Hi,

Have you tried again after a while. I don't think that this is related to the
uid/gid mappings. In order for the download template to work you should have a
default lxc config for your unprivileged user configured which would list the
uid/gid mapping you want to use, e.g.

# Container specific configuration
lxc.id_map = u 0 165536 65536
lxc.id_map = g 0 165536 65536

and that's the mapping lxc would use so it shouldn't get confused by overlapping
mappings for one and the same user. Also, I can't reproduce this by using
overlapping mappings.

Christian

On Thu, Jan 05, 2017 at 10:08:31AM -0000, Luke wrote:
> I have a suspicion that the error is related to the uid/gid mappings. I
> need several mappings for different containers. It all starts to creep
> up on any machine configured like so:
> 
> /etc/subuid
> ------------------------
> root:100000:65536
> root:33:1
> root:100034:65503
> root:503:1
> root:100504:65033
> ------------------------
> 
> /etc/subgid
> ------------------------
> root:100000:65536
> root:33:1
> root:100034:65503
> root:109:1
> root:100110:65427
> ------------------------
> 
> My hunch is that the download script fails to recognize which mapping it
> should use for the container filesystem it is extracting onto the disk.
> 
> -- 
> You received this bug notification because you are a member of Ubuntu
> containers team, which is subscribed to lxc in Ubuntu.
> Matching subscriptions: lxc
> https://bugs.launchpad.net/bugs/1646462
> 
> Title:
>   lxc container download error (possibly HSTS related)
> 
> Status in lxc package in Ubuntu:
>   Confirmed
> 
> Bug description:
>   LXC cannot download image, seems like a server error:
> 
>   ~# lxc-create -t download -n test
>   Setting up the GPG keyring
>   Downloading the image index
>   ERROR: Failed to download 
> http://images.linuxcontainers.org//meta/1.0/index-user
>   lxc-create: lxccontainer.c: create_run_template: 1290 container creation 
> template for test failed
>   lxc-create: tools/lxc_create.c: main: 318 Error creating container test
> 
>   Trying to download the file with wget gets the file OK with minor
>   complaints:
> 
>   ~# wget -O /dev/null 
> 'http://images.linuxcontainers.org//meta/1.0/index-user'
>   URL transformed to HTTPS due to an HSTS policy
>   --2016-12-01 12:36:58--  
> https://images.linuxcontainers.org//meta/1.0/index-user
>   Resolving images.linuxcontainers.org (images.linuxcontainers.org)... 
> 91.189.88.37, 91.189.91.21
>   Connecting to images.linuxcontainers.org 
> (images.linuxcontainers.org)|91.189.88.37|:443... connected.
>   HTTP request sent, awaiting response... 301 Moved Permanently
>   Location: https://uk.images.linuxcontainers.org/meta/1.0/index-user 
> [following]
>   --2016-12-01 12:36:58--  
> https://uk.images.linuxcontainers.org/meta/1.0/index-user
>   Resolving uk.images.linuxcontainers.org (uk.images.linuxcontainers.org)... 
> 91.189.88.37
>   Connecting to uk.images.linuxcontainers.org 
> (uk.images.linuxcontainers.org)|91.189.88.37|:443... connected.
>   HTTP request sent, awaiting response... 200 OK
>   Length: 9102 (8.9K)
>   Saving to: ‘/dev/null’
> 
>   Seems like some SSL problem in the lxc-create binary, specifically the
>   HSTS issue mentioned by wget. Maybe a newly introduced HSTS policy
>   breaks the package?
> 
>   ProblemType: Bug
>   DistroRelease: Ubuntu 16.10
>   Package: lxc 2.0.5-0ubuntu1.2
>   ProcVersionSignature: Ubuntu 4.8.0-28.30-generic 4.8.6
>   Uname: Linux 4.8.0-28-generic x86_64
>   NonfreeKernelModules: zfs zunicode zcommon znvpair zavl
>   ApportVersion: 2.20.3-0ubuntu8
>   Architecture: amd64
>   Date: Thu Dec  1 12:28:28 2016
>   InstallationDate: Installed on 2016-10-14 (47 days ago)
>   InstallationMedia: Ubuntu-Server 16.10 "Yakkety Yak" - Release amd64 
> (20161012.1)
>   PackageArchitecture: all
>   SourcePackage: lxc
>   UpgradeStatus: No upgrade log present (probably fresh install)
>   dnsmasq.conf:
>    dhcp-host=vold,10.0.3.10
>    dhcp-host=sftp,10.0.3.11
> 
> To manage notifications about this bug go to:
> https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1646462/+subscriptions

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1646462

Title:
  lxc container download error (possibly HSTS related)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1646462/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to