runc fails to spawn the container due to /sys write about runc HOT 7 CLOSED

@rajasec Yeah, this is know issue. There was PR in libcontainer repo for fix, it will be migrated soon. @estesp was author IIRC

from runc.

Thanks Alexander Morozov.
I'll wait for the fix to happen..
Is anything related to cgroups not able to modify the /sys params ?

from runc.

@rajasec this is related to an older cgroup limitation that didn't allow certain parameters (such as memory.swappiness) to be written in cgroup hierarchies if you aren't in the parent/root cgroup. This is no longer a restriction in current kernels, but if you are running 14.04LTS, for example, you hit this issue.

More information is available here: https://github.com/docker/libcontainer/issues/639#issue-89392076

from runc.

@estesp

Even I tried with the latest changes part of libcontainer in Docker project still failed
I've ensured that following file changes which got merged and available in my repository.

cgroups/fs/memory.go
cgroups/systemd/apply_systemd.go
configs/cgroup.go

Error thrown:
[8] System error: write /sys/fs/cgroup/memory/docker/ac23ecfc90b503e1d5c73b699bc3fef8ca99eadd07452d850de73fa4b029d688/memory.swappiness: invalid argument
make: *** [all] Error 1

I've created bug in libcontainer project.
"memory.swapiness fails to get updated in Docker 1.8_dev build #648"

from runc.

@rajasec the Docker PR which fixes the same problem has not been merged yet--the change you would need for running Docker (which it appears you are from your log above) is in moby/moby#14030 which has not been merged yet (and changes the default template in the native execdriver in Docker)

from runc.

Thanks estesp.
I could successfully launch the container using runc today. I tried with basic ubuntu image and with container.json having the rootfs of ubuntu image. I could launch the container with the simple bash shell running inside the container
My kernel version : 3.13 ( based on 14.04 LTS).
Looks interesting to work

As I mentioned in another bug created, vendor directory is not available, neither update.sh will be available for vendor specific things.
I have manually pulled the changes inside libcontainer for compilation.

Very light weight without docker daemon

Thanks
Rajasec

from runc.

Fixed by #20

from runc.