LXD/LXC Debian 11 fails to boot

[vholer]

Description

All Debian 11 guest images from

• Marketplace http://marketplace.opennebula.io/appliance/8e015603-3dc2-4147-a25e-f58dced23e52
• https://uk.images.linuxcontainers.org
• Docker Hub

fails to start completely both inside LXD (ONE 5.12 and 6.0) and LXC (ONE 6.1.80). Systemd inside is stuck on:

...
Aug 19 13:29:31 localhost.localdomain systemd[1]: Condition check resulted in ACPI event daemon being skipped.
Aug 19 13:29:31 localhost.localdomain systemd[1]: Condition check resulted in ACPI event daemon being skipped.
Aug 19 13:29:31 localhost.localdomain systemd[1]: Condition check resulted in ACPI event daemon being skipped.
Aug 19 13:29:31 localhost.localdomain systemd[1]: Condition check resulted in ACPI event daemon being skipped.
Aug 19 13:29:31 localhost.localdomain systemd[1]: Condition check resulted in ACPI event daemon being skipped.
Aug 19 13:29:31 localhost.localdomain systemd[1]: Condition check resulted in ACPI event daemon being skipped.
...

Details

• Affected Component: LXD, LXC, context?
• Hypervisor: LXD, LXC
• Version: 5.12+

Progress Status

• Branch created
• Code committed to development branch
• Testing - QA
• Documentation
• Release notes - resolved issues, compatibility, known issues
• Code committed to upstream release/hotfix branches
• Documentation committed to upstream release/hotfix branches

[vholer]

IMHO the problem is more on the systemd side, as it doesn't handle correctly trigger events from one unit to another, if the target can't process the event. In this case, the source of the events is acpid.path which should kick into acpid service if directory /etc/acpi/events/ is not empty. In case of the containers, the acpid service is disabled by conditional check ConditionVirtualization=!container and can't run. This leads systemd into an infinite loop when the acpid.path generates again and again same trigger events and targeted acpid.service can never process it.

Solution is easy:

• have package dependency on acpid OR systemd (which should handle ACPI events itself already),
• where acpid is already used, introduce systemd acpid.path override to check also only when not in containers.