From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from firstgate.proxmox.com (firstgate.proxmox.com [212.224.123.68]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by lists.proxmox.com (Postfix) with ESMTPS id 42CF17A142 for ; Thu, 28 Oct 2021 16:03:46 +0200 (CEST) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id 3A9E121862 for ; Thu, 28 Oct 2021 16:03:46 +0200 (CEST) Received: from mail-qk1-x72c.google.com (mail-qk1-x72c.google.com [IPv6:2607:f8b0:4864:20::72c]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by firstgate.proxmox.com (Proxmox) with ESMTPS id 4FD3F21854 for ; Thu, 28 Oct 2021 16:03:45 +0200 (CEST) Received: by mail-qk1-x72c.google.com with SMTP id bj31so5873994qkb.2 for ; Thu, 28 Oct 2021 07:03:45 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=message-id:date:mime-version:user-agent:subject:content-language:to :references:from:in-reply-to:content-transfer-encoding; bh=laGI1cgPBQ3Gu+EZkDeeI7Y4ozExDxJ8pUL/Qr/358g=; b=M+f6OJ8AJo8qiCxXej75Ae7xBtA5lJUJRcI6+W53DV4h77gnDyQeqLtNxLcM8b14cd DlfeRpXUEoMoPdU2aC9o9y5Djv3J4OndcdDG1erz9zSsEXmp43g+ES0OARdsN/OZGXqt M0RtOKioN3Ic69LVDvA8J09xv725Bnx3U2ke0iL47qr2nSJq5GohWsGegBt+LwnXy6Vc 225rfteaqD6FqO7/sKKYM7zo8JauRlh/D4yYnCRUU+c1v550Koer2NStnPwkhoX6qOcv YoSWv2wrVxc4BlD+80St+Zh0WGJscTyd8VNRsr1szRkasxSXszqugbDQ61ExVOdj/SKq E9mQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:message-id:date:mime-version:user-agent:subject :content-language:to:references:from:in-reply-to :content-transfer-encoding; bh=laGI1cgPBQ3Gu+EZkDeeI7Y4ozExDxJ8pUL/Qr/358g=; b=kpBfrI3PCL0Z6Ex2OOeCMvsit4zt9yjhPK7xDUydPY8q6Mxb9Fxu74ORxw+ugt2E7Z cJ3Ep2cqneb8cnNIb8ntvluo8S0mFHwGZJbkC7F2iiMQ5scqGbM4IgljkHxfOqo4NjvK LuGD58FTjXEUTXNYjytnsdL3AqraFxKdXu3u5ZHGsuFNIdZyYR7pC83TqFRT/M8F86Rp O7pMWwa9gIRB8mZ+pME0SQYGb03R/2rmc4N0ImQ8LSh0gg9SSAKePDkxz9rUXECufmK/ 9Jhwr3+osldtQy8NKhn4SxUJgkJIIDbcOv62ivtQGyTgqsavz0QrqmAKdwjWaP3o7vu9 ciWA== X-Gm-Message-State: AOAM5310m2MMcOCR4AMngsSGhKLiLKluZH82EXn9fL+Tp7yHRaanWusO ORguAT7JlZ6C2KVJMTGWXzfkA9kfRgI= X-Google-Smtp-Source: ABdhPJwd1iTqkls+a3ejhOaWkAOwtax+aYBrNgUq0rvYUAAowmvwKd3LLmzVV67C7EMDOKwaVQSoRg== X-Received: by 2002:a37:606:: with SMTP id 6mr3687685qkg.18.1635429817358; Thu, 28 Oct 2021 07:03:37 -0700 (PDT) Received: from [10.207.57.53] ([85.196.190.131]) by smtp.gmail.com with ESMTPSA id o190sm1940289qka.16.2021.10.28.07.03.35 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Thu, 28 Oct 2021 07:03:36 -0700 (PDT) Message-ID: <2f73acbf-f8bc-ca4d-1e2d-f2208cacff08@gmail.com> Date: Thu, 28 Oct 2021 17:03:33 +0300 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Thunderbird/91.2.0 Content-Language: en-GB To: Proxmox VE user list , Marco Gaiarin References: From: Todor Petkov In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-SPAM-LEVEL: Spam detection results: 0 BAYES_00 -1.9 Bayes spam probability is 0 to 1% DKIM_SIGNED 0.1 Message has a DKIM or DK signature, not necessarily valid DKIM_VALID -0.1 Message has at least one valid DKIM or DK signature DKIM_VALID_AU -0.1 Message has a valid DKIM or DK signature from author's domain DKIM_VALID_EF -0.1 Message has a valid DKIM or DK signature from envelope-from domain FREEMAIL_FROM 0.001 Sender email is commonly abused enduser mail provider NICE_REPLY_A -2.905 Looks like a legit reply (A) RCVD_IN_DNSWL_NONE -0.0001 Sender listed at https://www.dnswl.org/, no trust SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record URIBL_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [mail-archive.com, proxmox.com] Subject: Re: [PVE-User] Bullseye LXC and logrotate... X-BeenThere: pve-user@lists.proxmox.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Proxmox VE user list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 Oct 2021 14:03:46 -0000 On Thu, 2021-10-28 1:36 PM, Marco Gaiarin wrote: > > Setup a pretty standard LXC container on bullseye, on a PVE7 server. > > Every time logrotate run on LXC i got on LXC: > > Oct 28 00:00:59 vbaculaacpn1 systemd[106367]: logrotate.service: Failed to set up mount namespacing: /run/systemd/unit-root/proc: Permission denied > Oct 28 00:00:59 vbaculaacpn1 systemd[106367]: logrotate.service: Failed at step NAMESPACE spawning /usr/sbin/logrotate: Permission denied > Oct 28 00:00:59 vbaculaacpn1 systemd[1]: logrotate.service: Main process exited, code=exited, status=226/NAMESPACE > Oct 28 00:00:59 vbaculaacpn1 systemd[1]: logrotate.service: Failed with result 'exit-code'. > Oct 28 00:00:59 vbaculaacpn1 systemd[1]: Failed to start Rotate log files. > > And on PVE: > > Oct 28 00:00:59 beppe kernel: [280466.359176] audit: type=1400 audit(1635372059.192:31): apparmor="DENIED" operation="mount" info="failed flags match" error=-13 profile="lxc-102_" name="/run/systemd/unit-root/proc/" pid=3059401 comm="(ogrotate)" fstype="proc" srcname="proc" flags="rw, nosuid, nodev, noexec" > > > ?! I've tried to google around a bit, but found nothing. > > > Thanks. > Hello, check https://www.mail-archive.com/debian-bugs-dist@lists.debian.org/msg1713773.html and https://forum.proxmox.com/threads/logrotate-issue-in-buster-lxc.56726/ There are other links in Google when you search for Failed at step NAMESPACE spawning pve logrotate Regards