localectl fails inside container running debian 12 about lxd HOT 5 CLOSED

stgraber@dakara:~$ incus launch images:debian/12 d12
Launching d12
stgraber@dakara:~$ incus exec d12 bash      
root@d12:~# localectl 
System Locale: LANG=en_US.UTF-8
    VC Keymap: (unset)         
   X11 Layout: (unset)         
root@d12:~# systemctl -a | grep systemd-localed
  systemd-localed.service              loaded    active   running   Locale Service
root@d12:~# 

from lxd.

root@container-host:~# incus launch images:debian/12 d12
Launching d12
root@container-host:~# incus exec d12 bash
root@d12:~# localectl
Could not get properties: Connection timed out

on host's syslog:

Jun 20 11:45:25 container-host kernel: [1424311.878907] audit: type=1400 audit(1718876725.939:181): apparmor="DENIED" operation="file_lock" profile="incus-d12_</var/lib/incus>" pid=155352 comm="(-localed)" family="unix" sock_type="dgram" protocol=0 requested_mask="send"

from lxd.

Looks like the known apparmor bug in the 6.1 LTS kernel. (See the last bullet point under "other issues" here: https://wiki.debian.org/LXD#Other_issues. It applies equally to LXD and Incus.)

from lxd.

Yeah and that explains why I'm not seeing it here as I'm using Debian 12 but with mainline kernels.

from lxd.

Thanks for the pointer. The newer kernel is necessary to use ZFS with id shifting.

from lxd.