If you shutdown an unprivileged lxc container, which is using systemd as PID 1, systemd asserts with the following error:

systemd[1]: Assertion 'sd_id128_randomize(&id) >= 0' failed at ../src/core/dbus.c:688, function bus_on_connection(). Aborting.
systemd[1]: Caught <ABRT>, dumped core as pid 15711.
systemd[1]: Freezing execution.
systemctl[15703]: Failed to execute operation: Connection reset by peer

/dev/urandom is a bind mount from the host system. the findmnt output is

TARGET                                  SOURCE                                                  FSTYPE     OPTIONS
/                                       /dev/sda1[/home/michael/.local/share/lxc/debian/rootfs] ext4       rw,relatime,errors=remount-ro,data=ordered
|-/run                                  tmpfs                                                   tmpfs      rw,nosuid,nodev,mode=755,uid=624288,gid=624288
| `-/run/lock                           tmpfs                                                   tmpfs      rw,nosuid,nodev,noexec,relatime,size=5120k,uid=624288,gid=624288
|-/dev                                  none                                                    tmpfs      rw,nodev,relatime,size=492k,mode=755,uid=624288,gid=624288
| |-/dev/pts                            devpts                                                  devpts     rw,relatime,gid=624293,mode=620,ptmxmode=666
| |-/dev/tty1                           devpts[/0]                                              devpts     rw,relatime,gid=624293,mode=620,ptmxmode=666
| |-/dev/tty2                           devpts[/1]                                              devpts     rw,relatime,gid=624293,mode=620,ptmxmode=666
| |-/dev/tty3                           devpts[/2]                                              devpts     rw,relatime,gid=624293,mode=620,ptmxmode=666
| |-/dev/tty4                           devpts[/3]                                              devpts     rw,relatime,gid=624293,mode=620,ptmxmode=666
| |-/dev/shm                            tmpfs                                                   tmpfs      rw,nosuid,nodev,uid=624288,gid=624288
| |-/dev/mqueue                         mqueue                                                  mqueue     rw,nodev,relatime
| |-/dev/console                        udev[/console]                                          devtmpfs   rw,relatime,size=10240k,nr_inodes=93429,mode=755
| | `-/dev/console                      devpts[/0]                                              devpts     rw,nosuid,noexec,relatime,gid=5,mode=620,ptmxmode=000
| |-/dev/full                           udev[/full]                                             devtmpfs   rw,relatime,size=10240k,nr_inodes=93429,mode=755
| |-/dev/null                           udev[/null]                                             devtmpfs   rw,relatime,size=10240k,nr_inodes=93429,mode=755
| |-/dev/random                         udev[/random]                                           devtmpfs   rw,relatime,size=10240k,nr_inodes=93429,mode=755
| |-/dev/tty                            udev[/tty]                                              devtmpfs   rw,relatime,size=10240k,nr_inodes=93429,mode=755
| |-/dev/urandom                        udev[/urandom]                                          devtmpfs   rw,relatime,size=10240k,nr_inodes=93429,mode=755
| `-/dev/zero                           udev[/zero]                                             devtmpfs   rw,relatime,size=10240k,nr_inodes=93429,mode=755
|-/proc                                 proc                                                    proc       rw,nosuid,nodev,noexec,relatime
| |-/proc/sys                           proc[/sys]                                              proc       ro,nosuid,nodev,noexec,relatime
| | `-/proc/sys/net                     proc[/sys/net]                                          proc       rw,nosuid,nodev,noexec,relatime
| |-/proc/sysrq-trigger                 proc[/sysrq-trigger]                                    proc       ro,nosuid,nodev,noexec,relatime
| |-/proc/cpuinfo                       lxcfs[/proc/cpuinfo]                                    fuse.lxcfs rw,nosuid,nodev,relatime,user_id=0,group_id=0,allow_other
| |-/proc/diskstats                     lxcfs[/proc/diskstats]                                  fuse.lxcfs rw,nosuid,nodev,relatime,user_id=0,group_id=0,allow_other
| |-/proc/meminfo                       lxcfs[/proc/meminfo]                                    fuse.lxcfs rw,nosuid,nodev,relatime,user_id=0,group_id=0,allow_other
| |-/proc/stat                          lxcfs[/proc/stat]                                       fuse.lxcfs rw,nosuid,nodev,relatime,user_id=0,group_id=0,allow_other
| |-/proc/swaps                         lxcfs[/proc/swaps]                                      fuse.lxcfs rw,nosuid,nodev,relatime,user_id=0,group_id=0,allow_other
| `-/proc/uptime                        lxcfs[/proc/uptime]                                     fuse.lxcfs rw,nosuid,nodev,relatime,user_id=0,group_id=0,allow_other
`-/sys                                  sysfs                                                   sysfs      rw,nosuid,nodev,noexec,relatime
  `-/sys                                sysfs                                                   sysfs      ro,nosuid,nodev,noexec,relatime
    |-/sys/devices/virtual/net          sysfs                                                   sysfs      rw,nodev,relatime
    | `-/sys/devices/virtual/net        sysfs[/devices/virtual/net]                             sysfs      rw,nosuid,nodev,noexec,relatime
    |-/sys/fs/fuse/connections          fusectl                                                 fusectl    rw,relatime
    `-/sys/fs/cgroup                    cgroup_root                                             tmpfs      rw,nosuid,nodev,noexec,relatime,size=10240k,mode=755,uid=624288,gid=624288
      |-/sys/fs/cgroup/blkio            lxcfs[/cgroup/blkio]                                    fuse.lxcfs rw,nosuid,nodev,relatime,user_id=0,group_id=0,allow_other
      |-/sys/fs/cgroup/cpu,cpuacct      lxcfs[/cgroup/cpu,cpuacct]                              fuse.lxcfs rw,nosuid,nodev,relatime,user_id=0,group_id=0,allow_other
      |-/sys/fs/cgroup/cpuset           lxcfs[/cgroup/cpuset]                                   fuse.lxcfs rw,nosuid,nodev,relatime,user_id=0,group_id=0,allow_other
      |-/sys/fs/cgroup/devices          lxcfs[/cgroup/devices]                                  fuse.lxcfs rw,nosuid,nodev,relatime,user_id=0,group_id=0,allow_other
      |-/sys/fs/cgroup/freezer          lxcfs[/cgroup/freezer]                                  fuse.lxcfs rw,nosuid,nodev,relatime,user_id=0,group_id=0,allow_other
      |-/sys/fs/cgroup/systemd          lxcfs[/cgroup/name=systemd]                             fuse.lxcfs rw,nosuid,nodev,relatime,user_id=0,group_id=0,allow_other
      |-/sys/fs/cgroup/net_cls,net_prio lxcfs[/cgroup/net_cls,net_prio]                         fuse.lxcfs rw,nosuid,nodev,relatime,user_id=0,group_id=0,allow_other
      `-/sys/fs/cgroup/perf_event       lxcfs[/cgroup/perf_event]                               fuse.lxcfs rw,nosuid,nodev,relatime,user_id=0,group_id=0,allow_other

Uh oh!

systemd umount /dev/urandom on shutdown, leading to asserts e.g. in lxc #4810

Description

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions