From debbugs-submit-bounces@debbugs.gnu.org Wed Aug 30 04:38:20 2023 Received: (at submit) by debbugs.gnu.org; 30 Aug 2023 08:38:20 +0000 Received: from localhost ([127.0.0.1]:52091 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1qbGiS-0000VT-3D for submit@debbugs.gnu.org; Wed, 30 Aug 2023 04:38:20 -0400 Received: from lists.gnu.org ([2001:470:142::17]:50754) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1qbGiQ-0000VG-IU for submit@debbugs.gnu.org; Wed, 30 Aug 2023 04:38:19 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1qbGiA-0003RX-Ff for bug-guix@gnu.org; Wed, 30 Aug 2023 04:38:04 -0400 Received: from mout.web.de ([217.72.192.78]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1qbGi7-0005Eq-Qw for bug-guix@gnu.org; Wed, 30 Aug 2023 04:38:02 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=web.de; s=s29768273; t=1693384678; x=1693989478; i=arne_bab@web.de; bh=voZ2UThe7VGBpwjT1Kfwl3jJZ3NXFX0gG6ovFedTnhc=; h=X-UI-Sender-Class:From:To:Subject:Date; b=NE4y33VDwmlZz4OaH/K5HO/xqHQabQAcKHZUO06i+xdEBe5d8HX5UHIZGBj4l5OpcRPcd/U h4DOzutcCsHo2XcODFZBthemziDahUKm6rT12Vc05U0PIOCP7NVh8m+NB4CjuWvs5rcJJbmEM slRBKJYu1Fcq7VVZqvbZgGm7iDJmaMSH36+NEjZYaZ/m8pXdvwfMoS0oRUhz94mkf7c4VQg7l 1DmRrF7UDI2Ya8p/FzJqoNzo3H3OV8ShB9F1dpiA0Bd8jL2aCgkoeO8DfD148z16JApfOz5sq +S8ShApbkjKEXx+o+753p2KIO1NtA8/PSOkxRnauAY5W+Bj0T8pw== X-UI-Sender-Class: 814a7b36-bfc1-4dae-8640-3722d8ec6cd6 Received: from fluss ([84.165.27.117]) by smtp.web.de (mrweb105 [213.165.67.124]) with ESMTPSA (Nemesis) id 1N8Elm-1pfoV402zY-014GtU; Wed, 30 Aug 2023 10:37:58 +0200 User-agent: mu4e 1.10.5; emacs 29.0.92 From: "Dr. Arne Babenhauserheide" To: bug-guix@gnu.org Subject: cgroups increase to 65555 preventing docker to start Date: Wed, 30 Aug 2023 10:31:36 +0200 Message-ID: <87msy9sz6j.fsf@web.de> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" X-Provags-ID: V03:K1:t94dg0NcqoVTPro3Uqiz9r/qwNdZkCUsHoKzh04sr2Lr/k79nO0 UTQaJ3Ha6ShVXdcpdnSwXU7Ugp20R97zD3uDlx3zWwKuUaU/c9CWTJWM2/qKgCVDZuyuSfZ oyyeWCIY7vLBsa7uXqt4nSomtITkqdYfkXwfVzm5jmEFzP7C4f34Hq4oE/zNrJsqlNcANQ9 kPvk1R1avn7uoImSxnatg== X-Spam-Flag: NO UI-OutboundReport: notjunk:1;M01:P0:GwUVeJWt2Dc=;KF8xxmFfyCag3r24t5xG3p9GYtV Zl9H7J/x7n/IwYFC84eHFQ/QRqFSI54PbjawWpqIlBq195V3ZraMw0Qd7JOhMYg5tt6mOKm9p UstFxylskGBwG2+zDkCTF/QRcA6rr8WhAcr2twcdHw2PyfZcS65OcAjsHzJWATLlXsBjuyHqX 4HjxRqo9QnILkOlb9gSIOn+21v5iHK1jg1utYz5ajPYIZsusKhowz8r4PVanilEfJOUa12ugv Ks9zlc4EKBQBLRcpLKltXziu89mHUxK+fTOp4XdYOvPHp9YdQjmQkI+I0Q/1D36hbgIELJsNQ s10YZUwfxKDczFnAB8R0FO2bKlHoevUAs/F/GVdS7/dE0kzddwwehuAi73sY1YWOhhJcELq21 2eN5AV4s+quTaJGaTOd3xehpHl3RBW8CfRIts1itX29arKDaXtaN0zgKP9MIe/pgNk2E+IeCF yafsWoRkW9uuNTWtt4uQcpqhLFnLVkAPBBIqKurdsxK6gctXPpU2FxWPyGopnDLWbHMdWh4I7 Xms2hIesdm0P+FcUXGS3hrnTCMcColBWsaYyGe6vl6l8bpJpSI7hBQcoDldeOzPEDVfiu96EK EMbKbzQOUP6Btz34j8wjGY3Bulht8uFXxAR+d0YtwwquNi4R62Lfc5xaHaU3puV7hDfX/Y2qC EiSwU7Vk2ftpJU2SfWBdoG6kRXF6oKT6sAcwH8MzDuEd+72Onws5OiNoSDolEQPvJ/8vIAT95 HnmUpwfblYibf0uRjXk/g7B2IH4rkxDFX4VbfgYUPnO6gGmIwyeBMbmtBcZW5qIdPCDMLP39V fR/Xw2a6kROjd9jNohwFx+PVrwrJ73qCecss9EWi8BwpDFmrNG9lB5ZqNsTmt40vipmzXGluZ OQ9lwntbTyUyEMzJBmy5ILV+ho4hyHPHfxUU5lqkhyDnI7x9PXZXckLk4wF0KpB6wRaO8TmaE 6X7Egg== Received-SPF: pass client-ip=217.72.192.78; envelope-from=arne_bab@web.de; helo=mout.web.de X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H5=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: 1.0 (+) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.0 (/) --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi, when I try to start a docker container, I get the erro docker: Error response from daemon: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: unable to apply cgroup configuration: mkdir /sys/fs/cgroup/docker/dac0a619a2d6f980095c74a6a2b82a31bbfef721d5bc80fe9a9fb= 94fe48cfa37: no space left on device: unknown. Checking the number of cgroups shows that it=E2=80=99s at the limit (if I r= ead it right, no guarantees for that, cgroups isn=E2=80=99t my strong side), but this is after only a few days of uptime: $ find /sys/fs/cgroup/ -type d | wc -l 65534 $ cat /proc/cgroups=20 #subsys_name hierarchy num_cgroups enabled cpuset 0 65536 1 cpu 0 65536 1 cpuacct 0 65536 1 blkio 0 65536 1 memory 0 65536 1 devices 0 65536 1 freezer 0 65536 1 net_cls 0 65536 1 perf_event 0 65536 1 net_prio 0 65536 1 hugetlb 0 65536 1 pids 0 65536 1 misc 0 65536 1 Is Guix using cgroups for building? Is something broken in Guix or do I have to hunt elsewhere for fixes? Other people seem to have similar problems, but only after massive docker usage: https://github.com/AlexiaChen/rocker/issues/3#issuecomment-1128946114 Best wishes, Arne =2D-=20 Unpolitisch sein hei=C3=9Ft politisch sein, ohne es zu merken. draketo.de --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQJEBAEBCAAuFiEE801qEjXQSQPNItXAE++NRSQDw+sFAmTu/+UQHGFybmVfYmFi QHdlYi5kZQAKCRAT741FJAPD65E7EADQHq9rSqPrtwpv+McIPQ+FVxEp/vT+jKUK NCFx6AZfvf/acLVh+R5w+LoMjNmdgJR2ORQdLpauhSZTX4CFHCLnpZ1ZTQNSTdJ9 17mZhnFeRIS5p9WjuPGLqMnsaQ0WfI/UZguF7SiaZO/WbRS7E3YcVcTKQe/HM3Ce pJKwa+U0mJeG7XS7xqsLfHQxkRO/dS7UgkdnleF8msmTlIAbASmyOOVV98rT1jZs 34btb7b1aLhJGC3xUuwo5Lckr6vQUNpqrpzEK1U0lQ9f/Az24E4fhkT2SErR6ZVv oUMPRP40fiEzltkuBLWbtn7ydAeWCgAAHdPsTD6qTm8c/rrGC8n0MOO6DV2/LJHa FdTJGxy/iLmzXF1b7JKMhJJUJ4Ok0DMgx3AYcIIYik6Wgg7a+kV8YvJtDDg+6mF8 TZEfceu2L8zYh3nNnaF8J68sok7BSpWUh/Jtao6ZaZs2lkF8wQnO7i3LnhuR5q+Y 6z1ojbB60kP2VlbU/nIVyL9BZuSrixePh7A4fw/qwo4G88xgD1Gxat767koBDd01 k4tw2nJb67E8WqGM0jCuD2I7CcFOBiKwK3sNNU2Yg+VAOhrqfyhpZiUD67QtDVk+ Ba0XwvomWaD4FUDzXTDzxZfYkFIUe93Q4yhx+3ObDJxgfRyDKO5z3gXFCuf6Ue+A dAo5SOHfdojEBAEBCAAuFiEE3Si95tmHXKvOSosd3M8NswvBBUgFAmTu/+UQHGFy bmVfYmFiQHdlYi5kZQAKCRDczw2zC8EFSP4dA/wM5LHB95sOmzrcN8CkD2ik77nv AZ3TWyl5Heb1qlT8fciiLSmTAJ74eewGN0F3CusmD+iuxiRkokuFojiotwf+Agr9 97UvLE3XBieoW0rgpqYJZPsSlnGZ0sGf2LcOcy2VAY8TOe1X8zSDbxB6tBl/TbMT 5rcpIiKdlrdGmf0zaA== =Sdy7 -----END PGP SIGNATURE----- --=-=-=-- From debbugs-submit-bounces@debbugs.gnu.org Sat Sep 02 16:32:57 2023 Received: (at 65614) by debbugs.gnu.org; 2 Sep 2023 20:32:57 +0000 Received: from localhost ([127.0.0.1]:38734 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1qcXIf-00079l-BR for submit@debbugs.gnu.org; Sat, 02 Sep 2023 16:32:57 -0400 Received: from captaincourier.marvid.fr ([51.159.66.78]:37798) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1qcXIZ-00079T-DH for 65614@debbugs.gnu.org; Sat, 02 Sep 2023 16:32:55 -0400 From: Sergiu Ivanov DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=colimite.fr; s=mail; t=1693686724; bh=46IQhDLzGK1EgWH3u4GFxL0RGrkHFucMRHJ21WkuMKw=; h=From:To:Subject:Date; b=DFKifhygHz+2nQcLh3aXx/AMY3hsVJyoyIht7fqftBP4Qfoc4m5IDdsDgJbJLsieY e8GH7u7zNYbcJYgFe9OaI+tn+CoRHQNy/8LdbwZ7/ha8PpprNiH+s2QbBx4u9k/G7U zRISVLtqMm3PJjLI4+iuxobGlnY8lC0plscDuS2Q= To: 65614@debbugs.gnu.org Subject: cgroups increase to 65555 preventing docker to start Date: Sat, 02 Sep 2023 22:25:43 +0200 Message-ID: <87fs3wiaf0.fsf@colimite.fr> MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 65614 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hello, I have a similar issue, related to cgroups as well: after a recent update, I cannot start my LXC containers anymore. This is how I generally start one of my LXC containers, called arch: # lxc-start -n arch I add the -F switch to get the following more detailed error log: lxc-start: arch: cgroups/cgfsng.c: cg_legacy_set_data: 2678 No such file or directory - Failed to setup limits for the "devices" controller. The controller seems to be unused by "cgfsng" cgroup driver or not enabled on the cgroup hierarchy lxc-start: arch: cgroups/cgfsng.c: cgfsng_setup_limits_legacy: 2745 No such file or directory - Failed to set "devices.deny" to "a" lxc-start: arch: start.c: lxc_spawn: 1896 Failed to setup legacy device cgroup controller limits lxc-start: arch: start.c: __lxc_start: 2074 Failed to spawn container "arch" lxc-start: arch: tools/lxc_start.c: main: 306 The container failed to start lxc-start: arch: tools/lxc_start.c: main: 311 Additional information can be obtained by setting the --logfile and --logpriority options I tried tinkering a little with the cgroups-related options in my container configuration, but that had zero impact on the error message. - Sergiu