[Bug 1247299] Re: local provider deploys fail with 'install hook failed'

[James Page]

** Description changed:

- From within a LXC container, cgroup-lite failes to install. It appears
- that apparmor on the parent (Raring and Saucy thus far) is blocking the
- cgroup mount.
+ [Impact]
+ Unable to deploy charms under local provider on Raring/Saucy hosts.
  
+ [Test Case]
+ juju bootstrap
+ juju deploy mysql
+ (fails)
+ 
+ [Regression Potential]
+ Scope limited to local provider so limited.
+ 
+ [Original Bug Report]
+ From within a LXC container, cgroup-lite failes to install. It appears that apparmor on the parent (Raring and Saucy thus far) is blocking the cgroup mount.
  
  ubuntu at test2:~$ sudo apt-get -y install cgroup-lite
  Reading package lists... Done
- Building dependency tree       
+ Building dependency tree
  Reading state information... Done
  The following NEW packages will be installed:
-   cgroup-lite
+   cgroup-lite
  0 upgraded, 1 newly installed, 0 to remove and 8 not upgraded.
  Need to get 3,878 B of archives.
  After this operation, 50.2 kB of additional disk space will be used.
  Get:1 http://archive.ubuntu.com/ubuntu/ precise-updates/main cgroup-lite all 1.1.2 [3,878 B]
  Fetched 3,878 B in 0s (29.0 kB/s)
  Selecting previously unselected package cgroup-lite.
  (Reading database ... 47498 files and directories currently installed.)
  Unpacking cgroup-lite (from .../cgroup-lite_1.1.2_all.deb) ...
  Processing triggers for initramfs-tools ...
  update-initramfs: Generating /boot/initrd.img-3.2.0-55-virtual
  Processing triggers for ureadahead ...
  Setting up cgroup-lite (1.1.2) ...
  <4>init: cgroup-lite pre-start process (2819) terminated with status 32
  start: Job failed to start
  invoke-rc.d: initscript cgroup-lite, action "start" failed.
  dpkg: error processing cgroup-lite (--configure):
-  subprocess installed post-installation script returned error exit status 1
+  subprocess installed post-installation script returned error exit status 1
  No apport report written because MaxReports is reached already
  Errors were encountered while processing:
-  cgroup-lite
+  cgroup-lite
  E: Sub-process /usr/bin/dpkg returned an error code (1)
  
  ubuntu at test2:~$ dmesg | tail -n 10
  [ 1065.404885] device vethG0iqqC left promiscuous mode
  [ 1065.404887] lxcbr0: port 2(vethG0iqqC) entered disabled state
  [ 1150.155838] device vethkiYHDA entered promiscuous mode
  [ 1150.155892] IPv6: ADDRCONF(NETDEV_UP): vethkiYHDA: link is not ready
  [ 1150.169570] IPv6: ADDRCONF(NETDEV_CHANGE): vethkiYHDA: link becomes ready
  [ 1150.169598] lxcbr0: port 2(vethkiYHDA) entered forwarding state
  [ 1150.169602] lxcbr0: port 2(vethkiYHDA) entered forwarding state
  [ 1165.216112] lxcbr0: port 2(vethkiYHDA) entered forwarding state
  [ 1191.444421] type=1400 audit(1383347753.701:34): apparmor="DENIED" operation="mount" info="failed type match" error=-13 parent=14826 profile="lxc-container-default" name="/sys/fs/cgroup/cpuset/" pid=14834 comm="mount" fstype="cgroup" srcname="cgroup" flags="rw"
  [ 1191.445808] type=1400 audit(1383347753.705:35): apparmor="DENIED" operation="mount" info="failed type match" error=-13 parent=14826 profile="lxc-container-default" name="/sys/fs/cgroup/cpuset/" pid=14834 comm="mount" fstype="cgroup" srcname="cgroup" flags="ro"

** Changed in: juju-core (Ubuntu Saucy)
   Importance: Undecided => High

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to juju-core in Ubuntu.
https://bugs.launchpad.net/bugs/1247299

Title:
  local provider deploys fail with 'install hook failed'

To manage notifications about this bug go to:
https://bugs.launchpad.net/juju-core/+bug/1247299/+subscriptions