Unable to use lxcri

[zwindler]

I've managed to build lxcri and lxcri-* binaries from the sources (by fixing some errors, I'll another issue for this), but either from github.com/lxc/lxcri:main or from @r10r fork drachenfels-de/lxcri:fixes, I get the same error

In Kubernetes events, I'm getting:

Error: container create failed: [lxcri-start] monitor process pid=1357587 failed (container error_num:1)
[lxcri:create.go:64] failed to run container process: monitor already died
Warning  Failed  4m49s (x3 over 5m15s)   kubelet  (combined from similar events): Error: container create failed: lxcri://57ab0cec5b0aa8d439c83402d04f584512f9ea9c5dc91e55a85ddd34ceae1363 [lxcri:create.go:77] failed to run container process: monitor already died

Digging a bit, lxcri gives me this:

{"l":"info","cmd":"create","cid":"116434c7b440e4d58018046134937624b8a588a676e54d9758ef1f59ec39be5d","t":"16:00:56.768","c":"runtime.go:196","m":"using cgroup root /sys/fs/cgroup"}
{"l":"info","cmd":"create","cid":"116434c7b440e4d58018046134937624b8a588a676e54d9758ef1f59ec39be5d","t":"16:00:56.781","c":"create.go:146","m":"device files are bind mounted"}
{"l":"warn","cmd":"create","cid":"116434c7b440e4d58018046134937624b8a588a676e54d9758ef1f59ec39be5d","t":"16:00:56.784","c":"create.go:480","m":"duplicate environment variable PATH (overwrite=true)"}
{"l":"info","cmd":"create","cid":"116434c7b440e4d58018046134937624b8a588a676e54d9758ef1f59ec39be5d","pid":1778291,"t":"16:00:56.788","c":"runtime.go:418","m":"monitor process started"}
lxc 116434c7b440e4d58018046134937624b8a588a676e54d9758ef1f59ec39be5d 20240219150056.830 WARN     start - ../src/lxc/start.c:lxc_spawn:1832 - File exists - Failed to allocate new network namespace id
lxc 116434c7b440e4d58018046134937624b8a588a676e54d9758ef1f59ec39be5d 20240219150057.954 ERROR    conf - ../src/lxc/conf.c:run_buffer:295 - Resource temporarily unavailable - Failed to popen() exec /usr/local/libexec/lxcri/lxcri-hook
lxc 116434c7b440e4d58018046134937624b8a588a676e54d9758ef1f59ec39be5d 20240219150057.955 ERROR    conf - ../src/lxc/conf.c:lxc_setup:4437 - Failed to run mount hooks
lxc 116434c7b440e4d58018046134937624b8a588a676e54d9758ef1f59ec39be5d 20240219150057.955 ERROR    start - ../src/lxc/start.c:do_start:1272 - Failed to setup container "116434c7b440e4d58018046134937624b8a588a676e54d9758ef1f59ec39be5d"
lxc 116434c7b440e4d58018046134937624b8a588a676e54d9758ef1f59ec39be5d 20240219150057.956 ERROR    sync - ../src/lxc/sync.c:sync_wait:34 - An error occurred in another process (expected sequence number 4)
lxc 116434c7b440e4d58018046134937624b8a588a676e54d9758ef1f59ec39be5d 20240219150057.965 ERROR    start - ../src/lxc/start.c:__lxc_start:2107 - Failed to spawn container "116434c7b440e4d58018046134937624b8a588a676e54d9758ef1f59ec39be5d"
lxc 116434c7b440e4d58018046134937624b8a588a676e54d9758ef1f59ec39be5d 20240219150057.966 WARN     start - ../src/lxc/start.c:lxc_abort:1036 - No such process - Failed to send SIGKILL via pidfd 17 for process 1778293
lxc 116434c7b440e4d58018046134937624b8a588a676e54d9758ef1f59ec39be5d 20240219150057.115 ERROR    af_unix - ../src/lxc/af_unix.c:lxc_abstract_unix_recv_fds_iov:218 - Connection reset by peer - Failed to receive response
lxc 116434c7b440e4d58018046134937624b8a588a676e54d9758ef1f59ec39be5d 20240219150057.115 ERROR    commands - ../src/lxc/commands.c:lxc_cmd_rsp_recv_fds:128 - Failed to receive file descriptors for command "get_state"
{"l":"info","cmd":"create","cid":"116434c7b440e4d58018046134937624b8a588a676e54d9758ef1f59ec39be5d","t":"16:00:57.216","c":"container.go:160","m":"monitor 1778291 died: exited:false exit_status:-1 signaled:true signal:hangup"}
{"l":"error","cmd":"create","cid":"116434c7b440e4d58018046134937624b8a588a676e54d9758ef1f59ec39be5d","t":"16:00:57.216","c":"cli.go:354","m":"failed to create container: [lxcri:create.go:77] failed to run container process: monitor already died"}
{"l":"info","cmd":"create","cid":"116434c7b440e4d58018046134937624b8a588a676e54d9758ef1f59ec39be5d","force":true,"cid":"116434c7b440e4d58018046134937624b8a588a676e54d9758ef1f59ec39be5d","t":"16:00:57.216","c":"runtime.go:497","m":"delete container"}
{"l":"error","cmd":"create","cid":"116434c7b440e4d58018046134937624b8a588a676e54d9758ef1f59ec39be5d","error":"[lxcri:create.go:77] failed to run container process: monitor already died","duration":452.438103,"t":"16:00:57.219","c":"cli.go:274","m":"command failed"}
{"l":"info","cmd":"delete","cid":"116434c7b440e4d58018046134937624b8a588a676e54d9758ef1f59ec39be5d","t":"16:00:57.236","c":"runtime.go:196","m":"using cgroup root /sys/fs/cgroup"}
{"l":"info","cmd":"delete","cid":"116434c7b440e4d58018046134937624b8a588a676e54d9758ef1f59ec39be5d","force":true,"cid":"116434c7b440e4d58018046134937624b8a588a676e54d9758ef1f59ec39be5d","t":"16:00:57.236","c":"runtime.go:497","m":"delete container"}

The real (first) error seem to be ERROR conf - ../src/lxc/conf.c:run_buffer:295 - Resource temporarily unavailable - Failed to popen() exec /usr/local/libexec/lxcri/lxcri-hook

I've try to take a look at the code (from lxc) but unfortunately I've not been able to understand the issue.