Hi, Have you tried again after a while. I don't think that this is related to the uid/gid mappings. In order for the download template to work you should have a default lxc config for your unprivileged user configured which would list the uid/gid mapping you want to use, e.g.
# Container specific configuration lxc.id_map = u 0 165536 65536 lxc.id_map = g 0 165536 65536 and that's the mapping lxc would use so it shouldn't get confused by overlapping mappings for one and the same user. Also, I can't reproduce this by using overlapping mappings. Christian On Thu, Jan 05, 2017 at 10:08:31AM -0000, Luke wrote: > I have a suspicion that the error is related to the uid/gid mappings. I > need several mappings for different containers. It all starts to creep > up on any machine configured like so: > > /etc/subuid > ------------------------ > root:100000:65536 > root:33:1 > root:100034:65503 > root:503:1 > root:100504:65033 > ------------------------ > > /etc/subgid > ------------------------ > root:100000:65536 > root:33:1 > root:100034:65503 > root:109:1 > root:100110:65427 > ------------------------ > > My hunch is that the download script fails to recognize which mapping it > should use for the container filesystem it is extracting onto the disk. > > -- > You received this bug notification because you are a member of Ubuntu > containers team, which is subscribed to lxc in Ubuntu. > Matching subscriptions: lxc > https://bugs.launchpad.net/bugs/1646462 > > Title: > lxc container download error (possibly HSTS related) > > Status in lxc package in Ubuntu: > Confirmed > > Bug description: > LXC cannot download image, seems like a server error: > > ~# lxc-create -t download -n test > Setting up the GPG keyring > Downloading the image index > ERROR: Failed to download > http://images.linuxcontainers.org//meta/1.0/index-user > lxc-create: lxccontainer.c: create_run_template: 1290 container creation > template for test failed > lxc-create: tools/lxc_create.c: main: 318 Error creating container test > > Trying to download the file with wget gets the file OK with minor > complaints: > > ~# wget -O /dev/null > 'http://images.linuxcontainers.org//meta/1.0/index-user' > URL transformed to HTTPS due to an HSTS policy > --2016-12-01 12:36:58-- > https://images.linuxcontainers.org//meta/1.0/index-user > Resolving images.linuxcontainers.org (images.linuxcontainers.org)... > 91.189.88.37, 91.189.91.21 > Connecting to images.linuxcontainers.org > (images.linuxcontainers.org)|91.189.88.37|:443... connected. > HTTP request sent, awaiting response... 301 Moved Permanently > Location: https://uk.images.linuxcontainers.org/meta/1.0/index-user > [following] > --2016-12-01 12:36:58-- > https://uk.images.linuxcontainers.org/meta/1.0/index-user > Resolving uk.images.linuxcontainers.org (uk.images.linuxcontainers.org)... > 91.189.88.37 > Connecting to uk.images.linuxcontainers.org > (uk.images.linuxcontainers.org)|91.189.88.37|:443... connected. > HTTP request sent, awaiting response... 200 OK > Length: 9102 (8.9K) > Saving to: ‘/dev/null’ > > Seems like some SSL problem in the lxc-create binary, specifically the > HSTS issue mentioned by wget. Maybe a newly introduced HSTS policy > breaks the package? > > ProblemType: Bug > DistroRelease: Ubuntu 16.10 > Package: lxc 2.0.5-0ubuntu1.2 > ProcVersionSignature: Ubuntu 4.8.0-28.30-generic 4.8.6 > Uname: Linux 4.8.0-28-generic x86_64 > NonfreeKernelModules: zfs zunicode zcommon znvpair zavl > ApportVersion: 2.20.3-0ubuntu8 > Architecture: amd64 > Date: Thu Dec 1 12:28:28 2016 > InstallationDate: Installed on 2016-10-14 (47 days ago) > InstallationMedia: Ubuntu-Server 16.10 "Yakkety Yak" - Release amd64 > (20161012.1) > PackageArchitecture: all > SourcePackage: lxc > UpgradeStatus: No upgrade log present (probably fresh install) > dnsmasq.conf: > dhcp-host=vold,10.0.3.10 > dhcp-host=sftp,10.0.3.11 > > To manage notifications about this bug go to: > https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1646462/+subscriptions -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1646462 Title: lxc container download error (possibly HSTS related) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1646462/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs