Notes on Running LXD on Alpine 3.7

• Boot option and sysctl config Reference

  • Kernel Option config in /etc/update-extlinux.conf grsec_sysfs_restrict=0
    • run update-extlinux and reboot
  • If you can't run lxd exec on your container and are getting error: EOF
    • add this to /etc/sysctl.d/00-alpine.conf

      kernel.grsecurity.chroot_caps = 0
      kernel.grsecurity.chroot_deny_chmod = 0
      kernel.grsecurity.chroot_deny_pivot = 0
      kernel.grsecurity.chroot_deny_chroot = 0
      kernel.grsecurity.chroot_deny_mount = 0
      

• Based on issue #4141

  • There is something wrong with alpine's newuidmap/newgidmap
  • Fix:

    chmod -x /usr/bin/newuidmap
    chmod -x /usr/bin/newgidmap