You are not logged in.
Hi All,
I have a number of LXC containers which run on my system, one of which runs a subsonic media server. I've just attempted to run pacman -Syu on in this container and noticed this error during the update
(30/56) upgrading popt [####################################################] 100%
(31/56) upgrading systemd [####################################################] 100%
Failed to get unit file state for systemd-resolved.service: Connection timed out
(32/56) upgrading libjpeg-turbo [####################################################] 100%
(33/56) upgrading libtiff [####################################################] 100%
After this any systemctl commands take quite a long time to respond and only respond with this ...
[root@subsonic /]# systemctl
Failed to list units: Failed to activate service 'org.freedesktop.systemd1': timed out
[root@subsonic /]#
Not sure what's going on here. During this update the system was updating systemd from 232-8 to 233.75-3. systemd-resolved.service was running just fine before the upgrade, but not sure this has anything to do with the issue. Anybody else having this issue (or similar)? the container no longer starts up properly.
Luckily the container is back by ZFS and I can rollback to a good snapshot!
Offline
Have you checked the journal? Please do not post snippets of command output https://bbs.archlinux.org/viewtopic.php?id=57855.
Offline
Hi loqs - thanks for the reply. Are you suggesting that I should have posted the entire output from pacman -Syu ? And the entire output of journalctl ? This seems a little OTT if you ask me ... but here you go :-)
[root@subsonic /]# pacman -Syu
:: Synchronizing package databases...
core 125.2 KiB 1692K/s 00:00 [####################################################] 100%
extra 1658.4 KiB 4.95M/s 00:00 [####################################################] 100%
community 3.9 MiB 4.97M/s 00:01 [####################################################] 100%
:: Starting full system upgrade...
resolving dependencies...
looking for conflicting packages...
Packages (57) apr-1.6.2-1 archlinux-keyring-20170611-1 ca-certificates-mozilla-3.31-3 curl-7.54.1-2 device-mapper-2.02.172-2 expat-2.2.1-1
ffmpeg-1:3.3.2-2 gcc-libs-7.1.1-4 glib2-2.52.3-1 glibc-2.25-7 gnupg-2.1.21-3 gnutls-3.5.14-1 grep-3.1-1 iproute2-4.12.0-2
jre8-openjdk-8.u141-1 jre8-openjdk-headless-8.u141-1 libarchive-3.3.2-1 libbluray-1.0.1-1 libelf-0.169-2 libevent-2.1.8-1
libgcrypt-1.7.8-1 libjpeg-turbo-1.5.2-1 libnl-3.3.0-1 libpng-1.6.30-1 libssh-0.7.5-2 libsystemd-233.75-3 libtiff-4.0.8-2
libtirpc-1.0.2-1 libunwind-1.2.1-1 libusb-1.0.21-2 libx264-2:148.20170521-1 libxml2-2.9.4+96+gfb56f80e-1 llvm-libs-4.0.1-4
logrotate-3.12.3-1 lvm2-2.02.172-2 mesa-17.1.4-1 nano-2.8.5-1 nfs-utils-2.1.1-4 npth-1.5-1 nspr-4.15-1 nss-3.31-3 opus-1.2.1-1
orc-0.4.27-1 p11-kit-0.23.7-1 pacman-5.0.2-2 pacman-mirrorlist-20170714-1 pcre-8.41-1 popt-1.16-9 psmisc-23.1-1 s-nail-14.9.0-1
sdl2-2.0.5-4 sqlite-3.19.3-1 systemd-233.75-3 systemd-sysvcompat-233.75-3 texinfo-6.4-1 thin-provisioning-tools-0.7.0-1
zlib-1:1.2.11-2
Total Download Size: 115.83 MiB
Total Installed Size: 493.43 MiB
Net Upgrade Size: 0.86 MiB
:: Proceed with installation? [Y/n] y
:: Retrieving packages...
glibc-2.25-7-x86_64 8.2 MiB 4.80M/s 00:02 [####################################################] 100%
gcc-libs-7.1.1-4-x86_64 17.8 MiB 4.95M/s 00:04 [####################################################] 100%
libgcrypt-1.7.8-1-x86_64 466.0 KiB 5.06M/s 00:00 [####################################################] 100%
libsystemd-233.75-3-x86_64 350.7 KiB 4.89M/s 00:00 [####################################################] 100%
libtirpc-1.0.2-1-x86_64 176.9 KiB 5.23M/s 00:00 [####################################################] 100%
zlib-1:1.2.11-2-x86_64 81.7 KiB 5.70M/s 00:00 [####################################################] 100%
archlinux-keyring-20170611-1-any 661.6 KiB 4.97M/s 00:00 [####################################################] 100%
p11-kit-0.23.7-1-x86_64 445.7 KiB 5.00M/s 00:00 [####################################################] 100%
ca-certificates-mozilla-3.31-3-x86_64 402.0 KiB 4.91M/s 00:00 [####################################################] 100%
curl-7.54.1-2-x86_64 902.6 KiB 5.01M/s 00:00 [####################################################] 100%
device-mapper-2.02.172-2-x86_64 265.8 KiB 5.19M/s 00:00 [####################################################] 100%
expat-2.2.1-1-x86_64 83.3 KiB 4.78M/s 00:00 [####################################################] 100%
gnutls-3.5.14-1-x86_64 2.3 MiB 4.93M/s 00:00 [####################################################] 100%
libelf-0.169-2-x86_64 342.8 KiB 5.23M/s 00:00 [####################################################] 100%
pcre-8.41-1-x86_64 924.6 KiB 5.02M/s 00:00 [####################################################] 100%
glib2-2.52.3-1-x86_64 2.3 MiB 4.90M/s 00:00 [####################################################] 100%
libnl-3.3.0-1-x86_64 354.9 KiB 5.25M/s 00:00 [####################################################] 100%
libusb-1.0.21-2-x86_64 54.1 KiB 5.28M/s 00:00 [####################################################] 100%
popt-1.16-9-x86_64 63.7 KiB 8.89M/s 00:00 [####################################################] 100%
systemd-233.75-3-x86_64 3.8 MiB 4.98M/s 00:01 [####################################################] 100%
npth-1.5-1-x86_64 12.8 KiB 1822K/s 00:00 [####################################################] 100%
sqlite-3.19.3-1-x86_64 1259.3 KiB 5.06M/s 00:00 [####################################################] 100%
gnupg-2.1.21-3-x86_64 2020.5 KiB 4.93M/s 00:00 [####################################################] 100%
grep-3.1-1-x86_64 188.4 KiB 4.60M/s 00:00 [####################################################] 100%
iproute2-4.12.0-2-x86_64 673.6 KiB 4.95M/s 00:00 [####################################################] 100%
nspr-4.15-1-x86_64 189.1 KiB 4.62M/s 00:00 [####################################################] 100%
nss-3.31-3-x86_64 1423.6 KiB 4.91M/s 00:00 [####################################################] 100%
libarchive-3.3.2-1-x86_64 448.9 KiB 5.04M/s 00:00 [####################################################] 100%
libevent-2.1.8-1-x86_64 250.2 KiB 4.89M/s 00:00 [####################################################] 100%
logrotate-3.12.3-1-x86_64 37.2 KiB 5.19M/s 00:00 [####################################################] 100%
thin-provisioning-tools-0.7.0-1-x86_64 370.9 KiB 4.89M/s 00:00 [####################################################] 100%
lvm2-2.02.172-2-x86_64 1288.9 KiB 4.84M/s 00:00 [####################################################] 100%
nano-2.8.5-1-x86_64 418.5 KiB 5.11M/s 00:00 [####################################################] 100%
nfs-utils-2.1.1-4-x86_64 271.8 KiB 5.01M/s 00:00 [####################################################] 100%
pacman-mirrorlist-20170714-1-any 5.7 KiB 0.00B/s 00:00 [####################################################] 100%
pacman-5.0.2-2-x86_64 737.3 KiB 4.90M/s 00:00 [####################################################] 100%
psmisc-23.1-1-x86_64 94.4 KiB 5.42M/s 00:00 [####################################################] 100%
s-nail-14.9.0-1-x86_64 442.1 KiB 4.96M/s 00:00 [####################################################] 100%
systemd-sysvcompat-233.75-3-x86_64 7.3 KiB 0.00B/s 00:00 [####################################################] 100%
texinfo-6.4-1-x86_64 1188.4 KiB 4.96M/s 00:00 [####################################################] 100%
apr-1.6.2-1-x86_64 257.5 KiB 5.03M/s 00:00 [####################################################] 100%
libssh-0.7.5-2-x86_64 191.0 KiB 5.04M/s 00:00 [####################################################] 100%
opus-1.2.1-1-x86_64 352.7 KiB 4.92M/s 00:00 [####################################################] 100%
libunwind-1.2.1-1-x86_64 100.9 KiB 4.93M/s 00:00 [####################################################] 100%
llvm-libs-4.0.1-4-x86_64 12.5 MiB 4.95M/s 00:03 [####################################################] 100%
libxml2-2.9.4+96+gfb56f80e-1-x86_64 1263.9 KiB 5.00M/s 00:00 [####################################################] 100%
mesa-17.1.4-1-x86_64 12.7 MiB 4.96M/s 00:03 [####################################################] 100%
sdl2-2.0.5-4-x86_64 576.7 KiB 4.69M/s 00:00 [####################################################] 100%
libpng-1.6.30-1-x86_64 237.9 KiB 4.65M/s 00:00 [####################################################] 100%
libbluray-1.0.1-1-x86_64 804.6 KiB 4.82M/s 00:00 [####################################################] 100%
libx264-2:148.20170521-1-x86_64 369.6 KiB 4.88M/s 00:00 [####################################################] 100%
libjpeg-turbo-1.5.2-1-x86_64 351.5 KiB 4.90M/s 00:00 [####################################################] 100%
libtiff-4.0.8-2-x86_64 789.8 KiB 4.94M/s 00:00 [####################################################] 100%
orc-0.4.27-1-x86_64 206.1 KiB 5.03M/s 00:00 [####################################################] 100%
ffmpeg-1:3.3.2-2-x86_64 8.2 MiB 4.96M/s 00:02 [####################################################] 100%
jre8-openjdk-headless-8.u141-1-x86_64 25.9 MiB 4.95M/s 00:05 [####################################################] 100%
jre8-openjdk-8.u141-1-x86_64 165.2 KiB 4.89M/s 00:00 [####################################################] 100%
(57/57) checking keys in keyring [####################################################] 100%
(57/57) checking package integrity [####################################################] 100%
(57/57) loading package files [####################################################] 100%
(57/57) checking for file conflicts [####################################################] 100%
(57/57) checking available disk space [####################################################] 100%
:: Processing package changes...
( 1/57) upgrading glibc [####################################################] 100%
Generating locales...
en_US.UTF-8... done
Generation complete.
New optional dependencies for glibc
gd: for memusagestat
( 2/57) upgrading gcc-libs [####################################################] 100%
( 3/57) upgrading libgcrypt [####################################################] 100%
( 4/57) upgrading libsystemd [####################################################] 100%
( 5/57) upgrading libtirpc [####################################################] 100%
( 6/57) upgrading zlib [####################################################] 100%
( 7/57) upgrading apr [####################################################] 100%
( 8/57) upgrading archlinux-keyring [####################################################] 100%
==> Appending keys from archlinux.gpg...
==> Locally signing trusted keys in keyring...
-> Locally signing key DDB867B92AA789C165EEFA799B729B06A680C281...
-> Locally signing key 684148BB25B49E986A4944C55184252D824B18E8...
-> Locally signing key 91FFE0700E80619CEB73235CA88E23E377514E00...
-> Locally signing key AB19265E5D7D20687D303246BA1DFB64FFF979E7...
-> Locally signing key 0E8B644079F599DFC1DDC3973348882F6AC6A4C2...
-> Locally signing key 44D4A033AC140143927397D47EFD567D4C7EA887...
==> Importing owner trust values...
gpg: setting ownertrust to 4
==> Disabling revoked keys in keyring...
-> Disabling key 7FA647CD89891DEDC060287BB9113D1ED21E1A55...
-> Disabling key D4DE5ABDE2A7287644EAC7E36D1A9E70E19DAA50...
-> Disabling key 40440DC037C05620984379A6761FAD69BA06C6A9...
-> Disabling key BC1FBE4D2826A0B51E47ED62E2539214C6C11350...
-> Disabling key 63F395DE2D6398BBE458F281F2DBB4931985A992...
-> Disabling key 8F76BEEA0289F9E1D3E229C05F946DED983D4366...
-> Disabling key 81D7F8241DB38BC759C80FCE3A726C6170E80477...
-> Disabling key 5E7585ADFF106BFFBBA319DC654B877A0864983E...
-> Disabling key E7210A59715F6940CF9A4E36A001876699AD6E84...
-> Disabling key F5A361A3A13554B85E57DDDAAF7EF7873CFD4BB6...
-> Disabling key 9515D8A8EAB88E49BB65EDBCE6B456CAF15447D5...
-> Disabling key 4A8B17E20B88ACA61860009B5CED81B7C2E5C0D2...
-> Disabling key 0B20CA1931F5DA3A70D0F8D2EA6836E1AB441196...
-> Disabling key 66BD74A036D522F51DD70A3C7F2A16726521E06D...
-> Disabling key 27FFC4769E19F096D41D9265A04F9397CDFD6BB0...
==> Updating trust database...
gpg: next trustdb check due at 2017-10-20
( 9/57) upgrading p11-kit [####################################################] 100%
(10/57) upgrading ca-certificates-mozilla [####################################################] 100%
(11/57) upgrading curl [####################################################] 100%
(12/57) upgrading device-mapper [####################################################] 100%
(13/57) upgrading expat [####################################################] 100%
(14/57) upgrading gnutls [####################################################] 100%
(15/57) upgrading libssh [####################################################] 100%
(16/57) upgrading opus [####################################################] 100%
(17/57) upgrading libelf [####################################################] 100%
(18/57) upgrading libunwind [####################################################] 100%
(19/57) upgrading llvm-libs [####################################################] 100%
(20/57) upgrading libxml2 [####################################################] 100%
(21/57) upgrading mesa [####################################################] 100%
(22/57) upgrading sdl2 [####################################################] 100%
(23/57) upgrading libpng [####################################################] 100%
(24/57) upgrading pcre [####################################################] 100%
(25/57) upgrading glib2 [####################################################] 100%
(26/57) upgrading libbluray [####################################################] 100%
(27/57) upgrading libx264 [####################################################] 100%
(28/57) upgrading libnl [####################################################] 100%
(29/57) upgrading libusb [####################################################] 100%
(30/57) upgrading popt [####################################################] 100%
(31/57) upgrading systemd [####################################################] 100%
Failed to get unit file state for systemd-resolved.service: Failed to activate service 'org.freedesktop.systemd1': timed out
(32/57) upgrading libjpeg-turbo [####################################################] 100%
(33/57) upgrading libtiff [####################################################] 100%
(34/57) upgrading orc [####################################################] 100%
(35/57) upgrading ffmpeg [####################################################] 100%
(36/57) upgrading npth [####################################################] 100%
(37/57) upgrading sqlite [####################################################] 100%
(38/57) upgrading gnupg [####################################################] 100%
(39/57) upgrading grep [####################################################] 100%
(40/57) upgrading iproute2 [####################################################] 100%
(41/57) upgrading nspr [####################################################] 100%
(42/57) upgrading nss [####################################################] 100%
(43/57) upgrading jre8-openjdk-headless [####################################################] 100%
(44/57) upgrading jre8-openjdk [####################################################] 100%
(45/57) upgrading libarchive [####################################################] 100%
(46/57) upgrading libevent [####################################################] 100%
(47/57) upgrading logrotate [####################################################] 100%
(48/57) upgrading thin-provisioning-tools [####################################################] 100%
(49/57) upgrading lvm2 [####################################################] 100%
(50/57) upgrading nano [####################################################] 100%
(51/57) upgrading nfs-utils [####################################################] 100%
(52/57) upgrading pacman-mirrorlist [####################################################] 100%
warning: /etc/pacman.d/mirrorlist installed as /etc/pacman.d/mirrorlist.pacnew
(53/57) upgrading pacman [####################################################] 100%
(54/57) upgrading psmisc [####################################################] 100%
(55/57) upgrading s-nail [####################################################] 100%
(56/57) upgrading systemd-sysvcompat [####################################################] 100%
(57/57) upgrading texinfo [####################################################] 100%
:: Running post-transaction hooks...
(1/6) Updating udev hardware database...
(2/6) Updating system user accounts...
(3/6) Creating temporary files...
(4/6) Arming ConditionNeedsUpdate...
(5/6) Updating the info directory file...
(6/6) Rebuilding certificate stores...
followed immediately by ... (I've only posted the last few lines of this command as it seemed to contain some relevant info)
[root@subsonic /]# journalctl -n 500
Jul 19 21:00:38 subsonic systemd[1]: getty@lxc-tty2.service: Failed to set invocation ID on control group /system.slice/system-getty.slice/getty@lxc-tty2.service, ignoring: Operation not permitted
Jul 19 21:00:38 subsonic systemd[1]: Started Getty on lxc/tty2.
Jul 19 21:00:38 subsonic systemd[1]: Stopped Getty on lxc/tty6.
Jul 19 21:00:38 subsonic systemd[1]: getty@lxc-tty6.service: Failed to set invocation ID on control group /system.slice/system-getty.slice/getty@lxc-tty6.service, ignoring: Operation not permitted
Jul 19 21:00:38 subsonic systemd[1]: Started Getty on lxc/tty6.
Jul 19 21:00:38 subsonic systemd[1]: Stopped Getty on lxc/tty1.
Jul 19 21:00:38 subsonic systemd[1]: getty@lxc-tty1.service: Failed to set invocation ID on control group /system.slice/system-getty.slice/getty@lxc-tty1.service, ignoring: Operation not permitted
Jul 19 21:00:38 subsonic systemd[1]: Started Getty on lxc/tty1.
Jul 19 21:00:38 subsonic agetty[1104]: /dev/lxc/tty1: cannot open as standard input: No such file or directory
Jul 19 21:00:38 subsonic agetty[1103]: /dev/lxc/tty6: cannot open as standard input: No such file or directory
Jul 19 21:00:38 subsonic agetty[1101]: /dev/lxc/tty2: cannot open as standard input: No such file or directory
Jul 19 21:00:42 subsonic dbus[21]: [system] Reloaded configuration
Jul 19 21:00:42 subsonic dbus[21]: [system] Reloaded configuration
Jul 19 21:00:42 subsonic dbus[21]: [system] Reloaded configuration
Jul 19 21:00:43 subsonic dbus[21]: [system] Reloaded configuration
Jul 19 21:00:43 subsonic dbus[21]: [system] Reloaded configuration
Jul 19 21:00:43 subsonic dbus[21]: [system] Reloaded configuration
Jul 19 21:00:43 subsonic systemd[1]: Reexecuting.
Jul 19 21:00:43 subsonic systemd[1]: systemd 233 running in system mode. (+PAM -AUDIT -SELINUX -IMA -APPARMOR +SMACK -SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL +XZ +LZ4 -SECCOMP +BLKID +ELFUTILS +KMOD +IDN default-hierarchy=hybrid)
Jul 19 21:00:43 subsonic systemd[1]: Detected virtualization lxc.
Jul 19 21:00:43 subsonic systemd[1]: Detected architecture x86-64.
Jul 19 21:00:43 subsonic systemd[1]: Failed to create /init.scope control group: Permission denied
Jul 19 21:00:43 subsonic systemd[1]: Failed to allocate manager object: Permission denied
Jul 19 21:00:43 subsonic systemd[1]: Freezing execution.
Jul 19 21:01:08 subsonic dbus[21]: [system] Failed to activate service 'org.freedesktop.systemd1': timed out
The last 8 lines seem to show where things are going wrong with systemd, but I can't explain why this is happening.
After this the container will not boot up properly. None of the services start up. The most annoying this is that if I exit the container and go back to the host machine console I can't even stop the container with lxc-stop -k -n subsonic (which should kill all the container processes). I actually have to reboot the server. The only option I have at this point is to rollback the ZFS snapshot I have to get it back to a working state. I have a few other containers which I'm nervous to upgrade now ...
Offline
Can you post similar output to
systemd 233 running in system mode. (+PAM -AUDIT -SELINUX -IMA -APPARMOR +SMACK -SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL +XZ +LZ4 -SECCOMP +BLKID +ELFUTILS +KMOD +IDN default-hierarchy=hybrid)
plus the next few lines in the journal from before the update for comparison?
Are you suggesting that I should have posted the entire output from pacman -Syu ?
Yes, thank you for posting it.
And the entire output of journalctl?
Have you checked the journal?
I meant by check the journal, could you still connect to it, was anything recorded since the update occurred, if anything was recorded if that seemed relevant post that or report the error you encountered.
That may seem somewhat contradictory but hopefully it makes sense.
Offline
OK - so I rebooted the server, rolled back the ZFS snapshot of the container, started the container - no issues at all. All working fine. Logged into the container and executed journalctl -n 100 ... and I don't see any output like what I saw after the update with regards to "systemd 233 running in system mode" etc ... I just get this repeated output at the end of the journal ...
Jul 19 21:47:32 subsonic systemd[1]: Stopped Getty on lxc/tty5.
Jul 19 21:47:32 subsonic systemd[1]: getty@lxc-tty5.service: Failed to set invocation ID on control group /system.slice/system-getty.slice/getty@lxc-tty5.service, ignoring: Operation not permitted
Jul 19 21:47:32 subsonic systemd[1]: Started Getty on lxc/tty5.
Jul 19 21:47:32 subsonic systemd[1]: Stopped Getty on lxc/tty2.
Jul 19 21:47:32 subsonic systemd[1]: getty@lxc-tty2.service: Failed to set invocation ID on control group /system.slice/system-getty.slice/getty@lxc-tty2.service, ignoring: Operation not permitted
Jul 19 21:47:32 subsonic systemd[1]: Started Getty on lxc/tty2.
Jul 19 21:47:32 subsonic systemd[1]: Stopped Getty on lxc/tty6.
Jul 19 21:47:32 subsonic systemd[1]: getty@lxc-tty6.service: Failed to set invocation ID on control group /system.slice/system-getty.slice/getty@lxc-tty6.service, ignoring: Operation not permitted
Jul 19 21:47:32 subsonic systemd[1]: Started Getty on lxc/tty6.
Jul 19 21:47:32 subsonic systemd[1]: Stopped Getty on lxc/tty4.
Jul 19 21:47:32 subsonic systemd[1]: getty@lxc-tty4.service: Failed to set invocation ID on control group /system.slice/system-getty.slice/getty@lxc-tty4.service, ignoring: Operation not permitted
Jul 19 21:47:32 subsonic systemd[1]: Started Getty on lxc/tty4.
Jul 19 21:47:32 subsonic systemd[1]: Stopped Getty on lxc/tty1.
Jul 19 21:47:32 subsonic systemd[1]: getty@lxc-tty1.service: Failed to set invocation ID on control group /system.slice/system-getty.slice/getty@lxc-tty1.service, ignoring: Operation not permitted
Jul 19 21:47:32 subsonic systemd[1]: Started Getty on lxc/tty1.
Jul 19 21:47:32 subsonic systemd[1]: Stopped Getty on lxc/tty3.
Jul 19 21:47:32 subsonic systemd[1]: getty@lxc-tty3.service: Failed to set invocation ID on control group /system.slice/system-getty.slice/getty@lxc-tty3.service, ignoring: Operation not permitted
Jul 19 21:47:32 subsonic systemd[1]: Started Getty on lxc/tty3.
Jul 19 21:47:32 subsonic agetty[169]: /dev/lxc/tty2: cannot open as standard input: No such file or directory
Jul 19 21:47:32 subsonic agetty[173]: /dev/lxc/tty3: cannot open as standard input: No such file or directory
Jul 19 21:47:32 subsonic agetty[172]: /dev/lxc/tty1: cannot open as standard input: No such file or directory
Jul 19 21:47:32 subsonic agetty[170]: /dev/lxc/tty6: cannot open as standard input: No such file or directory
Jul 19 21:47:32 subsonic agetty[168]: /dev/lxc/tty5: cannot open as standard input: No such file or directory
Jul 19 21:47:32 subsonic agetty[171]: /dev/lxc/tty4: cannot open as standard input: No such file or directory
And the container is working just fine. I think something has changed in systemd which is not compatible with the unprivileged containers I'm running. I've posted a bug report in github/systemd. Maybe somebody there will know if anything has changed that could affect containers.
Offline
https://github.com/lxc/lxcfs/issues/154
https://github.com/lxc/lxc/issues/1554 - see notably the last comment
https://github.com/lxc/lxc/issues/1678
Offline
This is now solved with a workaround, and with a long term fix in coming soon.
See ...
https://github.com/systemd/systemd/issues/6408
and
https://github.com/lxc/lxc/issues/1678
Offline