systemd-logind.service: Failed to set up mount namespacing: /run/systemd/unit-root/: Permission denied

[Harald Dunkel]

Hi folks,

I get this for running an LXC container on Debian 11 (LXC 5.0.2) and
on Debian 12 (LXC 5.0.3):


root@nfs01:~# systemctl --failed
UNIT LOAD ACTIVE SUB DESCRIPTION
● systemd-logind.service loaded failed failed User Login Management

LOAD = Reflects whether the unit definition was properly loaded.
ACTIVE = The high-level unit activation state, i.e. generalization of SUB.
SUB = The low-level unit activation state, values depend on unit type.
1 loaded units listed.
root@nfs01:~# journalctl -b -u systemd-logind
-- Journal begins at Fri 2021-12-31 10:24:33 CET, ends at Tue 2023-12-26 21:17:07 CET. --
Dec 26 21:12:54 nfs01.example.com systemd[1]: Starting User Login Management...
Dec 26 21:12:54 nfs01.example.com systemd[112]: systemd-logind.service: Failed to set up mount namespacing: /run/systemd/unit-root/: Permission denied
Dec 26 21:12:54 nfs01.example.com systemd[112]: systemd-logind.service: Failed at step NAMESPACE spawning /lib/systemd/systemd-logind: Permission denied
Dec 26 21:12:54 nfs01.example.com systemd[1]: systemd-logind.service: Main process exited, code=exited, status=226/NAMESPACE
Dec 26 21:12:54 nfs01.example.com systemd[1]: systemd-logind.service: Failed with result 'exit-code'.
Dec 26 21:12:54 nfs01.example.com systemd[1]: Failed to start User Login Management.
Dec 26 21:12:54 nfs01.example.com systemd[1]: systemd-logind.service: Scheduled restart job, restart counter is at 1.
Dec 26 21:12:54 nfs01.example.com systemd[1]: Stopped User Login Management.
Dec 26 21:12:54 nfs01.example.com systemd[1]: Starting User Login Management...
Dec 26 21:12:54 nfs01.example.com systemd[130]: systemd-logind.service: Failed to set up mount namespacing: /run/systemd/unit-root/: Permission denied
Dec 26 21:12:54 nfs01.example.com systemd[130]: systemd-logind.service: Failed at step NAMESPACE spawning /lib/systemd/systemd-logind: Permission denied
Dec 26 21:12:54 nfs01.example.com systemd[1]: systemd-logind.service: Main process exited, code=exited, status=226/NAMESPACE
Dec 26 21:12:54 nfs01.example.com systemd[1]: systemd-logind.service: Failed with result 'exit-code'.
Dec 26 21:12:54 nfs01.example.com systemd[1]: Failed to start User Login Management.
Dec 26 21:12:54 nfs01.example.com systemd[1]: systemd-logind.service: Scheduled restart job, restart counter is at 2.
Dec 26 21:12:54 nfs01.example.com systemd[1]: Stopped User Login Management.
Dec 26 21:12:54 nfs01.example.com systemd[1]: Starting User Login Management...
Dec 26 21:12:54 nfs01.example.com systemd[133]: systemd-logind.service: Failed to set up mount namespacing: /run/systemd/unit-root/: Permission denied
Dec 26 21:12:54 nfs01.example.com systemd[133]: systemd-logind.service: Failed at step NAMESPACE spawning /lib/systemd/systemd-logind: Permission denied
Dec 26 21:12:54 nfs01.example.com systemd[1]: systemd-logind.service: Main process exited, code=exited, status=226/NAMESPACE
Dec 26 21:12:54 nfs01.example.com systemd[1]: systemd-logind.service: Failed with result 'exit-code'.
Dec 26 21:12:54 nfs01.example.com systemd[1]: Failed to start User Login Management.
Dec 26 21:12:54 nfs01.example.com systemd[1]: systemd-logind.service: Scheduled restart job, restart counter is at 3.
Dec 26 21:12:54 nfs01.example.com systemd[1]: Stopped User Login Management.
Dec 26 21:12:54 nfs01.example.com systemd[1]: Starting User Login Management...
Dec 26 21:12:54 nfs01.example.com systemd[136]: systemd-logind.service: Failed to set up mount namespacing: /run/systemd/unit-root/: Permission denied
Dec 26 21:12:54 nfs01.example.com systemd[136]: systemd-logind.service: Failed at step NAMESPACE spawning /lib/systemd/systemd-logind: Permission denied
Dec 26 21:12:54 nfs01.example.com systemd[1]: systemd-logind.service: Main process exited, code=exited, status=226/NAMESPACE
Dec 26 21:12:54 nfs01.example.com systemd[1]: systemd-logind.service: Failed with result 'exit-code'.
Dec 26 21:12:54 nfs01.example.com systemd[1]: Failed to start User Login Management.
Dec 26 21:12:54 nfs01.example.com systemd[1]: systemd-logind.service: Scheduled restart job, restart counter is at 4.
Dec 26 21:12:54 nfs01.example.com systemd[1]: Stopped User Login Management.
Dec 26 21:12:54 nfs01.example.com systemd[1]: Starting User Login Management...
Dec 26 21:12:54 nfs01.example.com systemd[139]: systemd-logind.service: Failed to set up mount namespacing: /run/systemd/unit-root/: Permission denied
Dec 26 21:12:54 nfs01.example.com systemd[139]: systemd-logind.service: Failed at step NAMESPACE spawning /lib/systemd/systemd-logind: Permission denied
Dec 26 21:12:54 nfs01.example.com systemd[1]: systemd-logind.service: Main process exited, code=exited, status=226/NAMESPACE
Dec 26 21:12:54 nfs01.example.com systemd[1]: systemd-logind.service: Failed with result 'exit-code'.
Dec 26 21:12:54 nfs01.example.com systemd[1]: Failed to start User Login Management.
Dec 26 21:12:54 nfs01.example.com systemd[1]: systemd-logind.service: Scheduled restart job, restart counter is at 5.
Dec 26 21:12:54 nfs01.example.com systemd[1]: Stopped User Login Management.
Dec 26 21:12:54 nfs01.example.com systemd[1]: systemd-logind.service: Start request repeated too quickly.
Dec 26 21:12:54 nfs01.example.com systemd[1]: systemd-logind.service: Failed with result 'exit-code'.
Dec 26 21:12:54 nfs01.example.com systemd[1]: Failed to start User Login Management.


Nesting is enabled, so I wonder what is it trying to tell me? Other services
are fine. apparmor is installed.

Every insightful comment is highly appreciated

Harri

[Harald Dunkel]

Found it, see https://github.com/lxc/lxc/issues/4371. Kernel
bug, not fixed for 6.1.66 yet.