Bug 2379760 - Unprivileged containers fails to start after upgrade to 6.0.4-1
Summary: Unprivileged containers fails to start after upgrade to 6.0.4-1
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: lxc
Version: 41
Hardware: x86_64
OS: Linux
unspecified
high
Target Milestone: ---
Assignee: Thomas Moschny
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-07-13 13:40 UTC by Allan
Modified: 2025-07-21 01:18 UTC (History)
2 users (show)

Fixed In Version: lxc-6.0.4-3.fc43 lxc-6.0.4-3.fc42 lxc-6.0.4-3.fc41
Clone Of:
Environment:
Last Closed: 2025-07-13 14:47:45 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Allan 2025-07-13 13:40:52 UTC
After upgrading lxc from 6.0.3-1.fc41 to 6.0.4-1.fc41, unprivileged containers fails to start with the following error appearing in LXC logs:

ERROR    start - ../src/lxc/start.c:lxc_spawn:1832 - Permission denied - Failed to preserve net namespace

Reproducible: Always

Steps to Reproduce:
1. Create a new unprivileged lxc (lxc-create --name lxc-debian --template download)
2. Try to start it (lxc start --foreground lxc-debian)
Actual Results:
LXC fails to start, returning the error "start - ../src/lxc/start.c:lxc_spawn:1832 - Permission denied - Failed to preserve net namespace"

Expected Results:
Unprivileged containers should start normally.

Additional Information:
This issue started after a lxc package upgrade. F41 with lxc version 6.0.3-1.fc41 do not fails to start unprivileged containers.

It seems that this issue was discussed with the upstream maintainers:
- https://discuss.linuxcontainers.org/t/unprivileged-container-used-to-run-after-update-error-wait-on-daemonized-start-837-received-container-state-aborting-instead-of-running/23478
- https://github.com/lxc/lxc/issues/4556
- https://github.com/lxc/lxc/pull/4536

Comment 1 Fedora Update System 2025-07-13 14:43:22 UTC
FEDORA-2025-03a09c556a (lxc-6.0.4-3.fc43) has been submitted as an update to Fedora 43.
https://bodhi.fedoraproject.org/updates/FEDORA-2025-03a09c556a

Comment 2 Fedora Update System 2025-07-13 14:47:45 UTC
FEDORA-2025-03a09c556a (lxc-6.0.4-3.fc43) has been pushed to the Fedora 43 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 3 Fedora Update System 2025-07-13 15:32:39 UTC
FEDORA-2025-c0730a899d (lxc-6.0.4-3.fc41) has been submitted as an update to Fedora 41.
https://bodhi.fedoraproject.org/updates/FEDORA-2025-c0730a899d

Comment 4 Fedora Update System 2025-07-13 15:32:40 UTC
FEDORA-2025-211196cddc (lxc-6.0.4-3.fc42) has been submitted as an update to Fedora 42.
https://bodhi.fedoraproject.org/updates/FEDORA-2025-211196cddc

Comment 5 Fedora Update System 2025-07-14 02:35:05 UTC
FEDORA-2025-211196cddc has been pushed to the Fedora 42 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2025-211196cddc`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2025-211196cddc

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 6 Fedora Update System 2025-07-14 22:51:03 UTC
FEDORA-2025-c0730a899d has been pushed to the Fedora 41 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2025-c0730a899d`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2025-c0730a899d

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 7 Fedora Update System 2025-07-21 01:01:39 UTC
FEDORA-2025-211196cddc (lxc-6.0.4-3.fc42) has been pushed to the Fedora 42 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 8 Fedora Update System 2025-07-21 01:18:27 UTC
FEDORA-2025-c0730a899d (lxc-6.0.4-3.fc41) has been pushed to the Fedora 41 stable repository.
If problem still persists, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.