How to set up working uid/gid allocations for LXC/LXD/Vagrant?Vagrant-lxc container not startingWhat is the difference between Docker, LXD, and LXCHow do I make changes to an lxc template?Uid/Gid privileged LXC container : systemd lxc-start failed on ubuntu 16.04Running a program inside an LXC container with a specific userHow to boot a virtual machine from a regular folder?How to manage users and passwords in LXC containers?How to implement iptables on lxc-container?How to trust self-signed LXD daemon TLS certificate in Vagrant?What to put in /etc/subu,gid to run unprivileged containers?

Is it appropriate to ask a former professor to order a library book for me through ILL?

School performs periodic password audits. Is my password compromised?

Tool for measuring readability of English text

Should I apply for my boss's promotion?

Why does a car's steering wheel get lighter with increasing speed

Short story about an infectious indestructible metal bar?

Is there a math expression equivalent to the conditional ternary operator?

How to make sure I'm assertive enough in contact with subordinates?

How does learning spells work when leveling a multiclass character?

I am the person who abides by rules but breaks the rules . Who am I

What is the oldest European royal house?

How does a sound wave propagate?

I am the light that shines in the dark

Is this Paypal Github SDK reference really a dangerous site?

What does *dead* mean in *What do you mean, dead?*?

Interpretation of linear regression interaction term plot

What does it take to become a wilderness skills guide as a business?

Why do phishing e-mails use faked e-mail addresses instead of the real one?

Did Amazon pay $0 in taxes last year?

Boss Telling direct supervisor I snitched

A vote on the Brexit backstop

What exactly is the meaning of "fine wine"?

Does an unused member variable take up memory?

Professor forcing me to attend a conference, I can't afford even with 50% funding



How to set up working uid/gid allocations for LXC/LXD/Vagrant?


Vagrant-lxc container not startingWhat is the difference between Docker, LXD, and LXCHow do I make changes to an lxc template?Uid/Gid privileged LXC container : systemd lxc-start failed on ubuntu 16.04Running a program inside an LXC container with a specific userHow to boot a virtual machine from a regular folder?How to manage users and passwords in LXC containers?How to implement iptables on lxc-container?How to trust self-signed LXD daemon TLS certificate in Vagrant?What to put in /etc/subu,gid to run unprivileged containers?













0















What I've tried:



$ vagrant up --no-provision
Bringing machine 'default' up with 'lxd' provider...
==> default: Machine has not been created yet, starting...
==> default: The host machine does not support LXD synced folders.
==> default:
==> default: To use this feature, you must first configure ID mappings for the
==> default: current user in /etc/subuid and /etc/subgid. For more information,
==> default: refer to `vagrant lxd shadow --help`.
==> default:
==> default: Importing LXC image...
[fails]


OK, let's try the advice:



$ vagrant lxd shadow --help
In order to use shared folders, you must first add the effective user
and group ID (which are currently 1000 and 985) to the host machine's
subuid(5) and subgid(5) files:

$ echo root:1000:1 | sudo tee -a /etc/subuid
$ echo root:985:1 | sudo tee -a /etc/subgid

For more information about these commands, and user/group ID mapping in
general, refer to this article:

https://insights.ubuntu.com/2017/06/15/custom-user-mappings-in-lxd-containers/
$ echo root:1000:1 | sudo tee -a /etc/subuid
root:1000:1
$ echo root:985:1 | sudo tee -a /etc/subgid
root:985:1
$ vagrant up --no-provision
Bringing machine 'default' up with 'lxd' provider...
==> default: Machine has not been created yet, starting...
==> default: Importing LXC image...
==> default: Failed to create container
The provider was unable to create a container for the 'default' VM.

The underlying error message was: Create container: Create LXC container: LXD doesn't have a uid/gid allocation. In this mode, only privileged containers are supported

The LXD logs may contain more information about the cause of this failure.


OK, I'm getting desperate. Let's try a bunch of suggestions from all over the place (1, 2, 3). No luck. In all cases I get one of the two above messages. The messages are also weird, because to me they look like they mean the exact same thing, so I don't know which of the solutions get "further" than the other. Especially since the advice all over the place for both messages seem to be the same thing I've tried a dozen times by now, including at least:



  • printf "%s:100000:65536n" lxd root | sudo tee /etc/subgid /etc/subuid

  • printf "%s:1:65536n" lxd root | sudo tee /etc/subgid /etc/subuid

  • printf "%s:1:65536n" root vagrant $USER | sudo tee /etc/subgid /etc/subuid

I've made sure to sudo systemctl restart lxd before every vagrant up.




printf "%s:1000:65536n" lxd root | sudo tee /etc/subuid && printf "%s:985:65536n" lxd root | sudo tee /etc/subgid gave me an interestingly different error message:




Create LXC container: Host id is in the range of subids




No idea why that is an error or how to fix it.




In case it's relevant, the vagrant user on the box is UID/GID 1000/1000 (after starting it with VirtualBox).










share|improve this question




























    0















    What I've tried:



    $ vagrant up --no-provision
    Bringing machine 'default' up with 'lxd' provider...
    ==> default: Machine has not been created yet, starting...
    ==> default: The host machine does not support LXD synced folders.
    ==> default:
    ==> default: To use this feature, you must first configure ID mappings for the
    ==> default: current user in /etc/subuid and /etc/subgid. For more information,
    ==> default: refer to `vagrant lxd shadow --help`.
    ==> default:
    ==> default: Importing LXC image...
    [fails]


    OK, let's try the advice:



    $ vagrant lxd shadow --help
    In order to use shared folders, you must first add the effective user
    and group ID (which are currently 1000 and 985) to the host machine's
    subuid(5) and subgid(5) files:

    $ echo root:1000:1 | sudo tee -a /etc/subuid
    $ echo root:985:1 | sudo tee -a /etc/subgid

    For more information about these commands, and user/group ID mapping in
    general, refer to this article:

    https://insights.ubuntu.com/2017/06/15/custom-user-mappings-in-lxd-containers/
    $ echo root:1000:1 | sudo tee -a /etc/subuid
    root:1000:1
    $ echo root:985:1 | sudo tee -a /etc/subgid
    root:985:1
    $ vagrant up --no-provision
    Bringing machine 'default' up with 'lxd' provider...
    ==> default: Machine has not been created yet, starting...
    ==> default: Importing LXC image...
    ==> default: Failed to create container
    The provider was unable to create a container for the 'default' VM.

    The underlying error message was: Create container: Create LXC container: LXD doesn't have a uid/gid allocation. In this mode, only privileged containers are supported

    The LXD logs may contain more information about the cause of this failure.


    OK, I'm getting desperate. Let's try a bunch of suggestions from all over the place (1, 2, 3). No luck. In all cases I get one of the two above messages. The messages are also weird, because to me they look like they mean the exact same thing, so I don't know which of the solutions get "further" than the other. Especially since the advice all over the place for both messages seem to be the same thing I've tried a dozen times by now, including at least:



    • printf "%s:100000:65536n" lxd root | sudo tee /etc/subgid /etc/subuid

    • printf "%s:1:65536n" lxd root | sudo tee /etc/subgid /etc/subuid

    • printf "%s:1:65536n" root vagrant $USER | sudo tee /etc/subgid /etc/subuid

    I've made sure to sudo systemctl restart lxd before every vagrant up.




    printf "%s:1000:65536n" lxd root | sudo tee /etc/subuid && printf "%s:985:65536n" lxd root | sudo tee /etc/subgid gave me an interestingly different error message:




    Create LXC container: Host id is in the range of subids




    No idea why that is an error or how to fix it.




    In case it's relevant, the vagrant user on the box is UID/GID 1000/1000 (after starting it with VirtualBox).










    share|improve this question


























      0












      0








      0








      What I've tried:



      $ vagrant up --no-provision
      Bringing machine 'default' up with 'lxd' provider...
      ==> default: Machine has not been created yet, starting...
      ==> default: The host machine does not support LXD synced folders.
      ==> default:
      ==> default: To use this feature, you must first configure ID mappings for the
      ==> default: current user in /etc/subuid and /etc/subgid. For more information,
      ==> default: refer to `vagrant lxd shadow --help`.
      ==> default:
      ==> default: Importing LXC image...
      [fails]


      OK, let's try the advice:



      $ vagrant lxd shadow --help
      In order to use shared folders, you must first add the effective user
      and group ID (which are currently 1000 and 985) to the host machine's
      subuid(5) and subgid(5) files:

      $ echo root:1000:1 | sudo tee -a /etc/subuid
      $ echo root:985:1 | sudo tee -a /etc/subgid

      For more information about these commands, and user/group ID mapping in
      general, refer to this article:

      https://insights.ubuntu.com/2017/06/15/custom-user-mappings-in-lxd-containers/
      $ echo root:1000:1 | sudo tee -a /etc/subuid
      root:1000:1
      $ echo root:985:1 | sudo tee -a /etc/subgid
      root:985:1
      $ vagrant up --no-provision
      Bringing machine 'default' up with 'lxd' provider...
      ==> default: Machine has not been created yet, starting...
      ==> default: Importing LXC image...
      ==> default: Failed to create container
      The provider was unable to create a container for the 'default' VM.

      The underlying error message was: Create container: Create LXC container: LXD doesn't have a uid/gid allocation. In this mode, only privileged containers are supported

      The LXD logs may contain more information about the cause of this failure.


      OK, I'm getting desperate. Let's try a bunch of suggestions from all over the place (1, 2, 3). No luck. In all cases I get one of the two above messages. The messages are also weird, because to me they look like they mean the exact same thing, so I don't know which of the solutions get "further" than the other. Especially since the advice all over the place for both messages seem to be the same thing I've tried a dozen times by now, including at least:



      • printf "%s:100000:65536n" lxd root | sudo tee /etc/subgid /etc/subuid

      • printf "%s:1:65536n" lxd root | sudo tee /etc/subgid /etc/subuid

      • printf "%s:1:65536n" root vagrant $USER | sudo tee /etc/subgid /etc/subuid

      I've made sure to sudo systemctl restart lxd before every vagrant up.




      printf "%s:1000:65536n" lxd root | sudo tee /etc/subuid && printf "%s:985:65536n" lxd root | sudo tee /etc/subgid gave me an interestingly different error message:




      Create LXC container: Host id is in the range of subids




      No idea why that is an error or how to fix it.




      In case it's relevant, the vagrant user on the box is UID/GID 1000/1000 (after starting it with VirtualBox).










      share|improve this question
















      What I've tried:



      $ vagrant up --no-provision
      Bringing machine 'default' up with 'lxd' provider...
      ==> default: Machine has not been created yet, starting...
      ==> default: The host machine does not support LXD synced folders.
      ==> default:
      ==> default: To use this feature, you must first configure ID mappings for the
      ==> default: current user in /etc/subuid and /etc/subgid. For more information,
      ==> default: refer to `vagrant lxd shadow --help`.
      ==> default:
      ==> default: Importing LXC image...
      [fails]


      OK, let's try the advice:



      $ vagrant lxd shadow --help
      In order to use shared folders, you must first add the effective user
      and group ID (which are currently 1000 and 985) to the host machine's
      subuid(5) and subgid(5) files:

      $ echo root:1000:1 | sudo tee -a /etc/subuid
      $ echo root:985:1 | sudo tee -a /etc/subgid

      For more information about these commands, and user/group ID mapping in
      general, refer to this article:

      https://insights.ubuntu.com/2017/06/15/custom-user-mappings-in-lxd-containers/
      $ echo root:1000:1 | sudo tee -a /etc/subuid
      root:1000:1
      $ echo root:985:1 | sudo tee -a /etc/subgid
      root:985:1
      $ vagrant up --no-provision
      Bringing machine 'default' up with 'lxd' provider...
      ==> default: Machine has not been created yet, starting...
      ==> default: Importing LXC image...
      ==> default: Failed to create container
      The provider was unable to create a container for the 'default' VM.

      The underlying error message was: Create container: Create LXC container: LXD doesn't have a uid/gid allocation. In this mode, only privileged containers are supported

      The LXD logs may contain more information about the cause of this failure.


      OK, I'm getting desperate. Let's try a bunch of suggestions from all over the place (1, 2, 3). No luck. In all cases I get one of the two above messages. The messages are also weird, because to me they look like they mean the exact same thing, so I don't know which of the solutions get "further" than the other. Especially since the advice all over the place for both messages seem to be the same thing I've tried a dozen times by now, including at least:



      • printf "%s:100000:65536n" lxd root | sudo tee /etc/subgid /etc/subuid

      • printf "%s:1:65536n" lxd root | sudo tee /etc/subgid /etc/subuid

      • printf "%s:1:65536n" root vagrant $USER | sudo tee /etc/subgid /etc/subuid

      I've made sure to sudo systemctl restart lxd before every vagrant up.




      printf "%s:1000:65536n" lxd root | sudo tee /etc/subuid && printf "%s:985:65536n" lxd root | sudo tee /etc/subgid gave me an interestingly different error message:




      Create LXC container: Host id is in the range of subids




      No idea why that is an error or how to fix it.




      In case it's relevant, the vagrant user on the box is UID/GID 1000/1000 (after starting it with VirtualBox).







      lxc vagrant lxd vagrant-lxd






      share|improve this question















      share|improve this question













      share|improve this question




      share|improve this question








      edited 5 hours ago







      l0b0

















      asked 5 hours ago









      l0b0l0b0

      28.4k19120248




      28.4k19120248




















          0






          active

          oldest

          votes











          Your Answer








          StackExchange.ready(function()
          var channelOptions =
          tags: "".split(" "),
          id: "106"
          ;
          initTagRenderer("".split(" "), "".split(" "), channelOptions);

          StackExchange.using("externalEditor", function()
          // Have to fire editor after snippets, if snippets enabled
          if (StackExchange.settings.snippets.snippetsEnabled)
          StackExchange.using("snippets", function()
          createEditor();
          );

          else
          createEditor();

          );

          function createEditor()
          StackExchange.prepareEditor(
          heartbeatType: 'answer',
          autoActivateHeartbeat: false,
          convertImagesToLinks: false,
          noModals: true,
          showLowRepImageUploadWarning: true,
          reputationToPostImages: null,
          bindNavPrevention: true,
          postfix: "",
          imageUploader:
          brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
          contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
          allowUrls: true
          ,
          onDemand: true,
          discardSelector: ".discard-answer"
          ,immediatelyShowMarkdownHelp:true
          );



          );













          draft saved

          draft discarded


















          StackExchange.ready(
          function ()
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f505227%2fhow-to-set-up-working-uid-gid-allocations-for-lxc-lxd-vagrant%23new-answer', 'question_page');

          );

          Post as a guest















          Required, but never shown

























          0






          active

          oldest

          votes








          0






          active

          oldest

          votes









          active

          oldest

          votes






          active

          oldest

          votes















          draft saved

          draft discarded
















































          Thanks for contributing an answer to Unix & Linux Stack Exchange!


          • Please be sure to answer the question. Provide details and share your research!

          But avoid


          • Asking for help, clarification, or responding to other answers.

          • Making statements based on opinion; back them up with references or personal experience.

          To learn more, see our tips on writing great answers.




          draft saved


          draft discarded














          StackExchange.ready(
          function ()
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f505227%2fhow-to-set-up-working-uid-gid-allocations-for-lxc-lxd-vagrant%23new-answer', 'question_page');

          );

          Post as a guest















          Required, but never shown





















































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown

































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown







          Popular posts from this blog

          Word for a person who has no opinion about whether god existsWord for having a definite opinion while simultaneously withholding judgment?What's the opposite of “newcomer? Is ”veteran" OK?What do you call an “atheist” who might believe in an afterlife?What's a word for someone who wants to voice opinions but not have them challenged?Word for someone who dismisses contrary opinions as irrational?Somone who thinks they are overly special/out of the ordinaryIs there a word, phrase or idiom for “a person who is incapable of thinking about the future”?The belief that a god is human-likeA word for a non-famous person/thing you have heard a lot aboutAdjective for a person who enjoys taking care of their appearance

          What was this official D&D 3.5e Lovecraft-flavored rulebook?What was this set of RPG tools called?As a first-time DM should I let my players play complex character classes and roles?Nymph's Kiss and the RelationshipWhat was the name of this Cleric Prestige Class that shapes metal with its bare hands?Are the 3.5e Dragonlance books third party or official works?What's up with the domain Vile Darkness?What was this 80s book about RPGs?What was the name of this Werewolf band?What book had Rituals to “upgrade” animal companions to keep them viable at higher levels?What was this RPG that had rules for player-owned businesses?

          2017 IndyCar Series Contents Series news Teams and drivers Schedule Season summary Footnotes References External links Navigation menu"INDYCAR: Initial 2018 bodywork concepts unveiled"the original"IndyCar confirms switch to Performance Friction brakes in 2017""AJ Foyt Racing will switch to Chevy"the original"Carlos Munoz, Conor Daly will drive for AJ Foyt Racing""Zach Veach's Indy 500 Debut Confirmed with Foyt""No mass exodus from Honda after Ganassi switch""Ex-F1 driver Sato joins Andretti Autosport for 2017 IndyCar season""IndyCar's Ryan Hunter-Reay, sponsor DHL paired through 2020""hhgregg and Andretti Autosport announce partnership for key races in 2016""INDYCAR: Rossi re-signs with Andretti"the original"McLaren Formula 1 - Fernando Alonso to race at Indy 500 with McLaren, Honda and Andretti Autosport""Shank will finally take part in Indy 500 with Harvey, Andretti | MotorSportsTalk""Andretti adds Jack Harvey to Indy 500 field""Ganassi switches to Honda power for 2017""INDYCAR: Chilton returns to Ganassi"the original"IndyCar silly season: Who's going where in 2017?""INDYCAR: Kanaan, NTT Data return to Ganassi"the original"Kimball to remain at Ganassi for 2017""Coyne confirms Bourdais for 2017 IndyCar season""Davison to sub for Bourdais in Indy 500"the original"Gutierrez confirmed for Detroit IndyCar debut""Gutierrez returns with Coyne for rest of 2017 season""Vautier to drive for Coyne at Texas"the original"INDYCAR: Coyne confirms Jones for 2017"the original"Pippa Mann returns to Coyne for Indy 500""Karam, Dreyer & Reinbold teaming up again for Indianapolis 500""Pigot to return to Ed Carpenter Racing""Hildebrand confirmed as full-time Ed Carpenter driver""Veach to replace injured Hildebrand at Barber"the originalNew Team Harding Racing Enters Chaves for 101st Indianapolis 500"Juncos Racing Announces Entry in 101st Running of the Indianapolis 500 :: Juncos Racing""Juncos confirms Pigot for Indy 500""Saavedra confirmed in Juncos' second 500 entry"the original"Lazier confirms Indy 500 run after son's USF2000 debut"the original"Claman DeMelo to race for RLLR at Sonoma"the original"Rahal signs Servia and ace engineer for 2017""IndyCar: Aleshin returns with Schmidt"the original"Aleshin replaced by Saavedra for Toronto""Jack Harvey will pilot SPM No. 7 car at Watkins Glen, Sonoma""Jay Howard confirmed in Tony Stewart's supported SPM Indy entry""INDYCAR: Newgarden to wave the flag at Penske"the original"Pagenaud opts for No. 1 in 2017"the original"Penske confirms Newgarden for 2017""Montoya to stay with Team Penske in 2017""Target leaving IndyCar after 27 seasons with Chip Ganassi""Cavin: IndyCar could see complete driver/team shakeup in 2017""End of the road for KV Racing?""KV Racing confirms closure, equipment sold to Juncos""Juncos confirms IndyCar Series entry"the original"Juncos readies IndyCar program, aims for '17 500"the original"Harding Racing to add Texas, Pocono to schedule"the original"Sato signs with Andretti Autosport for 2017""INDYCAR: Aleshin in Doubt at SPM"the original"Long Beach notebook: JR Hildebrand breaks hand""Hildebrand cleared to return at Phoenix"the original"Bourdais to undergo surgery on multiple fractures""Aleshin loses Schmidt Peterson IndyCar ride""Saavedra in at SPM for Pocono, Gateway"the original"Bourdais to make return at Gateway"the original"The IndyCar Grand Prix no longer is sponsored by Angie's List""2017 IndyCar Series rulebook""2017 Verizon IndyCar Series Official Rulebook"Official websiteeeeee