Alexander Mikhalitsyn
Alexander Mikhalitsyn
Tested and it does not work. Looks like we need something else in addition to this change.
Great observation, Julian! > found some apparmor warnings that interestingly do not cause any errors on LXD side but indicate some missing access. this is surprising. Because these errors come...
> That feels like a layering violation to me, as it shouldn't be needed for every program that accesses the device to need to be explicitly allowed to send packets...
> OK so we should not add it to the apparmor policy yet then? I think we left with no choice and we have to add this. What I can...
> Which value do I have to echo into `/proc/sys/vm/drop_caches` afterwards to reset this? a, good question, you don't really need to echo anything after this. `echo 3 > /proc/sys/vm/drop_caches`...
Let's give this thing a chance to see how it goes.
> I'm going to wait until the lxd-user changes are built and testing ok before introducing this though so we dont change too many things at once. Absolutely agree.
@minhbq-99 and @rppt thanks for your reviews! I have fixed everything in accordance with your comments now.
Ok, not when https://github.com/checkpoint-restore/criu/pull/2659 is merged I'm getting back to this :)
Fedora Rawhide test still fails as it uses: ``` Linux f49b08024246 6.15.8-200.fc42.x86_64 #1 SMP PREEMPT_DYNAMIC Thu Jul 24 13:26:52 UTC 2025 x86_64 GNU/Linux ``` while we need 6.16+