LXD and Docker containers nesting can help access /proc. Find out how from our experts. 

At Bobcares, we offer solutions for every query, big and small, as a part of our Docker Hosting Support.

Let’s take a look at how our Support Team is ready to help customers with LXD and Docker containers nesting.

All About LXD and Docker containers nesting

If you are attempting to run LXD and Docker containers at the same time, you are likely to come across the following error message:

docker: Error response from daemon: OCI runtime create failed: container_linux.go:367: starting container process caused: process_linux.go:495: container init caused: rootfs_linux.go:60: mounting “proc” to rootfs at “/proc” caused: permission denied: unknown.

This error pops up because, by default, containers do not have access to /proc and /sys in unsafe ways.

Interestingly, usually, we would not have any problem accessing /proc while running Docker containers. However, the above error message contradicts this. After analyzing the issue, our Support Team has come to the conclusion that permitting nesting for the affected container. Let’s take a look at how to get that done.

Run the following command to allow nesting for the container:

lxc launch "image" "container name" -c security.nesting=true

In case the container already exists, execute the following command:

lxc config set "container name" security.nesting true

After that, start the container:

lxc start "container name"

In case the container is already running, stop it, set the policy, and restart the container. Furthermore, we will not lose any data or work inside the container. Although this error is not too common, it is still one of significance. This solution by our Support Team will help us overcome the issue and go about running LXD and Docker containers simultaneously without running into an issue.

[Looking for a solution to another query? We are just a click away.]

Conclusion

To sum up, our skilled Support Engineers at Bobcares demonstrated how to deal with LXD and Docker containers nesting.