canonical / lxd

Powerful system container and virtual machine manager
https://canonical.com/lxd
GNU Affero General Public License v3.0
4.36k stars 932 forks source link

lxd init does not set up network properly #8200

Closed Lyamc closed 3 years ago

Lyamc commented 3 years ago

Required information

Install LXD, create new container, fails to ping google or 8.8.8.8.

Steps to reproduce

  1. Run sudo snap install lxd
  2. Run sudo lxc init or lxd init
  3. Choose the following options:
    Would you like to use LXD clustering? (yes/no) [default=no]: no
    Do you want to configure a new storage pool? (yes/no) [default=yes]: yes
    Name of the new storage pool [default=default]: default
    Name of the storage backend to use (btrfs, dir, lvm, zfs, ceph) [default=zfs]: zfs
    Create a new ZFS pool? (yes/no) [default=yes]: yes
    Would you like to use an existing empty block device (e.g. a disk or partition)? (yes/no) [default=no]: no
    Size in GB of the new loop device (1GB minimum) [default=30GB]: 30GB
    Would you like to connect to a MAAS server? (yes/no) [default=no]: no
    Would you like to create a new local network bridge? (yes/no) [default=yes]: yes
    What should the new bridge be called? [default=lxdbr0]: lxdbr0
    What IPv4 address should be used? (CIDR subnet notation, “auto” or “none”) [default=auto]: auto
    What IPv6 address should be used? (CIDR subnet notation, “auto” or “none”) [default=auto]: auto
    Would you like LXD to be available over the network? (yes/no) [default=no]: yes
    Address to bind LXD to (not including port) [default=all]: all
    Port to bind LXD to [default=8443]: 8443
    Trust password for new clients:
    Again:
    Would you like stale cached images to be updated automatically? (yes/no) [default=yes] yes
    Would you like a YAML "lxd init" preseed to be printed? (yes/no) [default=no]: no
  4. Run lxc launch images:ubuntu/groovy/amd64 groovy
  5. Run lxc list and note that there is no IP address
    +--------+---------+------+------+-----------+-----------+
    |  NAME  |  STATE  | IPV4 | IPV6 |   TYPE    | SNAPSHOTS |
    +--------+---------+------+------+-----------+-----------+
    | groovy | RUNNING |      |      | CONTAINER | 0         |
    +--------+---------+------+------+-----------+-----------+
  6. Run lxc exec postal bash and then ip addr
    1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
    13: eth0@if14: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether 00:16:3e:8e:b9:0a brd ff:ff:ff:ff:ff:ff link-netnsid 0
    inet6 fe80::216:3eff:fe8e:b90a/64 scope link
       valid_lft forever preferred_lft forever
  7. Try to ping anything like ping 8.8.8.8 or ping google.ca
    
    ping: connect: Network is unreachable
    ping: google.ca: Temporary failure in name resolution
stgraber commented 3 years ago

Can you show ps fauxww as well as iptables -L -n?

Lyamc commented 3 years ago

ps fauxww

USER         PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root           2  0.0  0.0      0     0 ?        S    10:15   0:00 [kthreadd]
root           3  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [rcu_gp]
root           4  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [rcu_par_gp]
root           6  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [kworker/0:0H-kblockd]
root           9  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [mm_percpu_wq]
root          10  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [ksoftirqd/0]
root          11  0.0  0.0      0     0 ?        I    10:15   0:01  \_ [rcu_sched]
root          12  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [migration/0]
root          13  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [idle_inject/0]
root          14  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [cpuhp/0]
root          15  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [cpuhp/1]
root          16  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [idle_inject/1]
root          17  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [migration/1]
root          18  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [ksoftirqd/1]
root          20  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [kworker/1:0H-kblockd]
root          21  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [cpuhp/2]
root          22  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [idle_inject/2]
root          23  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [migration/2]
root          24  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [ksoftirqd/2]
root          26  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [kworker/2:0H-kblockd]
root          27  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [cpuhp/3]
root          28  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [idle_inject/3]
root          29  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [migration/3]
root          30  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [ksoftirqd/3]
root          32  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [kworker/3:0H-kblockd]
root          33  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [cpuhp/4]
root          34  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [idle_inject/4]
root          35  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [migration/4]
root          36  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [ksoftirqd/4]
root          38  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [kworker/4:0H-kblockd]
root          39  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [cpuhp/5]
root          40  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [idle_inject/5]
root          41  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [migration/5]
root          42  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [ksoftirqd/5]
root          44  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [kworker/5:0H-kblockd]
root          45  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [cpuhp/6]
root          46  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [idle_inject/6]
root          47  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [migration/6]
root          48  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [ksoftirqd/6]
root          50  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [kworker/6:0H-kblockd]
root          51  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [cpuhp/7]
root          52  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [idle_inject/7]
root          53  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [migration/7]
root          54  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [ksoftirqd/7]
root          56  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [kworker/7:0H-kblockd]
root          57  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [cpuhp/8]
root          58  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [idle_inject/8]
root          59  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [migration/8]
root          60  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [ksoftirqd/8]
root          62  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [kworker/8:0H-kblockd]
root          63  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [cpuhp/9]
root          64  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [idle_inject/9]
root          65  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [migration/9]
root          66  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [ksoftirqd/9]
root          68  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [kworker/9:0H-kblockd]
root          69  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [cpuhp/10]
root          70  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [idle_inject/10]
root          71  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [migration/10]
root          72  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [ksoftirqd/10]
root          74  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [kworker/10:0H-kblockd]
root          75  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [cpuhp/11]
root          76  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [idle_inject/11]
root          77  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [migration/11]
root          78  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [ksoftirqd/11]
root          80  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [kworker/11:0H-kblockd]
root          81  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [kdevtmpfs]
root          82  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [netns]
root          83  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [rcu_tasks_kthre]
root          84  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [kauditd]
root          89  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [khungtaskd]
root          90  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [oom_reaper]
root          91  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [writeback]
root          92  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [kcompactd0]
root          93  0.0  0.0      0     0 ?        SN   10:15   0:00  \_ [ksmd]
root          94  0.0  0.0      0     0 ?        SN   10:15   0:00  \_ [khugepaged]
root         141  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [kintegrityd]
root         142  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [kblockd]
root         143  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [blkcg_punt_bio]
root         146  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [tpm_dev_wq]
root         147  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [ata_sff]
root         148  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [md]
root         149  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [edac-poller]
root         150  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [devfreq_wq]
root         152  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [watchdogd]
root         156  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [kswapd0]
root         157  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [ecryptfs-kthrea]
root         159  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [kthrotld]
root         160  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [irq/30-aerdrv]
root         161  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [irq/31-aerdrv]
root         162  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [irq/32-aerdrv]
root         163  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [irq/33-aerdrv]
root         164  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [irq/35-pciehp]
root         165  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [irq/45-pciehp]
root         172  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [acpi_thermal_pm]
root         173  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [vfio-irqfd-clea]
root         174  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [ipv6_addrconf]
root         183  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [kstrp]
root         186  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [kworker/u65:0-hci0]
root         201  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [charger_manager]
root         258  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [nvme-wq]
root         259  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [nvme-reset-wq]
root         260  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [nvme-delete-wq]
root         263  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [scsi_eh_0]
root         264  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [scsi_tmf_0]
root         266  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [scsi_eh_1]
root         267  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [scsi_tmf_1]
root         268  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [scsi_eh_2]
root         269  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [scsi_tmf_2]
root         270  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [scsi_eh_3]
root         271  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [scsi_tmf_3]
root         272  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [scsi_eh_4]
root         273  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [scsi_tmf_4]
root         274  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [scsi_eh_5]
root         275  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [scsi_tmf_5]
root         276  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [scsi_eh_6]
root         277  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [scsi_tmf_6]
root         284  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [scsi_eh_7]
root         285  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [scsi_tmf_7]
root         287  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [scsi_eh_8]
root         288  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [scsi_tmf_8]
root         308  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [kworker/8:1H-kblockd]
root         326  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [kworker/4:1H-kblockd]
root         343  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [kworker/2:1H-kblockd]
root         345  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [jbd2/nvme0n1p5-]
root         346  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [ext4-rsv-conver]
root         412  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [kworker/3:1H-kblockd]
root         419  0.0  0.0   2488   584 ?        S    10:15   0:00  \_ bpfilter_umh
root         422  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [kworker/0:1H-kblockd]
root         424  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [kworker/6:1H-kblockd]
root         531  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [kworker/7:1H-kblockd]
root         539  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [loop0]
root         564  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [loop1]
root         569  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [kworker/11:1H-events_highpri]
root         571  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [kworker/5:1H-kblockd]
root         572  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [kworker/9:1H-events_highpri]
root         573  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [kworker/10:1H-kblockd]
root         577  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [ccp-1-q0]
root         578  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [ccp-1-q1]
root         579  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [ccp-1-q2]
root         580  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [ccp-1-q3]
root         581  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [ccp-1-q4]
root         582  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [cryptd]
root         584  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [loop2]
root         588  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [loop3]
root         595  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [cfg80211]
root         616  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [irq/105-iwlwifi]
root         622  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [irq/106-iwlwifi]
root         627  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [irq/107-iwlwifi]
root         628  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [loop4]
root         630  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [irq/108-iwlwifi]
root         634  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [irq/109-iwlwifi]
root         637  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [irq/110-iwlwifi]
root         639  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [irq/111-iwlwifi]
root         640  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [irq/112-iwlwifi]
root         641  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [irq/113-iwlwifi]
root         643  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [irq/114-iwlwifi]
root         644  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [irq/115-iwlwifi]
root         645  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [irq/116-iwlwifi]
root         646  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [irq/117-iwlwifi]
root         647  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [irq/118-iwlwifi]
root         725  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [kworker/u65:1-hci0]
root         733  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [ttm_swap]
root         749  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [loop5]
root         756  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [loop6]
root         757  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [kworker/1:1H-kblockd]
root         760  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [loop7]
root         768  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [loop8]
root         769  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [loop9]
root         770  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [loop10]
root         771  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [loop11]
root         772  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [loop12]
root         773  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [loop13]
root         774  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [loop14]
root         775  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [loop15]
root         776  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [loop16]
root         780  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [loop18]
root         788  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [loop19]
root         865  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [loop20]
root         866  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [loop21]
root         867  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [loop22]
root         868  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [loop23]
root         869  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [loop24]
root         870  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [loop25]
root         871  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [loop26]
root        2237  0.0  0.0      0     0 ?        I<   10:15   0:00  \_ [dio/nvme0n1p5]
root        2261  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [spl_system_task]
root        2262  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [spl_delay_taskq]
root        2263  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [spl_dynamic_tas]
root        2264  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [spl_kmem_cache]
root        2269  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [zvol]
root        2270  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [arc_prune]
root        2271  0.0  0.0      0     0 ?        SN   10:15   0:00  \_ [zthr_procedure]
root        2272  0.0  0.0      0     0 ?        SN   10:15   0:00  \_ [zthr_procedure]
root        2273  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [dbu_evict]
root        2274  0.0  0.0      0     0 ?        SN   10:15   0:00  \_ [dbuf_evict]
root        2301  0.0  0.0      0     0 ?        SN   10:15   0:00  \_ [z_vdev_file]
root        2302  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [l2arc_feed]
root        5309  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [krfcommd]
root       15452  0.0  0.0      0     0 ?        I    10:34   0:00  \_ [kworker/9:0-events]
root       16970  0.0  0.0      0     0 ?        I    10:40   0:00  \_ [kworker/6:2-rcu_par_gp]
root       17007  0.0  0.0      0     0 ?        I    10:40   0:00  \_ [kworker/8:0-events]
root       17673  0.0  0.0      0     0 ?        I    10:41   0:00  \_ [kworker/0:1-rcu_par_gp]
root       21138  0.0  0.0      0     0 ?        I    10:47   0:00  \_ [kworker/7:0-rcu_par_gp]
root       22621  0.0  0.0      0     0 ?        I    10:47   0:00  \_ [kworker/6:1-rcu_par_gp]
root       22800  0.0  0.0      0     0 ?        I    10:47   0:00  \_ [kworker/4:0-events]
root       23083  0.0  0.0      0     0 ?        I    10:47   0:00  \_ [kworker/10:2-rcu_par_gp]
root       23090  0.0  0.0      0     0 ?        I    10:47   0:00  \_ [kworker/11:0-events]
root       23442  0.0  0.0      0     0 ?        I    10:48   0:00  \_ [kworker/u64:4-events_power_efficient]
root       23467  0.0  0.0      0     0 ?        I    10:48   0:00  \_ [kworker/11:1-events]
root       23506  0.0  0.0      0     0 ?        I    10:48   0:00  \_ [kworker/3:4-rcu_gp]
root       24381  0.0  0.0      0     0 ?        I    10:49   0:00  \_ [kworker/2:1-events]
root       25127  0.0  0.0      0     0 ?        S<   10:49   0:00  \_ [loop17]
root       25959  0.0  0.0      0     0 ?        I    10:50   0:00  \_ [kworker/8:4-events]
root       26235  0.0  0.0      0     0 ?        S<   10:51   0:00  \_ [z_null_iss]
root       26236  0.0  0.0      0     0 ?        S<   10:51   0:00  \_ [z_null_int]
root       26237  0.0  0.0      0     0 ?        S<   10:51   0:00  \_ [z_rd_iss]
root       26238  0.0  0.0      0     0 ?        S<   10:51   0:00  \_ [z_rd_int]
root       26239  0.0  0.0      0     0 ?        S<   10:51   0:00  \_ [z_rd_int]
root       26240  0.0  0.0      0     0 ?        S<   10:51   0:00  \_ [z_rd_int]
root       26241  0.0  0.0      0     0 ?        S<   10:51   0:00  \_ [z_rd_int]
root       26242  0.0  0.0      0     0 ?        S<   10:51   0:00  \_ [z_rd_int]
root       26243  0.0  0.0      0     0 ?        S<   10:51   0:00  \_ [z_rd_int]
root       26244  0.0  0.0      0     0 ?        S<   10:51   0:00  \_ [z_rd_int]
root       26245  0.0  0.0      0     0 ?        S<   10:51   0:00  \_ [z_rd_int]
root       26246  0.0  0.0      0     0 ?        S<   10:51   0:00  \_ [z_wr_iss]
root       26247  0.0  0.0      0     0 ?        S<   10:51   0:00  \_ [z_wr_iss]
root       26248  0.0  0.0      0     0 ?        S<   10:51   0:00  \_ [z_wr_iss]
root       26249  0.0  0.0      0     0 ?        S<   10:51   0:00  \_ [z_wr_iss]
root       26250  0.0  0.0      0     0 ?        S<   10:51   0:00  \_ [z_wr_iss]
root       26251  0.0  0.0      0     0 ?        S<   10:51   0:00  \_ [z_wr_iss]
root       26252  0.0  0.0      0     0 ?        S<   10:51   0:00  \_ [z_wr_iss]
root       26253  0.0  0.0      0     0 ?        S<   10:51   0:00  \_ [z_wr_iss]
root       26254  0.0  0.0      0     0 ?        S<   10:51   0:00  \_ [z_wr_iss]
root       26255  0.0  0.0      0     0 ?        S<   10:51   0:00  \_ [z_wr_iss_h]
root       26256  0.0  0.0      0     0 ?        S<   10:51   0:00  \_ [z_wr_int]
root       26257  0.0  0.0      0     0 ?        S<   10:51   0:00  \_ [z_wr_int]
root       26258  0.0  0.0      0     0 ?        S<   10:51   0:00  \_ [z_wr_int]
root       26259  0.0  0.0      0     0 ?        S<   10:51   0:00  \_ [z_wr_int]
root       26260  0.0  0.0      0     0 ?        S<   10:51   0:00  \_ [z_wr_int]
root       26261  0.0  0.0      0     0 ?        S<   10:51   0:00  \_ [z_wr_int]
root       26262  0.0  0.0      0     0 ?        S<   10:51   0:00  \_ [z_wr_int]
root       26263  0.0  0.0      0     0 ?        S<   10:51   0:00  \_ [z_wr_int]
root       26264  0.0  0.0      0     0 ?        S<   10:51   0:00  \_ [z_wr_int_h]
root       26265  0.0  0.0      0     0 ?        S<   10:51   0:00  \_ [z_fr_iss]
root       26266  0.0  0.0      0     0 ?        S<   10:51   0:00  \_ [z_fr_iss]
root       26267  0.0  0.0      0     0 ?        S<   10:51   0:00  \_ [z_fr_iss]
root       26268  0.0  0.0      0     0 ?        S<   10:51   0:00  \_ [z_fr_iss]
root       26269  0.0  0.0      0     0 ?        S<   10:51   0:00  \_ [z_fr_iss]
root       26270  0.0  0.0      0     0 ?        S<   10:51   0:00  \_ [z_fr_iss]
root       26271  0.0  0.0      0     0 ?        S<   10:51   0:00  \_ [z_fr_iss]
root       26272  0.0  0.0      0     0 ?        S<   10:51   0:00  \_ [z_fr_iss]
root       26273  0.0  0.0      0     0 ?        S<   10:51   0:00  \_ [z_fr_int]
root       26274  0.0  0.0      0     0 ?        S<   10:51   0:00  \_ [z_cl_iss]
root       26275  0.0  0.0      0     0 ?        S<   10:51   0:00  \_ [z_cl_int]
root       26276  0.0  0.0      0     0 ?        S<   10:51   0:00  \_ [z_ioctl_iss]
root       26277  0.0  0.0      0     0 ?        S<   10:51   0:00  \_ [z_ioctl_int]
root       26278  0.0  0.0      0     0 ?        S<   10:51   0:00  \_ [z_trim_iss]
root       26279  0.0  0.0      0     0 ?        S<   10:51   0:00  \_ [z_trim_int]
root       26280  0.0  0.0      0     0 ?        S    10:51   0:00  \_ [z_zvol]
root       26281  0.0  0.0      0     0 ?        S    10:51   0:00  \_ [z_prefetch]
root       26282  0.0  0.0      0     0 ?        S    10:51   0:00  \_ [z_upgrade]
root       26285  0.0  0.0      0     0 ?        S<   10:51   0:00  \_ [metaslab_group_]
root       26286  0.0  0.0      0     0 ?        SN   10:51   0:00  \_ [dp_sync_taskq]
root       26287  0.0  0.0      0     0 ?        SN   10:51   0:00  \_ [dp_sync_taskq]
root       26288  0.0  0.0      0     0 ?        SN   10:51   0:00  \_ [dp_sync_taskq]
root       26289  0.0  0.0      0     0 ?        SN   10:51   0:00  \_ [dp_sync_taskq]
root       26290  0.0  0.0      0     0 ?        SN   10:51   0:00  \_ [dp_sync_taskq]
root       26291  0.0  0.0      0     0 ?        SN   10:51   0:00  \_ [dp_sync_taskq]
root       26292  0.0  0.0      0     0 ?        SN   10:51   0:00  \_ [dp_sync_taskq]
root       26293  0.0  0.0      0     0 ?        SN   10:51   0:00  \_ [dp_sync_taskq]
root       26294  0.0  0.0      0     0 ?        SN   10:51   0:00  \_ [dp_sync_taskq]
root       26295  0.0  0.0      0     0 ?        SN   10:51   0:00  \_ [dp_zil_clean_ta]
root       26296  0.0  0.0      0     0 ?        SN   10:51   0:00  \_ [dp_zil_clean_ta]
root       26297  0.0  0.0      0     0 ?        SN   10:51   0:00  \_ [dp_zil_clean_ta]
root       26298  0.0  0.0      0     0 ?        SN   10:51   0:00  \_ [dp_zil_clean_ta]
root       26299  0.0  0.0      0     0 ?        SN   10:51   0:00  \_ [dp_zil_clean_ta]
root       26300  0.0  0.0      0     0 ?        SN   10:51   0:00  \_ [dp_zil_clean_ta]
root       26301  0.0  0.0      0     0 ?        SN   10:51   0:00  \_ [dp_zil_clean_ta]
root       26302  0.0  0.0      0     0 ?        SN   10:51   0:00  \_ [dp_zil_clean_ta]
root       26303  0.0  0.0      0     0 ?        SN   10:51   0:00  \_ [dp_zil_clean_ta]
root       26304  0.0  0.0      0     0 ?        SN   10:51   0:00  \_ [dp_zil_clean_ta]
root       26305  0.0  0.0      0     0 ?        SN   10:51   0:00  \_ [dp_zil_clean_ta]
root       26306  0.0  0.0      0     0 ?        SN   10:51   0:00  \_ [dp_zil_clean_ta]
root       26307  0.0  0.0      0     0 ?        S    10:51   0:00  \_ [z_iput]
root       26308  0.0  0.0      0     0 ?        S    10:51   0:00  \_ [z_unlinked_drai]
root       26309  0.0  0.0      0     0 ?        S    10:51   0:00  \_ [txg_quiesce]
root       26310  0.0  0.0      0     0 ?        S    10:51   0:00  \_ [txg_sync]
root       26311  0.0  0.0      0     0 ?        S    10:51   0:00  \_ [mmp]
root       26357  0.0  0.0      0     0 ?        SN   10:51   0:00  \_ [zthr_procedure]
root       26358  0.0  0.0      0     0 ?        SN   10:51   0:00  \_ [zthr_procedure]
root       26451  0.0  0.0      0     0 ?        S<   10:51   0:00  \_ [vdev_autotrim]
root       28797  0.0  0.0      0     0 ?        I    10:52   0:00  \_ [kworker/5:0-rcu_par_gp]
root       30109  0.0  0.0      0     0 ?        I    10:54   0:00  \_ [kworker/3:1-events]
root       30735  0.0  0.0      0     0 ?        I    10:56   0:00  \_ [kworker/1:0-rcu_par_gp]
root       30886  0.0  0.0      0     0 ?        I    10:56   0:00  \_ [kworker/u64:0-events_power_efficient]
root       31538  0.0  0.0      0     0 ?        I    10:59   0:00  \_ [kworker/7:2-events]
root       31539  0.0  0.0      0     0 ?        I    10:59   0:00  \_ [kworker/0:0-events]
root       31942  0.0  0.0      0     0 ?        I    11:02   0:00  \_ [kworker/u64:1-events_unbound]
root       32396  0.0  0.0      0     0 ?        I    11:05   0:00  \_ [kworker/5:1-rcu_par_gp]
root       32548  0.0  0.0      0     0 ?        I    11:06   0:00  \_ [kworker/10:0-rcu_par_gp]
root       32632  0.0  0.0      0     0 ?        I    11:06   0:00  \_ [kworker/9:2-events]
root       32789  0.0  0.0      0     0 ?        I    11:07   0:00  \_ [kworker/4:1-events]
root       32827  0.0  0.0      0     0 ?        I    11:07   0:00  \_ [kworker/2:0-events]
root       32970  0.0  0.0      0     0 ?        I    11:07   0:00  \_ [kworker/1:2-rcu_par_gp]
root       34587  0.0  0.0      0     0 ?        I    11:15   0:00  \_ [kworker/8:1-events]
root       34592  0.0  0.0      0     0 ?        I    11:15   0:00  \_ [kworker/11:2-rcu_par_gp]
root       34612  0.0  0.0      0     0 ?        I    11:15   0:00  \_ [kworker/u64:2-events_power_efficient]
root       34816  0.0  0.0      0     0 ?        I    11:16   0:00  \_ [kworker/4:2-events]
root       35232  0.0  0.0      0     0 ?        I    11:18   0:00  \_ [kworker/9:1-events]
root       35233  0.0  0.0      0     0 ?        I    11:18   0:00  \_ [kworker/2:2-events]
root       35752  0.0  0.0      0     0 ?        I    11:18   0:00  \_ [kworker/5:2-events]
root       35866  0.0  0.0      0     0 ?        I    11:18   0:00  \_ [kworker/6:0-events]
root       35971  0.0  0.0      0     0 ?        I    11:18   0:00  \_ [kworker/0:2-rcu_par_gp]
root       36088  0.0  0.0      0     0 ?        S<   11:18   0:00  \_ [z_rd_int]
root       36137  0.0  0.0      0     0 ?        I    11:18   0:00  \_ [kworker/7:1-events]
root       36165  0.0  0.0      0     0 ?        I    11:18   0:00  \_ [kworker/1:1-events]
root       37267  0.0  0.0      0     0 ?        I    11:18   0:00  \_ [kworker/2:3-rcu_par_gp]
root       37308  0.0  0.0      0     0 ?        I    11:18   0:00  \_ [kworker/10:1-events]
root       37335  0.0  0.0      0     0 ?        I    11:18   0:00  \_ [kworker/4:3-events]
root       37336  0.0  0.0      0     0 ?        I    11:18   0:00  \_ [kworker/4:4-events]
root       37889  0.0  0.0      0     0 ?        S<   11:19   0:00  \_ [z_wr_int]
root       37890  0.0  0.0      0     0 ?        S<   11:19   0:00  \_ [z_wr_int]
root       37896  0.0  0.0      0     0 ?        S<   11:19   0:00  \_ [z_wr_int]
root       37897  0.0  0.0      0     0 ?        S<   11:19   0:00  \_ [z_wr_int]
root       37903  0.0  0.0      0     0 ?        S<   11:19   0:00  \_ [z_wr_int]
root       37906  0.0  0.0      0     0 ?        S<   11:19   0:00  \_ [z_wr_int]
root       37910  0.0  0.0      0     0 ?        S<   11:19   0:00  \_ [z_wr_int]
root       37911  0.0  0.0      0     0 ?        S<   11:19   0:00  \_ [z_wr_int]
root       37912  0.0  0.0      0     0 ?        S<   11:19   0:00  \_ [z_wr_int]
root       37918  0.0  0.0      0     0 ?        S<   11:19   0:00  \_ [z_wr_int]
root       37921  0.0  0.0      0     0 ?        S<   11:19   0:00  \_ [z_wr_int]
root       37924  0.0  0.0      0     0 ?        S<   11:19   0:00  \_ [z_wr_int]
root       37925  0.0  0.0      0     0 ?        S<   11:19   0:00  \_ [z_wr_int]
root       37926  0.0  0.0      0     0 ?        S<   11:19   0:00  \_ [z_wr_int]
root       37928  0.0  0.0      0     0 ?        S<   11:19   0:00  \_ [z_wr_int]
root       37929  0.0  0.0      0     0 ?        S<   11:19   0:00  \_ [z_wr_int]
root       37930  0.0  0.0      0     0 ?        S<   11:19   0:00  \_ [z_wr_int]
root       37931  0.0  0.0      0     0 ?        S<   11:19   0:00  \_ [z_wr_int]
root       37932  0.0  0.0      0     0 ?        S<   11:19   0:00  \_ [z_wr_int]
root       37933  0.0  0.0      0     0 ?        S<   11:19   0:00  \_ [z_wr_int]
root       37934  0.0  0.0      0     0 ?        S<   11:19   0:00  \_ [z_wr_int]
root       37935  0.0  0.0      0     0 ?        S<   11:19   0:00  \_ [z_wr_int]
root       37936  0.0  0.0      0     0 ?        S<   11:19   0:00  \_ [z_wr_int]
root       37937  0.0  0.0      0     0 ?        S<   11:19   0:00  \_ [z_wr_int]
root       37939  0.0  0.0      0     0 ?        SN   11:19   0:00  \_ [z_vdev_file]
root       37942  0.0  0.0      0     0 ?        SN   11:19   0:00  \_ [z_vdev_file]
root       37943  0.0  0.0      0     0 ?        SN   11:19   0:00  \_ [z_vdev_file]
root           1  0.1  0.0 169672 13688 ?        Ss   10:15   0:05 /sbin/init
root         394  0.0  0.2 184236 93920 ?        S<s  10:15   0:02 /lib/systemd/systemd-journald
root         442  0.0  0.0  23860  7504 ?        Ss   10:15   0:01 /lib/systemd/systemd-udevd
systemd+     904  0.0  0.0  24488 13764 ?        Ss   10:15   0:00 /lib/systemd/systemd-resolved
systemd+     905  0.0  0.0  90448  6392 ?        Ssl  10:15   0:00 /lib/systemd/systemd-timesyncd
root         964  0.0  0.0 235836  7688 ?        Ssl  10:15   0:00 /usr/lib/accountsservice/accounts-daemon
root         965  0.0  0.0   2540   784 ?        Ss   10:15   0:00 /usr/sbin/acpid
avahi        968  0.0  0.0   8688  3456 ?        Ss   10:15   0:00 avahi-daemon: running [witherow-db.local]
avahi       1017  0.0  0.0   8344   328 ?        S    10:15   0:00  \_ avahi-daemon: chroot helper
root         969  0.0  0.0   8424  4712 ?        Ss   10:15   0:00 /usr/lib/bluetooth/bluetoothd
root         970  0.0  0.0   6748  3024 ?        Ss   10:15   0:00 /usr/sbin/cron -f
root         971  0.0  0.0  23180  8936 ?        Ss   10:15   0:00 /usr/sbin/cupsd -l
message+     973  0.0  0.0   9812  6284 ?        Ss   10:15   0:01 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
root         976  0.0  0.0 333296 20016 ?        Ssl  10:15   0:01 /usr/sbin/NetworkManager --no-daemon
root         984  0.0  0.0  81980  3488 ?        Ssl  10:15   0:00 /usr/sbin/irqbalance --foreground
root         985  0.0  0.0  34072 20016 ?        Ss   10:15   0:00 /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
root         991  0.0  0.0 238388 10628 ?        Ssl  10:15   0:00 /usr/lib/policykit-1/polkitd --no-debug
root         993  0.0  0.0  11368  2320 ?        Ssl  10:15   0:00 /usr/bin/razerd -f
syslog       996  0.0  0.0 224528  5400 ?        Ssl  10:15   0:01 /usr/sbin/rsyslogd -n -iNONE
root         997  0.2  0.1 2558968 40676 ?       Ssl  10:15   0:09 /usr/lib/snapd/snapd
root        1000  0.0  0.0 233052  5524 ?        Ssl  10:15   0:00 /usr/libexec/switcheroo-control
root        1006  0.0  0.0  17088  8468 ?        Ss   10:15   0:00 /lib/systemd/systemd-logind
root        1008  0.0  0.0 393384 13700 ?        Ssl  10:15   0:00 /usr/lib/udisks2/udisksd
root        1011  0.0  0.0  13680  4904 ?        Ss   10:15   0:00 /sbin/wpa_supplicant -u -s -O /run/wpa_supplicant
colord      1043  0.0  0.0 245004 16228 ?        Ssl  10:15   0:00 /usr/libexec/colord
root        1044  0.0  0.0 180628 12908 ?        Ssl  10:15   0:00 /usr/sbin/cups-browsed
root        1051  0.0  0.0 313744 10496 ?        Ssl  10:15   0:00 /usr/sbin/ModemManager --filter-policy=strict
root        1053  0.0  0.0 235788  7420 ?        Ssl  10:15   0:00 /usr/lib/bolt/boltd
epmd        1056  0.0  0.0   6484  3028 ?        Ss   10:15   0:00 /usr/bin/epmd -systemd
bind        1061  0.0  0.7 2086348 259764 ?      Ssl  10:15   0:01 /usr/sbin/named -f -u bind
rabbitmq    1068  0.0  0.0   2608   536 ?        Ss   10:15   0:00 /bin/sh /usr/sbin/rabbitmq-server
rabbitmq    1145  0.9  0.2 7475712 90412 ?       Sl   10:15   0:36  \_ /usr/lib/erlang/erts-10.6.4/bin/beam.smp -W w -A 192 -MBas ageffcbf -MHas ageffcbf -MBlmbcs 512 -MHlmbcs 512 -MMmcs 30 -P 1048576 -t 5000000 -stbt db -zdbbl 128000 -K true -- -root /usr/lib/erlang -progname erl -- -home /var/lib/rabbitmq -- -pa /usr/lib/rabbitmq/lib/rabbitmq_server-3.8.2/ebin  -noshell -noinput -s rabbit boot -sname rabbit@witherow-db -boot start_sasl -kernel inet_default_connect_options [{nodelay,true}] -sasl errlog_type error -sasl sasl_error_logger false -rabbit lager_log_root "/var/log/rabbitmq" -rabbit lager_default_file "/var/log/rabbitmq/rabbit@witherow-db.log" -rabbit lager_upgrade_file "/var/log/rabbitmq/rabbit@witherow-db_upgrade.log" -rabbit feature_flags_file "/var/lib/rabbitmq/mnesia/rabbit@witherow-db-feature_flags" -rabbit enabled_plugins_file "/etc/rabbitmq/enabled_plugins" -rabbit plugins_dir "/usr/lib/rabbitmq/plugins:/usr/lib/rabbitmq/lib/rabbitmq_server-3.8.2/plugins" -rabbit plugins_expand_dir "/var/lib/rabbitmq/mnesia/rabbit@witherow-db-plugins-expand" -os_mon start_cpu_sup false -os_mon start_disksup false -os_mon start_memsup false -mnesia dir "/var/lib/rabbitmq/mnesia/rabbit@witherow-db" -ra data_dir "/var/lib/rabbitmq/mnesia/rabbit@witherow-db/quorum" -kernel inet_dist_listen_min 25672 -kernel inet_dist_listen_max 25672 --
rabbitmq    1817  0.0  0.0   2492  1440 ?        Ss   10:15   0:00      \_ erl_child_setup 65536
rabbitmq    2154  0.0  0.0   3880   848 ?        Ss   10:15   0:00          \_ inet_gethost 4
rabbitmq    2155  0.0  0.0   4132  1908 ?        S    10:15   0:00              \_ inet_gethost 4
root        1069  0.0  0.0 846924 11128 ?        Ssl  10:15   0:00 /snap/canonical-livepatch/95/canonical-livepatchd
root        1159  0.0  0.0  12176  7232 ?        Ss   10:15   0:00 sshd: /usr/sbin/sshd -D [listener] 0 of 10-100 startups
root        5577  0.0  0.0  15096  9796 ?        Ss   10:15   0:00  \_ sshd: lyam [priv]
lyam        6153  0.0  0.0  15268  6176 ?        S    10:15   0:00  |   \_ sshd: lyam@pts/0
lyam        6154  0.0  0.0   9096  6044 pts/0    Ss   10:15   0:00  |       \_ -bash
lyam       38004  0.0  0.0   9952  4392 pts/0    R+   11:19   0:00  |           \_ ps fauxww
root       11549  0.0  0.0  15092  9960 ?        Ss   10:20   0:00  \_ sshd: lyam [priv]
lyam       11612  0.0  0.0  15264  6152 ?        S    10:20   0:00  |   \_ sshd: lyam@pts/1
lyam       11613  0.0  0.0   8344  5152 pts/1    Ss+  10:20   0:00  |       \_ -bash
root       20964  0.0  0.0  15092  9648 ?        Ss   10:46   0:00  \_ sshd: lyam [priv]
lyam       21027  0.0  0.0  15264  6104 ?        S    10:46   0:00      \_ sshd: lyam@notty
lyam       21028  0.0  0.0   5884  4160 ?        Ss   10:46   0:00          \_ /usr/lib/openssh/sftp-server
root        1223  0.0  0.0  57320  1576 ?        Ss   10:15   0:00 nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
www-data    1224  0.0  0.0  57892  5460 ?        S    10:15   0:00  \_ nginx: worker process
www-data    1225  0.0  0.0  58028  7172 ?        S    10:15   0:00  \_ nginx: worker process
www-data    1226  0.0  0.0  57892  5460 ?        S    10:15   0:00  \_ nginx: worker process
www-data    1228  0.0  0.0  57892  5460 ?        S    10:15   0:00  \_ nginx: worker process
www-data    1229  0.0  0.0  57892  5460 ?        S    10:15   0:00  \_ nginx: worker process
www-data    1230  0.0  0.0  57892  5460 ?        S    10:15   0:00  \_ nginx: worker process
www-data    1231  0.0  0.0  57892  5460 ?        S    10:15   0:00  \_ nginx: worker process
www-data    1232  0.0  0.0  57892  5460 ?        S    10:15   0:00  \_ nginx: worker process
www-data    1233  0.0  0.0  57892  5460 ?        S    10:15   0:00  \_ nginx: worker process
www-data    1234  0.0  0.0  57892  5460 ?        S    10:15   0:00  \_ nginx: worker process
www-data    1235  0.0  0.0  57892  5460 ?        S    10:15   0:00  \_ nginx: worker process
www-data    1236  0.0  0.0  57892  5460 ?        S    10:15   0:00  \_ nginx: worker process
postgres    1338  0.0  0.0 215612 28972 ?        Ss   10:15   0:00 /usr/lib/postgresql/12/bin/postgres -D /var/lib/postgresql/12/main -c config_file=/etc/postgresql/12/main/postgresql.conf
postgres    1401  0.0  0.0 215712  6296 ?        Ss   10:15   0:00  \_ postgres: 12/main: checkpointer
postgres    1402  0.0  0.0 215612  5820 ?        Ss   10:15   0:00  \_ postgres: 12/main: background writer
postgres    1403  0.0  0.0 215612 10060 ?        Ss   10:15   0:00  \_ postgres: 12/main: walwriter
postgres    1404  0.0  0.0 216152  8356 ?        Ss   10:15   0:00  \_ postgres: 12/main: autovacuum launcher
postgres    1405  0.0  0.0  69992  4856 ?        Ss   10:15   0:00  \_ postgres: 12/main: stats collector
postgres    1406  0.0  0.0 216152  6812 ?        Ss   10:15   0:00  \_ postgres: 12/main: logical replication launcher  
mysql       1352  0.0  0.2 1775684 85308 ?       Ssl  10:15   0:01 /usr/sbin/mysqld
root        1466  0.0  0.0 112872 22796 ?        Ssl  10:15   0:00 /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
root        3142  0.0  0.0   4700  3296 ?        Ss   10:15   0:00 /usr/sbin/dovecot -F
dovecot     3256  0.0  0.0   4244  1064 ?        S    10:15   0:00  \_ dovecot/anvil
root        3257  0.0  0.0   4384  2784 ?        S    10:15   0:00  \_ dovecot/log
root        3258  0.0  0.0   5536  4200 ?        S    10:15   0:00  \_ dovecot/config
root        3158  0.0  0.0  34056 13920 ?        Ss   10:15   0:00 /usr/sbin/nmbd --foreground --no-process-group
root        3160  0.1  0.3 2051468 117644 ?      SLsl 10:15   0:07 /usr/sbin/nordvpnd
whoopsie    3168  0.0  0.0 253140 15552 ?        Ssl  10:15   0:00 /usr/bin/whoopsie -f
kernoops    3185  0.0  0.0  11256   448 ?        Ss   10:15   0:00 /usr/sbin/kerneloops --test
kernoops    3193  0.0  0.0  11256   448 ?        Ss   10:15   0:00 /usr/sbin/kerneloops
root        3217  0.0  0.0 1795208 13712 ?       Sl   10:15   0:03 /opt/teamviewer/tv_bin/teamviewerd -d
root        3277  0.0  0.0  41172 17940 ?        Ss   10:15   0:00 /usr/sbin/winbindd --foreground --no-process-group
root        3304  0.0  0.0  41536 12216 ?        S    10:15   0:00  \_ winbindd: domain child [WITHEROW-DB]
root        3396  0.0  0.0  41028  8908 ?        S    10:15   0:00  \_ winbindd: idmap child
root        3398  0.0  0.0  41168 11524 ?        S    10:15   0:00  \_ winbindd: domain child [BUILTIN]
root        3279  0.0  0.0 236980  8636 ?        Ssl  10:15   0:00 /usr/sbin/gdm3
root        3292  0.0  0.0 165412 10108 ?        Sl   10:15   0:00  \_ gdm-session-worker [pam/gdm-autologin]
lyam        3495  0.0  0.0 161384  6572 tty2     Ssl+ 10:15   0:00      \_ /usr/lib/gdm3/gdm-x-session --run-script env GNOME_SHELL_SESSION_MODE=ubuntu /usr/bin/gnome-session --systemd --session=ubuntu
lyam        3498  0.0  0.2 1660792 87204 tty2    Sl+  10:15   0:03          \_ /usr/lib/xorg/Xorg vt2 -displayfd 3 -auth /run/user/1000/gdm/Xauthority -background none -noreset -keeptty -verbose 3
lyam        5352  0.0  0.0 185940 14144 tty2     Sl+  10:15   0:00          \_ /usr/libexec/gnome-session-binary --systemd --systemd --session=ubuntu
lyam        5432  0.0  0.0   6032   456 ?        Ss   10:15   0:00              \_ /usr/bin/ssh-agent /usr/bin/im-launch env GNOME_SHELL_SESSION_MODE=ubuntu /usr/bin/gnome-session --systemd --session=ubuntu
root        3283  0.0  0.0  17684 10852 ?        S    10:15   0:00 ddclient - sleeping for 60 seconds
root        3369  0.0  0.0  49124 22656 ?        Ss   10:15   0:00 /usr/sbin/smbd --foreground --no-process-group
root        3394  0.0  0.0  46904  5692 ?        S    10:15   0:00  \_ /usr/sbin/smbd --foreground --no-process-group
root        3395  0.0  0.0  46904  5692 ?        S    10:15   0:00  \_ /usr/sbin/smbd --foreground --no-process-group
root        3402  0.0  0.0  49132 11640 ?        S    10:15   0:00  \_ /usr/sbin/smbd --foreground --no-process-group
lyam        3392  0.0  0.0  19772 11064 ?        Ss   10:15   0:00 /lib/systemd/systemd --user
lyam        3397  0.0  0.0 106016  4292 ?        S    10:15   0:00  \_ (sd-pam)
lyam        3481  0.0  0.0 1143992 18628 ?       S<sl 10:15   0:00  \_ /usr/bin/pulseaudio --daemonize=no --log-target=journal
lyam        3483  0.0  0.0 656484 24348 ?        SNsl 10:15   0:00  \_ /usr/libexec/tracker-miner-fs
lyam        3496  0.0  0.0   8984  5992 ?        Ss   10:15   0:00  \_ /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
lyam        3516  0.0  0.0 237084  7556 ?        Ssl  10:15   0:00  \_ /usr/libexec/gvfsd
lyam        5701  0.0  0.0 311328  8080 ?        Sl   10:15   0:00  |   \_ /usr/libexec/gvfsd-trash --spawner :1.3 /org/gtk/gvfs/exec_spaw/0
lyam        3521  0.0  0.0 378336  6460 ?        Sl   10:15   0:00  \_ /usr/libexec/gvfsd-fuse /run/user/1000/gvfs -f -o big_writes
lyam        3531  0.0  0.0 311464  9740 ?        Ssl  10:15   0:00  \_ /usr/libexec/gvfs-udisks2-volume-monitor
lyam        3537  0.0  0.0 233240  6472 ?        Ssl  10:15   0:00  \_ /usr/libexec/gvfs-goa-volume-monitor
lyam        3541  0.0  0.1 543556 38220 ?        SLl  10:15   0:00  \_ /usr/libexec/goa-daemon
lyam        3763  0.0  0.0 312116  8864 ?        Sl   10:15   0:00  \_ /usr/libexec/goa-identity-service
lyam        3815  0.0  0.0 233024  5644 ?        Ssl  10:15   0:00  \_ /usr/libexec/gvfs-mtp-volume-monitor
lyam        3892  0.0  0.0 314092  8864 ?        Ssl  10:15   0:00  \_ /usr/libexec/gvfs-afc-volume-monitor
lyam        3912  0.0  0.0 235432  6416 ?        Ssl  10:15   0:00  \_ /usr/libexec/gvfs-gphoto2-volume-monitor
lyam        5468  0.0  0.0 305576  6700 ?        Ssl  10:15   0:00  \_ /usr/libexec/at-spi-bus-launcher
lyam        5474  0.0  0.0   7240  4316 ?        S    10:15   0:00  |   \_ /usr/bin/dbus-daemon --config-file=/usr/share/defaults/at-spi2/accessibility.conf --nofork --print-address 3
lyam        5500  0.0  0.0  87420  4284 ?        Ssl  10:15   0:00  \_ /usr/libexec/gnome-session-ctl --monitor
lyam        5509  0.0  0.0 555640 16060 ?        Ssl  10:15   0:00  \_ /usr/libexec/gnome-session-binary --systemd-service --session=ubuntu
lyam        5765  0.0  0.2 654916 68600 ?        Sl   10:15   0:00  |   \_ /usr/libexec/evolution-data-server/evolution-alarm-notify
lyam        5770  0.0  0.0   7096  3592 ?        S    10:15   0:00  |   \_ bash /home/lyam/.local/share/Steam/steam.sh
lyam        6404  0.4  0.4 787940 154152 ?       Sl   10:15   0:16  |   |   \_ /home/lyam/.local/share/Steam/ubuntu12_32/steam
lyam        7493  0.0  0.1 271544 35052 ?        Ss   10:15   0:00  |   |       \_ /home/lyam/.local/share/Steam/ubuntu12_32/steam
lyam        7494  0.0  0.0   2624   248 ?        S    10:15   0:00  |   |           \_ sh -c '/home/lyam/.local/share/Steam/ubuntu12_64/steamwebhelper.sh' '-lang=en_US' '-cachedir=/home/lyam/.local/share/Steam/config/htmlcache' '-steampid=6404' '-buildid=1603992987' '-steamid=0' '-steamuniverse=Public' '-clientui=/home/lyam/.local/share/Steam/clientui' --enable-blink-features=ResizeObserver,Worklet,AudioWorklet --enable-media-stream --enable-smooth-scrolling --password-store=basic '--log-file=/home/lyam/.local/share/Steam/logs/cef_log.txt'
lyam        7495  0.0  0.0   6828  3084 ?        S    10:15   0:00  |   |               \_ /bin/bash /home/lyam/.local/share/Steam/ubuntu12_64/steamwebhelper.sh -lang=en_US -cachedir=/home/lyam/.local/share/Steam/config/htmlcache -steampid=6404 -buildid=1603992987 -steamid=0 -steamuniverse=Public -clientui=/home/lyam/.local/share/Steam/clientui --enable-blink-features=ResizeObserver,Worklet,AudioWorklet --enable-media-stream --enable-smooth-scrolling --password-store=basic --log-file=/home/lyam/.local/share/Steam/logs/cef_log.txt
lyam        7498  0.0  0.3 610468 111556 ?       Sl   10:15   0:00  |   |                   \_ ./steamwebhelper -lang=en_US -cachedir=/home/lyam/.local/share/Steam/config/htmlcache -steampid=6404 -buildid=1603992987 -steamid=0 -steamuniverse=Public -clientui=/home/lyam/.local/share/Steam/clientui --enable-blink-features=ResizeObserver,Worklet,AudioWorklet --enable-media-stream --enable-smooth-scrolling --password-store=basic --log-file=/home/lyam/.local/share/Steam/logs/cef_log.txt
lyam        7539  0.0  0.1 241584 48908 ?        S    10:15   0:00  |   |                       \_ /home/lyam/.local/share/Steam/ubuntu12_64/steamwebhelper --type=zygote --no-sandbox --log-file=/home/lyam/.local/share/Steam/logs/cef_log.txt --product-version=Valve Steam Client --lang=en_US.UTF-8
lyam        7549  0.0  0.3 552856 100984 ?       Sl   10:15   0:00  |   |                       \_ /home/lyam/.local/share/Steam/ubuntu12_64/steamwebhelper --type=gpu-process --field-trial-handle=12309138204230390080,3108273183457637799,131072 --disable-features=MimeHandlerViewInCrossProcessFrame --no-sandbox --log-file=/home/lyam/.local/share/Steam/logs/cef_log.txt --product-version=Valve Steam Client --lang=en_US.UTF-8 --gpu-preferences=KAAAAAAAAAAgAAAgAAAAAAAAYAAAAAAAEAAAAAAAAAAAAAAAAAAAAAgAAAAAAAAA --log-file=/home/lyam/.local/share/Steam/logs/cef_log.txt --service-request-channel-token=5558979634920746143
lyam        7581  0.0  0.1 308304 55356 ?        Sl   10:15   0:00  |   |                       \_ /home/lyam/.local/share/Steam/ubuntu12_64/steamwebhelper --type=utility --field-trial-handle=12309138204230390080,3108273183457637799,131072 --disable-features=MimeHandlerViewInCrossProcessFrame --lang=en-GB --service-sandbox-type=network --no-sandbox --log-file=/home/lyam/.local/share/Steam/logs/cef_log.txt --product-version=Valve Steam Client --lang=en_US.UTF-8 --log-file=/home/lyam/.local/share/Steam/logs/cef_log.txt --service-request-channel-token=9032621448672975243 --shared-files=v8_context_snapshot_data:100,v8_natives_data:101
lyam        5771  0.0  0.2 441416 76696 ?        Sl   10:15   0:00  |   \_ polychromatic-tray-applet
lyam        5788  0.0  0.0 231792  5968 ?        Sl   10:15   0:00  |   \_ /usr/libexec/gsd-disk-utility-notify
lyam        8355  0.0  0.1 461672 43068 ?        Sl   10:16   0:00  |   \_ update-notifier
lyam        5523  0.1  0.8 5634608 286836 ?      Ssl  10:15   0:05  \_ /usr/bin/gnome-shell
lyam        5579  0.0  0.0 382036  8364 ?        Sl   10:15   0:00  |   \_ ibus-daemon --panel disable --xim
lyam        5583  0.0  0.0 160072  7028 ?        Sl   10:15   0:00  |       \_ /usr/libexec/ibus-memconf
lyam        5584  0.0  0.0 273152 31580 ?        Sl   10:15   0:00  |       \_ /usr/libexec/ibus-extension-gtk3
lyam        5821  0.0  0.0 160064  6988 ?        Sl   10:15   0:00  |       \_ /usr/libexec/ibus-engine-simple
lyam        5586  0.0  0.0 195320 28244 ?        Sl   10:15   0:00  \_ /usr/libexec/ibus-x11 --kill-daemon
lyam        5588  0.0  0.0 233872  7192 ?        Sl   10:15   0:00  \_ /usr/libexec/ibus-portal
lyam        5601  0.0  0.0 162828  7680 ?        Sl   10:15   0:00  \_ /usr/libexec/at-spi2-registryd --use-gnome-session
lyam        5605  0.0  0.0 232956  5976 ?        Ssl  10:15   0:00  \_ /usr/libexec/xdg-permission-store
lyam        5607  0.0  0.0 581028 19868 ?        Sl   10:15   0:00  \_ /usr/libexec/gnome-shell-calendar-server
lyam        5616  0.0  0.0 1067608 25404 ?       Ssl  10:15   0:00  \_ /usr/libexec/evolution-source-registry
lyam        5625  0.0  0.0 836076 30084 ?        Ssl  10:15   0:00  \_ /usr/libexec/evolution-calendar-factory
lyam        5630  0.0  0.0 156356  5820 ?        Sl   10:15   0:00  \_ /usr/libexec/dconf-service
lyam        5634  0.0  0.4 3451796 140964 ?      Sl   10:15   0:02  \_ /opt/teamviewer/tv_bin/TeamViewer
lyam        5647  0.0  0.0 670588 29468 ?        Ssl  10:15   0:00  \_ /usr/libexec/evolution-addressbook-factory
lyam        5689  0.0  0.0 2927652 26528 ?       Sl   10:15   0:00  \_ /usr/bin/gjs /usr/share/gnome-shell/org.gnome.Shell.Notifications
lyam        5711  0.0  0.0 307060  6636 ?        Ssl  10:15   0:00  \_ /usr/libexec/gsd-a11y-settings
lyam        5712  0.0  0.0 428564 30620 ?        Ssl  10:15   0:00  \_ /usr/libexec/gsd-color
lyam        5713  0.0  0.0 452136 25296 ?        Ssl  10:15   0:00  \_ /usr/libexec/gsd-datetime
lyam        5714  0.0  0.0 309244  7672 ?        Ssl  10:15   0:00  \_ /usr/libexec/gsd-housekeeping
lyam        5715  0.0  0.0 343320 28964 ?        Ssl  10:15   0:00  \_ /usr/libexec/gsd-keyboard
lyam        5716  0.0  0.0 685748 31408 ?        Ssl  10:15   0:00  \_ /usr/libexec/gsd-media-keys
lyam        5718  0.0  0.0 417652 29356 ?        Ssl  10:15   0:00  \_ /usr/libexec/gsd-power
lyam        5720  0.0  0.0 245616 11380 ?        Ssl  10:15   0:00  \_ /usr/libexec/gsd-print-notifications
lyam        5722  0.0  0.0 454464  5792 ?        Ssl  10:15   0:00  \_ /usr/libexec/gsd-rfkill
lyam        5725  0.0  0.0 232872  5960 ?        Ssl  10:15   0:00  \_ /usr/libexec/gsd-screensaver-proxy
lyam        5726  0.0  0.0 462176 10840 ?        Ssl  10:15   0:00  \_ /usr/libexec/gsd-sharing
lyam        5727  0.0  0.0 312564  9720 ?        Ssl  10:15   0:00  \_ /usr/libexec/gsd-smartcard
lyam        5728  0.0  0.0 316752  8984 ?        Ssl  10:15   0:00  \_ /usr/libexec/gsd-sound
lyam        5731  0.0  0.0 382368  7328 ?        Ssl  10:15   0:00  \_ /usr/libexec/gsd-usb-protection
lyam        5734  0.0  0.0 342812 28016 ?        Ssl  10:15   0:00  \_ /usr/libexec/gsd-wacom
lyam        5737  0.0  0.0 311384  8020 ?        Ssl  10:15   0:00  \_ /usr/libexec/gsd-wwan
lyam        5739  0.0  0.0 344084 29620 ?        Ssl  10:15   0:00  \_ /usr/libexec/gsd-xsettings
lyam        5847  0.0  0.1 396416 42716 ?        Ssl  10:15   0:00  \_ /usr/lib/vino/vino-server
lyam        5855  0.1  0.8 1281932 265300 ?      Sl   10:15   0:06  \_ /snap/snap-store/498/usr/bin/snap-store --gapplication-service
lyam        5859  0.0  0.0 339552 14384 ?        Sl   10:15   0:00  \_ /usr/libexec/gsd-printer
lyam        5913  0.0  0.0 528756  6312 ?        Ssl  10:15   0:00  \_ /usr/libexec/xdg-document-portal
lyam        6043  0.0  0.0 192712 30236 ?        Ssl  10:15   0:00  \_ openrazer-daemon
lyam        8352  0.0  0.0 159620  6332 ?        Ssl  10:16   0:00  \_ /usr/libexec/gvfsd-metadata
lyam        3487  0.0  0.0 237552  7832 ?        SLl  10:15   0:00 /usr/bin/gnome-keyring-daemon --daemonize --login
rtkit       3503  0.0  0.0 152932  2976 ?        SNsl 10:15   0:00 /usr/libexec/rtkit-daemon
root        3926  0.0  0.0 249568  9668 ?        Ssl  10:15   0:00 /usr/lib/upower/upowerd
geoclue     5626  0.0  0.0 358936 19424 ?        Ssl  10:15   0:00 /usr/libexec/geoclue
root        6405  0.0  0.0 374508 23212 ?        Ssl  10:15   0:00 /usr/libexec/fwupd/fwupd
root       25759  0.0  0.0   4636  1820 ?        Ss   10:50   0:00 /bin/sh /snap/lxd/18402/commands/daemon.start
root       25936  0.3  0.2 2378860 86088 ?       Sl   10:50   0:05  \_ lxd --logfile /var/snap/lxd/common/lxd/logs/lxd.log --group lxd
root       25923  0.0  0.0 163344  1740 ?        Sl   10:50   0:00 lxcfs /var/snap/lxd/common/var/lib/lxcfs -p /var/snap/lxd/common/lxcfs.pid
root       29072  0.0  0.0 1231196 14736 ?       Ss   10:52   0:00 [lxc monitor] /var/snap/lxd/common/lxd/containers postal
1000000    29083  0.0  0.0 170668  7524 ?        Ss   10:52   0:00  \_ /sbin/init
1000000    29246  0.0  0.0  36232  8940 ?        Ss   10:52   0:00      \_ /lib/systemd/systemd-journald
1000000    29293  0.0  0.0  20444  3120 ?        Ss   10:52   0:00      \_ /lib/systemd/systemd-udevd
1000101    29308  0.0  0.0  19808  5496 ?        Ss   10:52   0:00      \_ /lib/systemd/systemd-networkd
1000000    29328  0.0  0.0   9392  1608 ?        Ss   10:52   0:00      \_ /usr/sbin/cron -f
1000103    29329  0.0  0.0   8264  2964 ?        Ss   10:52   0:00      \_ /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
1000000    29332  0.0  0.0  32228 13680 ?        Ss   10:52   0:00      \_ /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
1000104    29333  0.0  0.0 151452  2916 ?        Ssl  10:52   0:00      \_ /usr/sbin/rsyslogd -n -iNONE
1000000    29334  0.0  0.0  17808  5312 ?        Ss   10:52   0:00      \_ /lib/systemd/systemd-logind
1000102    29338  0.0  0.0  25148  9896 ?        Ss   10:52   0:00      \_ /lib/systemd/systemd-resolved
1000000    29344  0.0  0.0   8188  1336 pts/0    Ss+  10:52   0:00      \_ /sbin/agetty -o -p -- \u --noclear --keep-baud console 115200,38400,9600 linux
root       36114  0.0  0.0 1230940 14296 ?       Ss   11:18   0:00 [lxc monitor] /var/snap/lxd/common/lxd/containers groovy
1000000    36125  0.1  0.0 105132  7532 ?        Ss   11:18   0:00  \_ /sbin/init
1000000    36855  0.1  0.0  36232  9012 ?        Ss   11:18   0:00      \_ /lib/systemd/systemd-journald
1000000    37122  0.0  0.0  20444  3108 ?        Ss   11:18   0:00      \_ /lib/systemd/systemd-udevd
1000101    37217  0.0  0.0  19808  5472 ?        Ss   11:18   0:00      \_ /lib/systemd/systemd-networkd
1000000    37297  0.0  0.0   9392  1600 ?        Ss   11:18   0:00      \_ /usr/sbin/cron -f
1000103    37298  0.0  0.0   8264  2876 ?        Ss   11:18   0:00      \_ /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
1000000    37301  0.0  0.0  32228 13620 ?        Ss   11:18   0:00      \_ /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
1000104    37302  0.0  0.0 151452  2952 ?        Ssl  11:18   0:00      \_ /usr/sbin/rsyslogd -n -iNONE
1000000    37303  0.0  0.0  17808  5356 ?        Ss   11:18   0:00      \_ /lib/systemd/systemd-logind
1000102    37304  0.0  0.0  25148  9448 ?        Ss   11:18   0:00      \_ /lib/systemd/systemd-resolved
1000000    37313  0.0  0.0   8188  1332 pts/1    Ss+  11:18   0:00      \_ /sbin/agetty -o -p -- \u --noclear --keep-baud console 115200,38400,9600 linux

And iptables -L -n

Chain INPUT (policy DROP)
target     prot opt source               destination
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0            tcp dpt:53 /* generated for LXD network lxdbr0 */
ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0            udp dpt:53 /* generated for LXD network lxdbr0 */
ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0            udp dpt:67 /* generated for LXD network lxdbr0 */
ufw-before-logging-input  all  --  0.0.0.0/0            0.0.0.0/0
ufw-before-input  all  --  0.0.0.0/0            0.0.0.0/0
ufw-after-input  all  --  0.0.0.0/0            0.0.0.0/0
ufw-after-logging-input  all  --  0.0.0.0/0            0.0.0.0/0
ufw-reject-input  all  --  0.0.0.0/0            0.0.0.0/0
ufw-track-input  all  --  0.0.0.0/0            0.0.0.0/0
ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0
ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0
ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED

Chain FORWARD (policy DROP)
target     prot opt source               destination
ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0            /* generated for LXD network lxdbr0 */
ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0            /* generated for LXD network lxdbr0 */
ufw-before-logging-forward  all  --  0.0.0.0/0            0.0.0.0/0
ufw-before-forward  all  --  0.0.0.0/0            0.0.0.0/0
ufw-after-forward  all  --  0.0.0.0/0            0.0.0.0/0
ufw-after-logging-forward  all  --  0.0.0.0/0            0.0.0.0/0
ufw-reject-forward  all  --  0.0.0.0/0            0.0.0.0/0
ufw-track-forward  all  --  0.0.0.0/0            0.0.0.0/0
ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0
ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0            tcp spt:53 /* generated for LXD network lxdbr0 */
ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0            udp spt:53 /* generated for LXD network lxdbr0 */
ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0            udp spt:67 /* generated for LXD network lxdbr0 */
ufw-before-logging-output  all  --  0.0.0.0/0            0.0.0.0/0
ufw-before-output  all  --  0.0.0.0/0            0.0.0.0/0
ufw-after-output  all  --  0.0.0.0/0            0.0.0.0/0
ufw-after-logging-output  all  --  0.0.0.0/0            0.0.0.0/0
ufw-reject-output  all  --  0.0.0.0/0            0.0.0.0/0
ufw-track-output  all  --  0.0.0.0/0            0.0.0.0/0

Chain ufw-after-forward (1 references)
target     prot opt source               destination

Chain ufw-after-input (1 references)
target     prot opt source               destination
ufw-skip-to-policy-input  udp  --  0.0.0.0/0            0.0.0.0/0            udp dpt:137
ufw-skip-to-policy-input  udp  --  0.0.0.0/0            0.0.0.0/0            udp dpt:138
ufw-skip-to-policy-input  tcp  --  0.0.0.0/0            0.0.0.0/0            tcp dpt:139
ufw-skip-to-policy-input  tcp  --  0.0.0.0/0            0.0.0.0/0            tcp dpt:445
ufw-skip-to-policy-input  udp  --  0.0.0.0/0            0.0.0.0/0            udp dpt:67
ufw-skip-to-policy-input  udp  --  0.0.0.0/0            0.0.0.0/0            udp dpt:68
ufw-skip-to-policy-input  all  --  0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type BROADCAST

Chain ufw-after-logging-forward (1 references)
target     prot opt source               destination
LOG        all  --  0.0.0.0/0            0.0.0.0/0            limit: avg 3/min burst 10 LOG flags 0 level 4 prefix "[UFW BLOCK] "

Chain ufw-after-logging-input (1 references)
target     prot opt source               destination
LOG        all  --  0.0.0.0/0            0.0.0.0/0            limit: avg 3/min burst 10 LOG flags 0 level 4 prefix "[UFW BLOCK] "

Chain ufw-after-logging-output (1 references)
target     prot opt source               destination

Chain ufw-after-output (1 references)
target     prot opt source               destination

Chain ufw-before-forward (1 references)
target     prot opt source               destination
ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
ACCEPT     icmp --  0.0.0.0/0            0.0.0.0/0            icmptype 3
ACCEPT     icmp --  0.0.0.0/0            0.0.0.0/0            icmptype 11
ACCEPT     icmp --  0.0.0.0/0            0.0.0.0/0            icmptype 12
ACCEPT     icmp --  0.0.0.0/0            0.0.0.0/0            icmptype 8
ufw-user-forward  all  --  0.0.0.0/0            0.0.0.0/0

Chain ufw-before-input (1 references)
target     prot opt source               destination
ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0
ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
ufw-logging-deny  all  --  0.0.0.0/0            0.0.0.0/0            ctstate INVALID
DROP       all  --  0.0.0.0/0            0.0.0.0/0            ctstate INVALID
ACCEPT     icmp --  0.0.0.0/0            0.0.0.0/0            icmptype 3
ACCEPT     icmp --  0.0.0.0/0            0.0.0.0/0            icmptype 11
ACCEPT     icmp --  0.0.0.0/0            0.0.0.0/0            icmptype 12
ACCEPT     icmp --  0.0.0.0/0            0.0.0.0/0            icmptype 8
ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0            udp spt:67 dpt:68
ufw-not-local  all  --  0.0.0.0/0            0.0.0.0/0
ACCEPT     udp  --  0.0.0.0/0            224.0.0.251          udp dpt:5353
ACCEPT     udp  --  0.0.0.0/0            239.255.255.250      udp dpt:1900
ufw-user-input  all  --  0.0.0.0/0            0.0.0.0/0

Chain ufw-before-logging-forward (1 references)
target     prot opt source               destination

Chain ufw-before-logging-input (1 references)
target     prot opt source               destination

Chain ufw-before-logging-output (1 references)
target     prot opt source               destination

Chain ufw-before-output (1 references)
target     prot opt source               destination
ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0
ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
ufw-user-output  all  --  0.0.0.0/0            0.0.0.0/0

Chain ufw-logging-allow (0 references)
target     prot opt source               destination
LOG        all  --  0.0.0.0/0            0.0.0.0/0            limit: avg 3/min burst 10 LOG flags 0 level 4 prefix "[UFW ALLOW] "

Chain ufw-logging-deny (2 references)
target     prot opt source               destination
RETURN     all  --  0.0.0.0/0            0.0.0.0/0            ctstate INVALID limit: avg 3/min burst 10
LOG        all  --  0.0.0.0/0            0.0.0.0/0            limit: avg 3/min burst 10 LOG flags 0 level 4 prefix "[UFW BLOCK] "

Chain ufw-not-local (1 references)
target     prot opt source               destination
RETURN     all  --  0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type LOCAL
RETURN     all  --  0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type MULTICAST
RETURN     all  --  0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type BROADCAST
ufw-logging-deny  all  --  0.0.0.0/0            0.0.0.0/0            limit: avg 3/min burst 10
DROP       all  --  0.0.0.0/0            0.0.0.0/0

Chain ufw-reject-forward (1 references)
target     prot opt source               destination

Chain ufw-reject-input (1 references)
target     prot opt source               destination

Chain ufw-reject-output (1 references)
target     prot opt source               destination

Chain ufw-skip-to-policy-forward (0 references)
target     prot opt source               destination
DROP       all  --  0.0.0.0/0            0.0.0.0/0

Chain ufw-skip-to-policy-input (7 references)
target     prot opt source               destination
DROP       all  --  0.0.0.0/0            0.0.0.0/0

Chain ufw-skip-to-policy-output (0 references)
target     prot opt source               destination
ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0

Chain ufw-track-forward (1 references)
target     prot opt source               destination

Chain ufw-track-input (1 references)
target     prot opt source               destination

Chain ufw-track-output (1 references)
target     prot opt source               destination
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0            ctstate NEW
ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0            ctstate NEW

Chain ufw-user-forward (1 references)
target     prot opt source               destination

Chain ufw-user-input (1 references)
target     prot opt source               destination
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0            tcp dpt:25 /* 'dapp_Postfix' */
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0            tcp dpt:80
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0            tcp dpt:443
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0            tcp dpt:80
ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0            udp dpt:80
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0            tcp dpt:8080
ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0            udp dpt:8080
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0            tcp dpt:2525
ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0            udp dpt:2525
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0            tcp dpt:8443
ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0            udp dpt:8443

Chain ufw-user-limit (0 references)
target     prot opt source               destination
LOG        all  --  0.0.0.0/0            0.0.0.0/0            limit: avg 3/min burst 5 LOG flags 0 level 4 prefix "[UFW LIMIT BLOCK] "
REJECT     all  --  0.0.0.0/0            0.0.0.0/0            reject-with icmp-port-unreachable

Chain ufw-user-limit-accept (0 references)
target     prot opt source               destination
ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0

Chain ufw-user-logging-forward (0 references)
target     prot opt source               destination

Chain ufw-user-logging-input (0 references)
target     prot opt source               destination

Chain ufw-user-logging-output (0 references)
target     prot opt source               destination

Chain ufw-user-output (1 references)
target     prot opt source               destination
Lyamc commented 3 years ago

I'm not sure if you wanted the container to run the command or the host so here's the container output as well just in case Container ps fauxww

USER         PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root         267  0.0  0.0  11544  2788 pts/0    Ss   19:24   0:00 bash
root         274  0.0  0.0  14068  2140 pts/0    R+   19:24   0:00  \_ ps fauxww
root           1  0.0  0.0 170668  7524 ?        Ss   18:52   0:00 /sbin/init
root          43  0.0  0.0  36232  8940 ?        Ss   18:52   0:00 /lib/systemd/systemd-journald
root          76  0.0  0.0  20444  3120 ?        Ss   18:52   0:00 /lib/systemd/systemd-udevd
systemd+      91  0.0  0.0  19808  5496 ?        Ss   18:52   0:00 /lib/systemd/systemd-networkd
root         109  0.0  0.0   9392  1608 ?        Ss   18:52   0:00 /usr/sbin/cron -f
message+     110  0.0  0.0   8264  2964 ?        Ss   18:52   0:00 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
root         113  0.0  0.0  32228 13680 ?        Ss   18:52   0:00 /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
syslog       114  0.0  0.0 151452  2916 ?        Ssl  18:52   0:00 /usr/sbin/rsyslogd -n -iNONE
root         115  0.0  0.0  17808  5312 ?        Ss   18:52   0:00 /lib/systemd/systemd-logind
systemd+     118  0.0  0.0  25148  9896 ?        Ss   18:52   0:00 /lib/systemd/systemd-resolved
root         124  0.0  0.0   8188  1336 pts/0    Ss+  18:52   0:00 /sbin/agetty -o -p -- \u --noclear --keep-baud console 115200,38400,9600 linux

Container iptables -L -n

bash: iptables: command not found
Lyamc commented 3 years ago

@stgraber What additional information is needed?

stgraber commented 3 years ago

Looking at above dnsnasq isn't running for some reason.

Can you show (from the host):

stgraber commented 3 years ago

Chances are you have something else listening on port 53 or 67 which isn't configured to just deal with the interface it needs.

stgraber commented 3 years ago

Nevermind, I found it in your process list. You have bind9 (named) on your system. In its default configuration, that DNS server binds port 53 on all interfaces, preventing dnsnasq from starting.

Uninstall bind9 if unused or if you actually are using it, configure it to only listen to those interfaces you need it on.

Lyamc commented 3 years ago

You're right on the money! Thank you!

+--------+---------+-----------------------+----------------------------------------------+-----------+-----------+
|  NAME  |  STATE  |         IPV4          |                     IPV6                     |   TYPE    | SNAPSHOTS |
+--------+---------+-----------------------+----------------------------------------------+-----------+-----------+
| groovy | RUNNING | 10.250.125.104 (eth0) | fd42:d67a:f0d:e23f:216:3eff:fed2:8684 (eth0) | CONTAINER | 0         |
+--------+---------+-----------------------+----------------------------------------------+-----------+-----------+

Perhaps LXC or LXD should inform the user that dnsmasq cannot start and which log to check. All I did was sudo systemctl stop bind9 and sudo systemctl disable bind9 then sudo reboot

stgraber commented 3 years ago

LXD actually logs it on startup, or is supposed to anyway. Alternatively modifying any setting would have also failed with an error showing dnsmasq failing to start. Though getting from there to figuring out what's conflicting isn't always trivial :)