Hey, On Mon, Nov 07, 2016 at 08:55:21AM -0800, Francois Marier wrote: > On 2016-11-07 at 08:17:09, Evgeni Golov wrote: > > Can you please post the outputs of > > cat /proc/1/mountinfo > > # cat mountinfo | grep cgroup > 26 16 0:22 / /sys/fs/cgroup ro,nosuid,nodev,noexec shared:9 - tmpfs tmpfs > ro,mode=755 > 27 26 0:23 / /sys/fs/cgroup/systemd rw,nosuid,nodev,noexec,relatime shared:10 > - cgroup2 cgroup rw > 29 26 0:25 / /sys/fs/cgroup/net_cls,net_prio rw,nosuid,nodev,noexec,relatime > shared:13 - cgroup cgroup rw,net_cls,net_prio > 30 26 0:26 / /sys/fs/cgroup/perf_event rw,nosuid,nodev,noexec,relatime > shared:14 - cgroup cgroup rw,perf_event > 31 26 0:27 / /sys/fs/cgroup/blkio rw,nosuid,nodev,noexec,relatime shared:15 - > cgroup cgroup rw,blkio > 32 26 0:28 / /sys/fs/cgroup/cpu,cpuacct rw,nosuid,nodev,noexec,relatime > shared:16 - cgroup cgroup rw,cpu,cpuacct > 33 26 0:29 / /sys/fs/cgroup/memory rw,nosuid,nodev,noexec,relatime shared:17 > - cgroup cgroup rw,memory > 34 26 0:30 / /sys/fs/cgroup/pids rw,nosuid,nodev,noexec,relatime shared:18 - > cgroup cgroup rw,pids > 35 26 0:31 / /sys/fs/cgroup/devices rw,nosuid,nodev,noexec,relatime shared:19 > - cgroup cgroup rw,devices > 36 26 0:32 / /sys/fs/cgroup/cpuset rw,nosuid,nodev,noexec,relatime shared:20 > - cgroup cgroup rw,cpuset > 37 26 0:33 / /sys/fs/cgroup/freezer rw,nosuid,nodev,noexec,relatime shared:21 > - cgroup cgroup rw,freezer > > > cat /proc/self/cgroup > > # cat /proc/self/cgroup > 9:freezer:/ > 8:cpuset:/ > 7:devices:/user.slice > 6:pids:/user.slice/user-1000.slice/user@1000.service > 5:memory:/user.slice > 4:cpu,cpuacct:/user.slice > 3:blkio:/user.slice > 2:perf_event:/ > 1:net_cls,net_prio:/ > 0::/user.slice/user-1000.slice/user@1000.service/gnome-terminal-server.service > > > I suspect that with kernel 4.8 systemd mounts th cgroup2 fs instead of > > old cgroup and this breaks libpam-cgfs :( > > > > See also https://github.com/lxc/lxc/issues/1280 > > Indeed that looks exactly like it.
Can you please try systemd 232-3? You should not need to pass systemd.legacy_systemd_cgroup_controller anymore as the offending change was reverted. Greets Evgeni
