-------- Message original --------
Sujet: Re: [libvirt] Lxc support
Date : Fri, 29 Oct 2010 13:13:16 +0200
De : Jean-Philippe Menil <jean-philippe.menil(a)univ-nantes.fr>
Répondre à : jean-philippe.menil(a)univ-nantes.fr
Organisation : IRTS - DSI - Université de Nantes
Pour : Daniel P. Berrange <berrange(a)redhat.com>
Le 29/10/2010 12:39, Daniel P. Berrange a écrit :
On Fri, Oct 29, 2010 at 12:27:59PM +0200, Jean-Philippe Menil wrote:
> Le 29/10/2010 12:00, Osier a écrit :
>> On 10/29/2010 04:42 PM, Jean-Philippe Menil wrote:
>>> Hi,
>>>
>>> i'm trying to test the lxc support in libvirt, but but libvirt failed to
>>> start container with error "lxcContainerAvailable:897 : clone call
>>> returned Operation not permitted, container support is not enabled"
>>>
>>
>> What's the kernel version you use? Just as the error message says, the
>> system call 'clone' failed, It's probly caused by lacking of kernel
>> support.
>>
>> At least you should make sure 'clone' support these flags:
>>
>> CLONE_NEWPID, CLONE_NEWNS, CLONE_NEWUTS, CLONE_NEWIPC, SIGCHLD
> thanks for your response.
> The kernel is a 2.6.36 wit hthe following:
> root@redbreast:/tmp# cat /boot/config-2.6.36-dsiun-1a | grep -i pid
> CONFIG_PROC_PID_CPUSET=y
> CONFIG_PID_NS=y
> # CONFIG_SPI_SPIDEV is not set
> CONFIG_HID_PID=y
You need to check for _NS= here, and want to see the following
$ grep _NS= /boot/config-2.6.34.6-54.fc13.x86_64
CONFIG_CGROUP_NS=y
CONFIG_UTS_NS=y
CONFIG_IPC_NS=y
CONFIG_USER_NS=y
CONFIG_PID_NS=y
CONFIG_NET_NS=y
Daniel
Sorry, forgot to cc the list
Ok,
So my kernel lokks fine:
root@redbreast:/tmp# cat /boot/config-2.6.36-dsiun-1a | grep _NS
CONFIG_CGROUP_NS=y
CONFIG_UTS_NS=y
CONFIG_IPC_NS=y
CONFIG_USER_NS=y
CONFIG_PID_NS=y
CONFIG_NET_NS=y
Libvirt was compiled with following:
--with-qemu --with-qemu-user=libvirt-qemu --with-qemu-group=kvm
--without-xen --without-openvz --without-avahi --without-sasl
--without-polkit --without-udev --without-hal --with-storage-fs
--with-storage-lvm --without-storage-iscsi --with-storage-disk
--with-init-scripts=none --without-numactl --without-selinux
--without-esx --without-libssh2 --without-capng --with-macvtap
--enable-debug --with-lxc