[Users] Openvz 7 cgroup problem in Centos 8 container

[Peter Schultze]

On Fri, 19 Jun 2020, Vasily Averin wrote:

> please report about problems via https://bugs.openvz.org
> also please tell us which kernel version was used on affected node.

Reported under https://bugs.openvz.org/browse/OVZ-7216


It turns out that the problem is almost certainly a systemd + NIS + PAM
issue also occurring upstream in CentOS 8, not only in OpenVZ containers,
as discussed here:

https://github.com/systemd/systemd/issues/12702

This appears to be still unresolved to date.

Enabling nscd as a work-around seems to alleviate the login delays (most 
of the time).

>
> Thank you,
> 	Vasily Averin
>
> On 6/19/20 12:32 AM, Peter Schultze wrote:
>> Hello,
>> 
>> in a Centos 8 container installed from the template centos-8-x86_64-ez-7.0.0-6.vz7
>> and configured as an NIS client:
>> 
>> user login by ssh is delayed by 15 to 30 seconds and accompanied by the following error messages:
>> 
>> systemd[797]: Failed to create /user.slice/user-10042.slice/user at 10042.service/init.scope control group: Permission denied
>> systemd[797]: Failed to allocate manager object: Permission denied
>> 
>> This appears to be related to the fact that /sys/fs/cgroup/user.slice does not exist and /sys/fs/cgroup is mounted read-only:
>> 
>> # mount | grep cgroup
>> none on /sys/fs/cgroup type tmpfs (ro,nosuid,nodev,noexec)
>> 
>> Is this a known problem, and is there a fix or work-around?
>> 
>> Thanks,  Peter S.
>> 
>> _______________________________________________
>> Users mailing list
>> Users at openvz.org
>> https://lists.openvz.org/mailman/listinfo/users
> _______________________________________________
> Users mailing list
> Users at openvz.org
> https://lists.openvz.org/mailman/listinfo/users

--
Peter Schultze
UCLA Computer Science Department                    310-825-9929