Package: util-linux
Version: 2.20.1-5.5
Severity: normal
[+cc docker people]
When using docker (or LXC in general), mountpoints need to be
non-shared, i.e. private, otherwise lxc will fail in the pivot_root()
syscall.
systemd ≥ 195 makes mountpoints shared by default.
The recommended fix by upstream of both lxc and systemd is to run
“mount --make-rprivate /” after booting. In CoreOS, this command is part
of the docker.service file.
mount(8) in the version currently in Debian (2.20.1) provides the
--make-rprivate flag, but due to a bug in the code does not actually
call mount(2) with MS_REC set, so only the root mount point (/) will be
changed to private, not all child mount points (when running mount
--make-rprivate /).
with util-linux-2.20.1:
root# strace -f mount --make-rprivate / 2>&1 | grep 'mount('
mount("/dev/vda1", "/", "none", MS_PRIVATE, "errors=remount-ro") = 0
with util-linux-2.24:
root# strace -f ./mount --make-rprivate / 2>&1 | grep 'mount('
mount("none", "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0
Can you please package the new upstream version so that this bugfix will
be available and the docker package can start depending on mount >= 2.24
instead of adding ugly workarounds please? Thanks!
-- System Information:
Debian Release: 7.0
APT prefers testing
APT policy: (990, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: armel
i386
Kernel: Linux 3.12.3 (SMP w/8 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages util-linux depends on:
ii debconf [debconf-2.0] 1.5.51
ii dpkg 1.16.12
ii initscripts 2.88dsf-43
ii install-info 4.13a.dfsg.1-10
ii libblkid1 2.20.1-5.3
ii libc6 2.17-93
ii libncurses5 5.9+20130504-1
ii libselinux1 2.1.13-1
ii libslang2 2.2.4-15
ii libtinfo5 5.9+20130504-1
ii libuuid1 2.20.1-5.3
ii lsb-base 4.1+Debian8
ii tzdata 2012j-1
ii zlib1g 1:1.2.8.dfsg-1
util-linux recommends no packages.
Versions of packages util-linux suggests:
ii console-tools 1:0.2.3dbs-70
ii dosfstools 3.0.13-1
pn util-linux-locales <none>
-- debconf information excluded
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
