LinuxQuestions.org
Visit Jeremy's Blog.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Containers
User Name
Password
Linux - Containers This forum is for the discussion of all topics relating to Linux containers. Docker, LXC, LXD, runC, containerd, CoreOS, Kubernetes, Mesos, rkt, and all other Linux container platforms are welcome.

Notices


Reply
  Search this Thread
Old 03-18-2020, 12:18 PM   #1
Wh0DeyNation
LQ Newbie
 
Registered: Mar 2020
Posts: 3

Rep: Reputation: Disabled
cgroup v2 error


On one of my older machines I place VMware ESXi on it to start becoming familiar with VMware.

I wanted to build a linux server and decided to go with Fedora since I know it is pretty similar to RedHat which is what I work with at work. Iwas trying to install the:

LXD container on it which seemed successful until I ran the command

lxd init

but I am receiving an issue saying:

Warning: cgroup v2 is not fully supported yet. proceeding with partial confinement dropping privs did not work.

I read on line to use systemd.unified_cgroup_hierachy=0 to fix the issue but did kept saying "command not found". I am a little new to Linux but definetly new to containers. Was just wondering if someone had an idea or could point me in the right direction.
 
Old 05-28-2020, 07:39 AM   #2
cyphar
LQ Newbie
 
Registered: May 2020
Location: Sydney
Distribution: openSUSE
Posts: 4

Rep: Reputation: Disabled
If you're just playing with LXD, then you can safely ignore the warning. It means that some aspects of the container won't be as securely contained (cgroups are responsible for enforcing things like CPU and memory limits) but if you're just learning about containers and Linux, it's really not a deal-breaker.

The systemd.unified_cgroup_hierachy=0 thing you've read online isn't a command, it's a kernel cmdline option. This is one way systemd gets configured (it reads the cmdline during system boot). If you really want to you can set it on Fedora with the command
Code:
sudo grubby --update-kernel=ALL --args="systemd.unified_cgroup_hierachy=0"
and then rebooting. What this option does is tell system to not use cgroupv2 exclusively (which is commonly referred to as the "unified cgroup hierarchy") and instead to use a "hybrid" mode which uses cgroupv1 (which all container runtimes support, while most container runtimes have only gained cgroupv2 support very recently).
 
1 members found this post helpful.
Old 05-28-2020, 06:22 PM   #3
syg00
LQ Veteran
 
Registered: Aug 2003
Location: Australia
Distribution: Lots ...
Posts: 21,128

Rep: Reputation: 4121Reputation: 4121Reputation: 4121Reputation: 4121Reputation: 4121Reputation: 4121Reputation: 4121Reputation: 4121Reputation: 4121Reputation: 4121Reputation: 4121
Impressive answer - informative and clear.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Cannot apply cgroup filters with tc command Centos5 edcorona Red Hat 0 02-29-2012 03:47 PM
cgroup socket(PF_NETLINK, SOCK_DGRAM, 11) = -1 EPROTONOSUPPORT olexandr.klymenko Linux - Kernel 2 12-14-2011 07:34 AM
cgroup olexandr.klymenko Linux - Server 0 12-13-2011 10:29 AM
Alternative to 200 lines kernel patch, /sys/fs/cgroup/cpu missing Linux.tar.gz Slackware 27 11-29-2010 09:40 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Containers

All times are GMT -5. The time now is 11:05 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration