Launching a privileged docker container in an LXD fails with this:
docker: Error response from daemon: linux runtime spec devices: lstat /dev/.lxc/proc/1482/fdinfo/12: no such file or directory.
Steps to reproduce:
lxc launch ubuntu-daily:16.04 docker -p default -p docker
lxc exec docker -- apt install docker.io -y
lxc exec docker bash
sudo curl -L git.io/scope -o /usr/local/bin/scope
sudo chmod a+x /usr/local/bin/scope
scope launch
Original guide: LXD 2.0: Docker in LXD
Bug report: Docker containers failing in /dev/.lxc/proc directory #2825 - GitHub
How to make it work?
A Docker image which behaves when confined by user namespaces, or alternatively make the parent LXD container a privileged container (security.privileged=true)
. Is it possible the issue is withscope
? Can you runlxc exec docker -- docker run --detach --name app carinamarina/hello-world-app
, or alternatively, does it work in a privileged container?security.privileged=true
). I've tried somehello-world
image in a privileged LXD - same problem. Don't have this config any more, moved to KVM.