go:36: 07:21:46.187 info Raft: Initial configuration (index=1): [{Suffrage:Voter ID:1 Address:0}]
testing.go:36: 07:21:46.187 info Raft: Node at 0 [Leader] entering Leader state
testing.go:36: 07:21:46.201 dbug Acquiring exclusive lock on cluster db
testing.go:36: 07:21:46.201 info Stop database gateway
testing.go:36: 07:21:46.201 info Stop raft instance
testing.go:36: 07:21:46.204 info Raft: Starting snapshot up to 10
testing.go:36: 07:21:46.206 info Raft: Snapshot to 10 complete
testing.go:36: 07:21:46.206 info Initializing database gateway
testing.go:36: 07:21:46.207 info Start database node id=1 address=127.0.0.1:41799
testing.go:36: 07:21:46.209 info Raft: Restored from snapshot 1-10-1527657706205
testing.go:36: 07:21:46.209 info Raft: Initial configuration (index=1): [{Suffrage:Voter ID:1 Address:0}]
testing.go:36: 07:21:46.209 info Raft: Node at 127.0.0.1:41799 [Follower] entering Follower state (Leader: "")
testing.go:36: 07:21:46.492 warn Raft: Heartbeat timeout from "" reached, starting election
testing.go:36: 07:21:46.492 info Raft: Node at 127.0.0.1:41799 [Candidate] entering Candidate state in term 2
testing.go:36: 07:21:46.493 dbug Raft: Votes needed: 1
testing.go:36: 07:21:46.493 dbug Raft: Vote granted from 1 in term 2. Tally: 1
testing.go:36: 07:21:46.493 info Raft: Election won. Tally: 1
testing.go:36: 07:21:46.493 info Raft: Node at 127.0.0.1:41799 [Leader] entering Leader state
testing.go:36: 07:21:46.710 dbug Releasing exclusive lock on cluster db
testing.go:36: 07:21:46.757 dbug Found cert k=0
testing.go:36: 07:21:46.799 dbug Found cert k=0
testing.go:36: 07:21:46.799 dbug Found cert k=0
testing.go:36: 07:21:46.800 dbug Found cert k=0
heartbeat_test.go:137: adding another node to the test cluster
testing.go:36: 07:21:46.809 info Kernel uid/gid map:
testing.go:36: 07:21:46.809 info - u 0 0 4294967295
testing.go:36: 07:21:46.809 info - g 0 0 4294967295
testing.go:36: 07:21:46.809 info Configured LXD uid/gid map:
testing.go:36: 07:21:46.809 info - u 0 100000 65536
testing.go:36: 07:21:46.809 info - g 0 100000 65536
testing.go:36: 07:21:46.809 warn AppArmor support has been disabled because of lack of kernel support
testing.go:36: 07:21:46.810 info Initializing database gateway
testing.go:36: 07:21:46.810 info Start database node id=1 address=
testing.go:36: 07:21:46.811 info Raft: Initial configuration (index=1): [{Suffrage:Voter ID:1 Address:0}]
testing.go:36: 07:21:46.811 info Raft: Node at 0 [Leader] entering Leader state
testing.go:36: 07:21:46.825 dbug Acquiring exclusive lock on cluster db
testing.go:36: 07:21:46.825 info Stop database gateway
testing.go:36: 07:21:46.825 info Stop raft instance
testing.go:36: 07:21:46.827 info Raft: Starting snapshot up to 9
testing.go:36: 07:21:46.828 info Raft: Snapshot to 9 complete
testing.go:36: 07:21:46.828 info Initializing database gateway
testing.go:36: 07:21:46.828 info Start database node id=2 address=127.0.0.1:41457
testing.go:36: 07:21:46.830 info Raft: Restored from snapshot 1-9-1527657706827
testing.go:36: 07:21:46.830 info Raft: Initial configuration (index=1): [{Suffrage:Voter ID:1 Address:0}]
testing.go:36: 07:21:46.830 info Joining dqlite raft cluster id=2 address=127.0.0.1:41457 target=127.0.0.1:41799
testing.go:36: 07:21:46.830 info Raft: Node at 127.0.0.1:41457 [Follower] entering Follower state (Leader: "")
testing.go:36: 07:21:46.871 dbug Found cert k=0
testing.go:36: 07:21:46.871 info Raft-http: Handling join request for node 2 (127.0.0.1:41457)
testing.go:36: 07:21:46.871 info Raft: Updating configuration with AddStaging (2, 127.0.0.1:41457) to [{Suffrage:Voter ID:1 Address:0} {Suffrage:Voter ID:2 Address:127.0.0.1:41457}]
testing.go:36: 07:21:46.871 info Raft: Added peer 2, starting replication
testing.go:36: 07:21:46.871 info Migrate local data to cluster database
testing.go:36: 07:21:46.871 dbug Releasing exclusive lock on cluster db
testing.go:36: 07:21:46.930 dbug Found cert k=0
testing.go:36: 07:21:46.930 info Raft-http: Establishing new connection with 127.0.0.1:41799
testing.go:36: 07:21:46.930 dbug Raft-net: 127.0.0.1:41457 accepted connection from: 127.0.0.1:51750
testing.go:36: 07:21:46.930 warn Raft: Failed to get previous log: 23 log not found (last: 9)
testing.go:36: 07:21:46.930 warn Raft: AppendEntries to {Voter 2 127.0.0.1:41457} rejected, sending older logs (next: 10)
testing.go:36: 07:21:46.930 dbug Found cert k=0
testing.go:36: 07:21:46.933 info Raft: pipelining replication to peer {Voter 2 127.0.0.1:41457}
testing.go:36: 07:21:46.942 dbug Found cert k=0
testing.go:36: 07:21:46.942 info Raft-http: Establishing new connection with 127.0.0.1:41799
testing.go:36: 07:21:46.942 dbug Raft-net: 127.0.0.1:41457 accepted connection from: 127.0.0.1:51754
testing.go:36: 07:21:46.974 dbug Found cert k=0
testing.go:36: 07:21:46.974 dbug Found cert k=0
testing.go:36: 07:21:46.974 dbug Found cert k=0
heartbeat_test.go:137: adding another node to the test cluster
testing.go:36: 07:21:46.988 info Kernel uid/gid map:
testing.go:36: 07:21:46.988 info - u 0 0 4294967295
testing.go:36: 07:21:46.988 info - g 0 0 4294967295
testing.go:36: 07:21:46.988 info Configured LXD uid/gid map:
testing.go:36: 07:21:46.988 info - u 0 100000 65536
testing.go:36: 07:21:46.988 info - g 0 100000 65536
testing.go:36: 07:21:46.989 warn AppArmor support has been disabled because of lack of kernel support
testing.go:36: 07:21:46.991 info Initializing database gateway
testing.go:36: 07:21:46.991 info Start database node id=1 address=
testing.go:36: 07:21:46.991 info Raft: Initial configuration (index=1): [{Suffrage:Voter ID:1 Address:0}]
testing.go:36: 07:21:46.992 info Raft: Node at 0 [Leader] entering Leader state
testing.go:36: 07:21:47.012 dbug Acquiring exclusive lock on cluster db
testing.go:36: 07:21:47.012 info Stop database gateway
testing.go:36: 07:21:47.012 info Stop raft instance
testing.go:36: 07:21:47.014 info Raft: Starting snapshot up to 9
testing.go:36: 07:21:47.015 info Raft: Snapshot to 9 complete
testing.go:36: 07:21:47.015 info Initializing database gateway
testing.go:36: 07:21:47.015 info Start database node id=3 address=127.0.0.1:38021
testing.go:36: 07:21:47.017 info Raft: Restored from snapshot 1-9-1527657707015
testing.go:36: 07:21:47.017 info Raft: Initial configuration (index=1): [{Suffrage:Voter ID:1 Address:0}]
testing.go:36: 07:21:47.017 info Joining dqlite raft cluster id=3 address=127.0.0.1:38021 target=127.0.0.1:41457
testing.go:36: 07:21:47.017 info Raft: Node at 127.0.0.1:38021 [Follower] entering Follower state (Leader: "")
testing.go:36: 07:21:47.058 dbug Found cert k=0
testing.go:36: 07:21:47.058 info Raft-http: Handling join request for node 3 (127.0.0.1:38021)
testing.go:36: 07:21:47.100 dbug Found cert k=0
testing.go:36: 07:21:47.100 info Raft-http: Handling join request for node 3 (127.0.0.1:38021)
testing.go:36: 07:21:47.101 info Raft: Updating configuration with AddStaging (3, 127.0.0.1:38021) to [{Suffrage:Voter ID:1 Address:0} {Suffrage:Voter ID:2 Address:127.0.0.1:41457} {Suffrage:Voter ID:3 Address:127.0.0.1:38021}]
testing.go:36: 07:21:47.101 info Raft: Added peer 3, starting replication
testing.go:36: 07:21:47.197 warn Raft: Failed to contact 2 in 100.196704ms
testing.go:36: 07:21:47.207 warn Raft: Failed to contact 2 in 110.542981ms
testing.go:36: 07:21:47.207 warn Raft: Failed to contact 3 in 106.571499ms
testing.go:36: 07:21:47.207 warn Raft: Failed to contact quorum of nodes, stepping down
testing.go:36: 07:21:47.207 info Raft: Node at 127.0.0.1:41799 [Follower] entering Follower state (Leader: "")
heartbeat_test.go:149:
Error Trace: heartbeat_test.go:149
heartbeat_test.go:28
Error: Received unexpected error:
http code 403 'failed to join server 3: leadership lost while committing log'
server join failed
github.com/lxc/lxd/vendor/github.com/CanonicalLtd/raft-http.ChangeMembership
/builddir/build/BUILDROOT/lxd-3.1-0.1.fc27.x86_64/usr/share/gocode/src/github.com/lxc/lxd/vendor/github.com/CanonicalLtd/raft-http/membership.go:83
github.com/lxc/lxd/vendor/github.com/CanonicalLtd/raft-http.(*Layer).changeMemberhip
/builddir/build/BUILDROOT/lxd-3.1-0.1.fc27.x86_64/usr/share/gocode/src/github.com/lxc/lxd/vendor/github.com/CanonicalLtd/raft-http/layer.go:125
github.com/lxc/lxd/vendor/github.com/CanonicalLtd/raft-http.(*Layer).Join
/builddir/build/BUILDROOT/lxd-3.1-0.1.fc27.x86_64/usr/share/gocode/src/github.com/lxc/lxd/vendor/github.com/CanonicalLtd/raft-http/layer.go:111
github.com/lxc/lxd/lxd/cluster.Join
/builddir/build/BUILDROOT/lxd-3.1-0.1.fc27.x86_64/usr/share/gocode/src/github.com/lxc/lxd/lxd/cluster/membership.go:318
github.com/lxc/lxd/lxd/cluster_test.(*heartbeatFixture).Grow
/builddir/build/BUILDROOT/lxd-3.1-0.1.fc27.x86_64/usr/share/gocode/src/github.com/lxc/lxd/lxd/cluster/heartbeat_test.go:148
github.com/lxc/lxd/lxd/cluster_test.TestHeartbeat
/builddir/build/BUILDROOT/lxd-3.1-0.1.fc27.x86_64/usr/share/gocode/src/github.com/lxc/lxd/lxd/cluster/heartbeat_test.go:28
testing.tRunner
/usr/lib/golang/src/testing/testing.go:746
runtime.goexit
/usr/lib/golang/src/runtime/asm_amd64.s:2337
Test: TestHeartbeat
testing.go:36: 07:21:47.208 info Stop database gateway
testing.go:36: 07:21:47.208 info Stop raft instance
testing.go:36: 07:21:47.209 info Stop database gateway
testing.go:36: 07:21:47.209 info Stop raft instance
testing.go:36: 07:21:47.214 info Raft: Starting snapshot up to 34
testing.go:36: 07:21:47.216 info Raft: Snapshot to 34 complete
testing.go:36: 07:21:47.217 info Stop database gateway
testing.go:36: 07:21:47.217 info Stop raft instance
testing.go:36: 07:21:47.222 info Raft: Starting snapshot up to 34
testing.go:36: 07:21:47.607 warn Raft: Heartbeat timeout from "" reached, starting election
testing.go:36: 07:21:47.607 info Raft: Node at 127.0.0.1:41799 [Candidate] entering Candidate state in term 3
testing.go:36: 07:21:48.146 dbug Found cert k=0
testing.go:36: 07:21:48.146 info Raft-http: Establishing new connection with 127.0.0.1:41799
testing.go:36: 07:21:48.219 dbug Found cert k=0
testing.go:36: 07:21:48.219 info Raft-http: Establishing new connection with 127.0.0.1:41799
testing.go:36: 07:21:48.223 info Raft: Snapshot to 34 complete
testing.go:36: 07:21:48.300 dbug Found cert k=0
testing.go:36: 07:21:48.300 info Raft-http: Establishing new connection with 127.0.0.1:41799
testing.go:36: 07:21:48.394 dbug Found cert k=0
testing.go:36: 07:21:48.394 info Raft-http: Establishing new connection with 127.0.0.1:41799
testing.go:36: 07:21:48.505 dbug Found cert k=0
testing.go:36: 07:21:48.505 info Raft-http: Establishing new connection with 127.0.0.1:41799
testing.go:36: 07:21:48.609 dbug Raft: Votes needed: 2
testing.go:36: 07:21:49.664 dbug Found cert k=0
testing.go:36: 07:21:49.664 info Raft-http: Establishing new connection with 127.0.0.1:41799
testing.go:36: 07:21:49.667 dbug Found cert k=0
testing.go:36: 07:21:49.667 info Raft-http: Establishing new connection with 127.0.0.1:41799
testing.go:36: 07:21:49.900 dbug Found cert k=0
testing.go:36: 07:21:49.900 info Raft-http: Establishing new connection with 127.0.0.1:41799
testing.go:36: 07:21:51.309 dbug Found cert k=0
testing.go:36: 07:21:51.309 info Raft-http: Establishing new connection with 127.0.0.1:41799
testing.go:36: 07:21:51.663 dbug Found cert k=0
testing.go:36: 07:21:51.663 info Raft-http: Establishing new connection with 127.0.0.1:41799
testing.go:36: 07:21:52.026 dbug Found cert k=0
testing.go:36: 07:21:52.026 info Raft-http: Establishing new connection with 127.0.0.1:41799
testing.go:36: 07:21:52.102 info Raft: aborting pipeline replication to peer {Voter 2 127.0.0.1:41457}
FAIL
FAIL github.com/lxc/lxd/lxd/cluster 16.736s
error: Bad exit status from /var/tmp/rpm-tmp.AMy8SO (%check)
Bad exit status from /var/tmp/rpm-tmp.AMy8SO (%check)
After Updating a perfectly working machine with CentOS 8.2 and lxd 3.21 to version lxd 3.22 networking is failing. The Bridge (lxdbr1) is starting but gets no IP address. So the containers don't get an IP as well.
In /var/log/lxd/lxd.log I found:
t=2020-07-20T22:42:23+0200 lvl=info msg="Updating the LXD global schema. Backup made as \"global.bak\""
t=2020-07-20T22:42:23+0200 lvl=eror msg="Firewall nftables unable to parse existing ruleset: invalid character '^' looking for beginning of value"
t=2020-07-20T22:42:23+0200 lvl=info msg="Firewall loaded driver \"nftables\""
t=2020-07-20T22:42:23+0200 lvl=info msg="Initializing storage pools"
I could reproduce the issue on a second machine.
On the second machine I use libvirt in parallel. Using libvirts virbr0 as parent in the container configuration, I got an IP connection for every container and everything is working fine with version lxd 3.22
I've checked the firewall tables and could not find anything noticeable.
Hello, just a quick message to ask if these are planned on being built? many thanks for your time and efforts :)
With version 3.20 it is no longer possible to create an LVM pool in a VG where LVs already reside (which should be the common case). According an ongoing discussion there might be a solution in future releases. In the meantime I have to go back to version 3.18 where this was still possible (considered a bug by developers).
Are there 3.18 (or earlier) packages for Epel 8 available anywhere? Unfortunately, I could only find 3.20 rpms so far.
Under centos 7.5, the latest lxd (3.5) from copr-lxc3 immediately segfaults:
INFO[12-04|11:40:23] LXD 3.5 is starting in normal mode path=/var/lib/lxd
INFO[12-04|11:40:23] Kernel uid/gid map:
INFO[12-04|11:40:23] - u 0 0 4294967295
INFO[12-04|11:40:23] - g 0 0 4294967295
INFO[12-04|11:40:23] Configured LXD uid/gid map:
INFO[12-04|11:40:23] - u 0 1000000 65536
INFO[12-04|11:40:23] - g 0 1000000 65536
WARN[12-04|11:40:24] AppArmor support has been disabled because of lack of kernel support
INFO[12-04|11:40:24] Initializing local database
INFO[12-04|11:40:24] Initializing database gateway
INFO[12-04|11:40:24] Start database node address= id=1
INFO[12-04|11:40:24] Raft: Initial configuration (index=1): [{Suffrage:Voter ID:1 Address:0}]
fatal error: unexpected signal during runtime execution
[signal SIGSEGV: segmentation violation code=0x1 addr=0x0 pc=0x0]
runtime stack:
runtime.throw(0x1264f46, 0x2a)
/usr/lib/golang/src/runtime/panic.go:605 +0x95
runtime.sigpanic()
/usr/lib/golang/src/runtime/signal_unix.go:351 +0x2b8
Is this ia known issue, or could there be a dependency that I'm not covering under Centos?
I just checked again and there is still a permission denied issue when you try to start a postfix process in lxd 3.22 hosted by CentOS 8 (8.2.2009) and Fedora 31. So you can't use postfix in a container at all.
The error message is:
/usr/libexec/postfix/postfix-script: line 127: /dev/null: Permission denied
We first discussed the issue an Apr. 6. Is there even a chance to fix the issue or is it just too big and unmanageable?
lxd-containers service is looking for wrong socket:
[root@titan lxd]# systemctl status lxd-containers
? lxd-containers.service - LXD - container startup/shutdown
Loaded: loaded (/usr/lib/systemd/system/lxd-containers.service; enabled; vendor preset: disabled)
Active: failed (Result: exit-code) since Tue 2018-05-22 15:58:07 CEST; 2s ago
Docs: man:lxd(1)
Process: 1905 ExecStop=/usr/libexec/lxd/shutdown (code=exited, status=0/SUCCESS)
Process: 2131 ExecStart=/usr/bin/lxd activateifneeded (code=exited, status=1/FAILURE)
Main PID: 2131 (code=exited, status=1/FAILURE)
May 22 15:58:07 titan systemd[1]: Starting LXD - container startup/shutdown...
May 22 15:58:07 titan lxd[2131]: Error: Get http://unix.socket/1.0: dial unix /var/lib/lxd/unix.socket: connect: no such file or directory
May 22 15:58:07 titan systemd[1]: lxd-containers.service: Main process exited, code=exited, status=1/FAILURE
May 22 15:58:07 titan systemd[1]: lxd-containers.service: Failed with result 'exit-code'.
May 22 15:58:07 titan systemd[1]: Failed to start LXD - container startup/shutdown.
Workaround:
[root@titan lxd]# pwd
/var/lib/lxd
[root@titan lxd]# ln -s /run/lxd.socket unix.socket
[root@titan lxd]# systemctl start lxd-containers
[root@titan lxd]# systemctl status lxd-containers
? lxd-containers.service - LXD - container startup/shutdown
Loaded: loaded (/usr/lib/systemd/system/lxd-containers.service; enabled; vendor preset: disabled)
Active: active (exited) since Tue 2018-05-22 15:58:37 CEST; 2s ago
Docs: man:lxd(1)
Process: 1905 ExecStop=/usr/libexec/lxd/shutdown (code=exited, status=0/SUCCESS)
Process: 2149 ExecStart=/usr/bin/lxd activateifneeded (code=exited, status=0/SUCCESS)
Main PID: 2149 (code=exited, status=0/SUCCESS)
May 22 15:58:36 titan systemd[1]: Starting LXD - container startup/shutdown...
May 22 15:58:37 titan systemd[1]: Started LXD - container startup/shutdown.
When building lxd.spec with release 3.6, the go test of github.com/lxc/lxd/lxd aborts with:
Executing(%check): /bin/sh -e /var/tmp/rpm-tmp.R1L9ov
+ umask 022
+ cd /builddir/build/BUILD
+ cd lxd-3.7
+ export GOPATH=/builddir/build/BUILDROOT/lxd-3.6-0.1.fc28.x86_64//usr/share/gocode:/usr/share/gocode
+ GOPATH=/builddir/build/BUILDROOT/lxd-3.6-0.1.fc28.x86_64//usr/share/gocode:/usr/share/gocode
+ unset LXD_SOCKET
+ export CGO_CPPFLAGS=-I/builddir/build/BUILDROOT/lxd-3.6-0.1.fc28.x86_64/usr/include/lxd/
+ CGO_CPPFLAGS=-I/builddir/build/BUILDROOT/lxd-3.6-0.1.fc28.x86_64/usr/include/lxd/
+ export CGO_LDFLAGS=-L/builddir/build/BUILDROOT/lxd-3.6-0.1.fc28.x86_64/usr/lib64/lxd/
+ CGO_LDFLAGS=-L/builddir/build/BUILDROOT/lxd-3.6-0.1.fc28.x86_64/usr/lib64/lxd/
+ export LD_LIBRARY_PATH=/builddir/build/BUILDROOT/lxd-3.6-0.1.fc28.x86_64/usr/lib64/lxd/
+ LD_LIBRARY_PATH=/builddir/build/BUILDROOT/lxd-3.6-0.1.fc28.x86_64/usr/lib64/lxd/
+ go test -buildmode pie -compiler gc -v -tags=libsqlite3 -ldflags ' -extldflags '\''-Wl,-z,relro -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld '\''' github.com/lxc/lxd/lxc
[...]
ok github.com/lxc/lxd/lxc 0.031s
+ go test -buildmode pie -compiler gc -v -tags=libsqlite3 -ldflags ' -extldflags '\''-Wl,-z,relro -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld '\''' github.com/lxc/lxd/lxd
[...]
=== RUN TestContainerTestSuite/TestContainer_findIdmap_mixed
=== RUN TestContainerTestSuite/TestContainer_findIdmap_raw
--- FAIL: TestContainerTestSuite (1.28s)
--- PASS: TestContainerTestSuite/TestContainer_IsPrivileged_Privileged (0.08s)
--- PASS: TestContainerTestSuite/TestContainer_IsPrivileged_Unprivileged (0.06s)
--- PASS: TestContainerTestSuite/TestContainer_LoadFromDB (0.09s)
--- PASS: TestContainerTestSuite/TestContainer_LogPath (0.07s)
--- PASS: TestContainerTestSuite/TestContainer_Path_Regular (0.07s)
--- PASS: TestContainerTestSuite/TestContainer_Path_Snapshot (0.06s)
--- PASS: TestContainerTestSuite/TestContainer_ProfilesDefault (0.07s)
--- FAIL: TestContainerTestSuite/TestContainer_ProfilesMulti (0.04s)
require.go:765:
Error Trace: container_test.go:55
Error: Expected nil, but got: Failed to create profile: NOT NULL constraint failed: profiles.project_id
Test: TestContainerTestSuite/TestContainer_ProfilesMulti
Messages: Failed to create the unprivileged profile.
--- PASS: TestContainerTestSuite/TestContainer_ProfilesOverwriteDefaultNic (0.08s)
--- PASS: TestContainerTestSuite/TestContainer_Rename (0.08s)
--- PASS: TestContainerTestSuite/TestContainer_findIdmap_isolated (0.11s)
--- PASS: TestContainerTestSuite/TestContainer_findIdmap_maxed (0.28s)
--- PASS: TestContainerTestSuite/TestContainer_findIdmap_mixed (0.11s)
--- PASS: TestContainerTestSuite/TestContainer_findIdmap_raw (0.07s)
[...]
FAIL
FAIL github.com/lxc/lxd/lxd 30.574s
BUILDSTDERR: error: Bad exit status from /var/tmp/rpm-tmp.R1L9ov (%check)
BUILDSTDERR: Bad exit status from /var/tmp/rpm-tmp.R1L9ov (%check)
The build system is a Fedora 28 with golang-1.10.5-1.fc28.x86_64. Same issue happens with lxd-3.7 release.
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
Django
The Web framework for perfectionists with deadlines.
Laravel
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
Microsoft
Open source projects and samples from Microsoft.
Google
Google ❤️ Open Source for everyone.
Alibaba
Alibaba Open Source for everyone
D3
Data-Driven Documents codes.
Tencent
China tencent open source team.