weaveworks / ignite

Ignite a Firecracker microVM
https://ignite.readthedocs.org
Apache License 2.0
3.49k stars 225 forks source link

How to troubleshoot non-booting VM #567

Open cbluth opened 4 years ago

cbluth commented 4 years ago

i am trying to run some network scans on my corporate network, and i used to use a kali qcow2 image. i would like to try to run it in ignite. here is the log:

root@host:~# ignite run kalilinux/kali --cpus 8 --memory 16GB --ssh --name kali
INFO[0000] containerd image "kalilinux/kali:latest" not found locally, pulling... 
INFO[0003] Starting image import...                     
INFO[0005] Imported OCI image "kalilinux/kali:latest" (110.5 MB) to base image with UID "d3da442bde9b7e46" 
INFO[0006] Created VM with ID "d4d33bbda4ead8f9" and name "kali" 
INFO[0007] Networking is handled by "cni"               
INFO[0007] Started Firecracker VM "d4d33bbda4ead8f9" in a container with ID "ignite-d4d33bbda4ead8f9" 
FATA[0027] Tried connecting to SSH but timed out dial tcp 10.10.10.3:22: i/o timeout 
root@host:~#

how do i see the boot log or how else can i troubleshoot this?

cbluth commented 4 years ago

i have also tried this dockerfile, without much improvement:

FROM kalilinux/kali:latest

SHELL [ "/bin/bash", "-c" ]

RUN apt update && \
    apt dist-upgrade -y && \
    apt install -y \
        openssh-server \
        systemd \
        systemd-sysv \
        && \
    rm -rf /var/lib/apt/lists/* && \
    systemctl enable ssh.service

here are the logs:

root@host:~# ignite run cbluth/kali:latest --cpus 8 --memory 16GB --ssh --name kali
INFO[0000] Created VM with ID "b1b4f62491cf860e" and name "kali" 
INFO[0001] Networking is handled by "cni"               
INFO[0001] Started Firecracker VM "b1b4f62491cf860e" in a container with ID "ignite-b1b4f62491cf860e" 
FATA[0022] Tried connecting to SSH but timed out dial tcp 10.10.10.8:22: i/o timeout 
root@host:~# 
cbluth commented 4 years ago

i found the debug options:

root@host:~# ignite run cbluth/kali:latest --cpus 8 --memory 16GB --name kali --debug --interactive
INFO[0000] Created VM with ID "542bbc2066a56269" and name "kali" 
INFO[0001] Networking is handled by "cni"               
INFO[0001] Started Firecracker VM "542bbc2066a56269" in a container with ID "ignite-542bbc2066a56269" 
542bbc2066a56269
INFO[0001] Moving IP address 10.61.0.10 (255.255.0.0) from container to VM 
INFO[0001] Called startVMM(), setting up a VMM on /var/lib/firecracker/vm/542bbc2066a56269/firecracker.sock 
INFO[0001] Starting DHCP server for interface "br_eth0" (10.61.0.10) 
2020-03-27T15:33:58.645326334 [anonymous-instance:INFO] The API server received a synchronous Put request on "/logger" with body "{\"level\":\"Info\",\"log_fifo\":\"/var/lib/firecracker/vm/542bbc2066a56269/firecracker_log.fifo\",\"metrics_fifo\":\"/var/lib/firecracker/vm/542bbc2066a56269/firecracker_metrics.fifo\",\"options\":[],\"show_level\":true,\"show_log_origin\":false}\n".
INFO[0001] refreshMachineConfiguration: [GET /machine-config][200] getMachineConfigurationOK  &{CPUTemplate:Uninitialized HtEnabled:0xc00062a0ed MemSizeMib:0xc00062a0e0 VcpuCount:0xc00062a0d8} 
INFO[0001] PutGuestBootSource: [PUT /boot-source][204] putGuestBootSourceNoContent  
INFO[0001] Attaching drive /dev/mapper/ignite-542bbc2066a56269, slot 1, root true. 
INFO[0001] Attached drive /dev/mapper/ignite-542bbc2066a56269: [PUT /drives/{drive_id}][204] putGuestDriveByIdNoContent  
INFO[0001] Attaching NIC vm_eth0 (hwaddr 5e:24:b4:9f:53:7c) at index 1 
INFO[0001] PutGuestNetworkInterfaceByID: [PUT /network-interfaces/{iface_id}][204] putGuestNetworkInterfaceByIdNoContent  
INFO[0001] startInstance successful: [PUT /actions][204] createSyncActionNoContent  
[    0.000000] Linux version 4.19.47 (root@b077421cb135) (gcc version 7.4.0 (Ubuntu 7.4.0-1ubuntu1~18.04.1)) #1 SMP Tue Jul 16 18:57:23 UTC 2019
[    0.000000] Command line: console=ttyS0 reboot=k panic=1 pci=off ip=dhcp root=/dev/vda rw virtio_mmio.device=4K@0xd0000000:5 virtio_mmio.device=4K@0xd0001000:6
[    0.000000] x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers'
[    0.000000] x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers'
[    0.000000] x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers'
[    0.000000] x86/fpu: xstate_offset[2]:  576, xstate_sizes[2]:  256
[    0.000000] x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format.
[    0.000000] BIOS-provided physical RAM map:
[    0.000000] BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable
[    0.000000] BIOS-e820: [mem 0x0000000000100000-0x00000000cfffffff] usable
[    0.000000] BIOS-e820: [mem 0x0000000100000000-0x000000042fffffff] usable
[    0.000000] NX (Execute Disable) protection: active
[    0.000000] DMI not present or invalid.
[    0.000000] Hypervisor detected: KVM
[    0.000000] kvm-clock: Using msrs 4b564d01 and 4b564d00
[    0.000000] kvm-clock: cpu 0, msr 2401001, primary cpu clock
[    0.000000] kvm-clock: using sched offset of 66263752 cycles
[    0.000003] clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns
[    0.000013] tsc: Detected 3599.996 MHz processor
[    0.000165] last_pfn = 0x430000 max_arch_pfn = 0x400000000
[    0.000201] Disabled
[    0.000202] x86/PAT: MTRRs disabled, skipping PAT initialization too.
[    0.000211] CPU MTRRs all blank - virtualized system.
[    0.000213] x86/PAT: Configuration [0-7]: WB  WT  UC- UC  WB  WT  UC- UC  
[    0.000217] last_pfn = 0xd0000 max_arch_pfn = 0x400000000
[    0.000245] found SMP MP-table at [mem 0x0009fc00-0x0009fc0f]
[    0.000302] Scanning 1 areas for low memory corruption
[    0.000310] Using GB pages for direct mapping
[    0.000502] No NUMA configuration found
[    0.000503] Faking a node at [mem 0x0000000000000000-0x000000042fffffff]
[    0.000510] NODE_DATA(0) allocated [mem 0x42ffdd000-0x42fffefff]
[    0.000654] Zone ranges:
[    0.000659]   DMA      [mem 0x0000000000001000-0x0000000000ffffff]
[    0.000660]   DMA32    [mem 0x0000000001000000-0x00000000ffffffff]
[    0.000661]   Normal   [mem 0x0000000100000000-0x000000042fffffff]
[    0.000663] Movable zone start for each node
[    0.000666] Early memory node ranges
[    0.000666]   node   0: [mem 0x0000000000001000-0x000000000009efff]
[    0.000667]   node   0: [mem 0x0000000000100000-0x00000000cfffffff]
[    0.000668]   node   0: [mem 0x0000000100000000-0x000000042fffffff]
[    0.000679] Reserved but unavailable: 98 pages
[    0.000680] Initmem setup node 0 [mem 0x0000000000001000-0x000000042fffffff]
[    0.209608] Intel MultiProcessor Specification v1.4
[    0.209613] MPTABLE: OEM ID: FC      
[    0.209614] MPTABLE: Product ID: 000000000000
[    0.209615] MPTABLE: APIC at: 0xFEE00000
[    0.209624] Processor #0 (Bootup-CPU)
[    0.209626] Processor #1
[    0.209626] Processor #2
[    0.209627] Processor #3
[    0.209627] Processor #4
[    0.209628] Processor #5
[    0.209628] Processor #6
[    0.209629] Processor #7
[    0.209673] IOAPIC[0]: apic_id 9, version 17, address 0xfec00000, GSI 0-23
[    0.209675] Processors: 8
[    0.209678] smpboot: Allowing 8 CPUs, 0 hotplug CPUs
[    0.209702] PM: Registered nosave memory: [mem 0x00000000-0x00000fff]
[    0.209703] PM: Registered nosave memory: [mem 0x0009f000-0x000fffff]
[    0.209704] PM: Registered nosave memory: [mem 0xd0000000-0xffffffff]
[    0.209706] [mem 0xd0000000-0xffffffff] available for PCI devices
[    0.209707] Booting paravirtualized kernel on KVM
[    0.209712] clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645519600211568 ns
[    0.209744] random: get_random_bytes called from start_kernel+0x94/0x495 with crng_init=0
[    0.209748] setup_percpu: NR_CPUS:128 nr_cpumask_bits:128 nr_cpu_ids:8 nr_node_ids:1
[    0.211080] percpu: Embedded 42 pages/cpu s135168 r8192 d28672 u262144
[    0.211110] KVM setup async PF for cpu 0
[    0.211114] kvm-stealtime: cpu 0, msr 41fa14f40
[    0.211120] PV qspinlock hash table entries: 256 (order: 0, 4096 bytes)
[    0.211130] Built 1 zonelists, mobility grouping on.  Total pages: 4128649
[    0.211130] Policy zone: Normal
[    0.211131] Kernel command line: console=ttyS0 reboot=k panic=1 pci=off ip=dhcp root=/dev/vda rw virtio_mmio.device=4K@0xd0000000:5 virtio_mmio.device=4K@0xd0001000:6
[    0.291680] Memory: 16424388K/16776824K available (10248K kernel code, 661K rwdata, 1500K rodata, 1352K init, 6084K bss, 352436K reserved, 0K cma-reserved)
[    0.291769] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=8, Nodes=1
[    0.291782] Kernel/User page tables isolation: enabled
[    0.291963] rcu: Hierarchical RCU implementation.
[    0.291966] rcu:     RCU restricting CPUs from NR_CPUS=128 to nr_cpu_ids=8.
[    0.291968] rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=8
[    0.291997] NR_IRQS: 4352, nr_irqs: 104, preallocated irqs: 16
[    0.292224] Console: colour dummy device 80x25
[    0.350874] console [ttyS0] enabled
[    0.351405] APIC: Switch to symmetric I/O mode setup
[    0.352265] x2apic enabled
[    0.352867] Switched APIC routing to physical x2apic.
[    0.354588] ..TIMER: vector=0x30 apic1=0 pin1=0 apic2=-1 pin2=-1
[    0.355310] clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x33e44fb235b, max_idle_ns: 440795341910 ns
[    0.356521] Calibrating delay loop (skipped) preset value.. 7199.99 BogoMIPS (lpj=14399984)
[    0.357439] pid_max: default: 32768 minimum: 301
[    0.358001] Security Framework initialized
[    0.358472] SELinux:  Initializing.
[    0.370875] Dentry cache hash table entries: 2097152 (order: 12, 16777216 bytes)
[    0.377282] Inode-cache hash table entries: 1048576 (order: 11, 8388608 bytes)
[    0.378277] Mount-cache hash table entries: 32768 (order: 6, 262144 bytes)
[    0.379217] Mountpoint-cache hash table entries: 32768 (order: 6, 262144 bytes)
[    0.380486] Last level iTLB entries: 4KB 64, 2MB 8, 4MB 8
[    0.380508] Last level dTLB entries: 4KB 64, 2MB 0, 4MB 0, 1GB 4
[    0.381185] Spectre V2 : Mitigation: Full generic retpoline
[    0.381818] Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch
[    0.382745] Spectre V2 : Enabling Restricted Speculation for firmware calls
[    0.383539] Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier
[    0.384507] Spectre V2 : User space: Vulnerable
[    0.385016] Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl and seccomp
[    0.386103] MDS: Vulnerable: Clear CPU buffers attempted, no microcode
[    0.387107] Freeing SMP alternatives memory: 28K
[    0.390169] smpboot: CPU0: Intel(R) Xeon(R) Processor @ 3.60GHz (family: 0x6, model: 0x4f, stepping: 0x1)
[    0.391360] Performance Events: unsupported p6 CPU model 79 no PMU driver, software events only.
[    0.392416] rcu: Hierarchical SRCU implementation.
[    0.392505] smp: Bringing up secondary CPUs ...
[    0.392505] x86: Booting SMP configuration:
[    0.392511] .... node  #0, CPUs:      #1
[    0.064344] kvm-clock: cpu 1, msr 2401041, secondary cpu clock
[    0.393245] KVM setup async PF for cpu 1
[    0.393502] kvm-stealtime: cpu 1, msr 41fa54f40
[    0.394113] MDS CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/mds.html for more details.
[    0.394113]  #2
[    0.064344] kvm-clock: cpu 2, msr 2401081, secondary cpu clock
[    0.396942] KVM setup async PF for cpu 2
[    0.397998] kvm-stealtime: cpu 2, msr 41fa94f40
[    0.398762]  #3
[    0.064344] kvm-clock: cpu 3, msr 24010c1, secondary cpu clock
[    0.398762] KVM setup async PF for cpu 3
[    0.399137] kvm-stealtime: cpu 3, msr 41fad4f40
[    0.400644]  #4
[    0.064344] kvm-clock: cpu 4, msr 2401101, secondary cpu clock
[    0.405287] KVM setup async PF for cpu 4
[    0.406967] kvm-stealtime: cpu 4, msr 41fb14f40
[    0.408696]  #5
[    0.064344] kvm-clock: cpu 5, msr 2401141, secondary cpu clock
[    0.409287] KVM setup async PF for cpu 5
[    0.410143] kvm-stealtime: cpu 5, msr 41fb54f40
[    0.410904]  #6
[    0.064344] kvm-clock: cpu 6, msr 2401181, secondary cpu clock
[    0.410904] KVM setup async PF for cpu 6
[    0.410904] kvm-stealtime: cpu 6, msr 41fb94f40
[    0.412686]  #7
[    0.064344] kvm-clock: cpu 7, msr 24011c1, secondary cpu clock
[    0.413134] KVM setup async PF for cpu 7
[    0.413742] kvm-stealtime: cpu 7, msr 41fbd4f40
[    0.416510] smp: Brought up 1 node, 8 CPUs
[    0.417207] smpboot: Max logical packages: 1
[    0.417896] smpboot: Total of 8 processors activated (57599.93 BogoMIPS)
[    0.420747] devtmpfs: initialized
[    0.421108] x86/mm: Memory block size: 128MB
[    0.423094] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645041785100000 ns
[    0.424520] futex hash table entries: 2048 (order: 5, 131072 bytes)
[    0.426100] NET: Registered protocol family 16
[    0.426984] audit: initializing netlink subsys (disabled)
[    0.427955] audit: type=2000 audit(1585323239.064:1): state=initialized audit_enabled=0 res=1
[    0.429889] cpuidle: using governor ladder
[    0.429889] cpuidle: using governor menu
[    0.434162] HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages
[    0.434162] HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages
[    0.436711] SCSI subsystem initialized
[    0.437597] NetLabel: Initializing
[    0.438203] NetLabel:  domain hash size = 128
[    0.438946] NetLabel:  protocols = UNLABELED CIPSOv4 CALIPSO
[    0.440540] NetLabel:  unlabeled traffic allowed by default
[    0.441581] clocksource: Switched to clocksource kvm-clock
[    0.441581] VFS: Disk quotas dquot_6.6.0
[    0.442234] VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes)
[    0.446103] NET: Registered protocol family 2
[    0.447134] tcp_listen_portaddr_hash hash table entries: 8192 (order: 5, 131072 bytes)
[    0.448795] TCP established hash table entries: 131072 (order: 8, 1048576 bytes)
[    0.451105] TCP bind hash table entries: 65536 (order: 8, 1048576 bytes)
[    0.452814] TCP: Hash tables configured (established 131072 bind 65536)
[    0.453822] UDP hash table entries: 8192 (order: 6, 262144 bytes)
[    0.454770] UDP-Lite hash table entries: 8192 (order: 6, 262144 bytes)
[    0.455842] NET: Registered protocol family 1
[    0.456463] PCI-DMA: Using software bounce buffering for IO (SWIOTLB)
[    0.457312] software IO TLB: mapped [mem 0xcc000000-0xd0000000] (64MB)
[    0.458193] virtio-mmio: Registering device virtio-mmio.0 at 0xd0000000-0xd0000fff, IRQ 5.
[    0.459096] virtio-mmio: Registering device virtio-mmio.1 at 0xd0001000-0xd0001fff, IRQ 6.
[    0.460065] clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x33e44fb235b, max_idle_ns: 440795341910 ns
[    0.461316] platform rtc_cmos: registered platform RTC device (no PNP device found)
[    0.463550] Scanning for low memory corruption every 60 seconds
[    0.465074] Initialise system trusted keyrings
[    0.466193] Key type blacklist registered
[    0.467230] workingset: timestamp_bits=36 max_order=22 bucket_order=0
[    0.471461] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.474689] Key type asymmetric registered
[    0.475392] Asymmetric key parser 'x509' registered
[    0.476190] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 254)
[    0.477422] io scheduler noop registered (default)
[    0.478131] io scheduler cfq registered
[    0.479028] virtio-mmio virtio-mmio.0: Failed to enable 64-bit or 32-bit DMA.  Trying to continue, but this might not work.
[    0.480657] virtio-mmio virtio-mmio.1: Failed to enable 64-bit or 32-bit DMA.  Trying to continue, but this might not work.
[    0.482298] Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
[    0.505294] serial8250: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a U6_16550A
[    0.509453] loop: module loaded
[    0.510581] virtio_blk virtio0: [vda] 8388608 512-byte logical blocks (4.29 GB/4.00 GiB)
[    0.512312] Loading iSCSI transport class v2.0-870.
[    0.513531] iscsi: registered transport (tcp)
[    0.514819] tun: Universal TUN/TAP device driver, 1.6
[    0.524662] i8042: Failed to disable AUX port, but continuing anyway... Is this a SiS?
[    0.525501] i8042: If AUX port is really absent please use the 'i8042.noaux' option
[    0.797001] serio: i8042 KBD port at 0x60,0x64 irq 1
[    0.798493] hidraw: raw HID events driver (C) Jiri Kosina
[    0.801952] Initializing XFRM netlink socket
[    0.803357] NET: Registered protocol family 10
[    0.806381] Segment Routing with IPv6
[    0.807478] NET: Registered protocol family 17
[    0.808432] Bridge firewalling registered
[    0.809198] NET: Registered protocol family 40
[    0.809761] sched_clock: Marking stable (748841218, 60344946)->(812390010, -3203846)
[    0.811313] registered taskstats version 1
[    0.812443] Loading compiled-in X.509 certificates
[    0.815106] Loaded X.509 cert 'Build time autogenerated kernel key: efaf3c47904c974abe544b62921c938eb3988286'
[    0.817069] zswap: default zpool zbud not available
[    0.818110] zswap: pool creation failed
[    0.819733] Key type encrypted registered
[    0.840626] Sending DHCP requests ., OK
[    0.857750] IP-Config: Got DHCP answer from 0.0.0.0, my address is 10.61.0.10
[    0.859803] IP-Config: Complete:
[    0.860833]      device=eth0, hwaddr=5e:24:b4:9f:53:7c, ipaddr=10.61.0.10, mask=255.255.0.0, gw=10.61.0.1
[    0.863420]      host=542bbc2066a56269, domain=, nis-domain=(none)
[    0.865122]      bootserver=0.0.0.0, rootserver=0.0.0.0, rootpath=
[    0.865123]      nameserver0=1.1.1.1, nameserver1=1.0.0.1, nameserver2=8.8.8.8
[    1.309504] input: AT Raw Set 2 keyboard as /devices/platform/i8042/serio0/input/input0
[    1.315991] EXT4-fs (vda): mounted filesystem with ordered data mode. Opts: (null)
[    1.318743] VFS: Mounted root (ext4 filesystem) on device 254:0.
[    1.322241] devtmpfs: mounted
[    1.324666] Freeing unused decrypted memory: 2040K
[    1.326286] Freeing unused kernel image memory: 1352K
[    1.344550] Write protecting the kernel read-only data: 14336k
[    1.349830] Freeing unused kernel image memory: 2020K
[    1.352940] Freeing unused kernel image memory: 548K
[    1.354949] Run /sbin/init as init process
[    1.359181] Run /etc/init as init process
[    1.360743] Run /bin/init as init process
[    1.362335] Run /bin/sh as init process
[    1.364061] Kernel panic - not syncing: No working init found.  Try passing init= option to kernel. See Linux Documentation/admin-guide/init.rst for guidance.
[    1.366161] CPU: 1 PID: 1 Comm: swapper/0 Not tainted 4.19.47 #1
[    1.367028] Call Trace:
[    1.367408]  dump_stack+0x63/0x85
[    1.367923]  ? rest_init+0x40/0xb0
[    1.368449]  panic+0xdf/0x239
[    1.368890]  ? putname+0x47/0x50
[    1.369359]  ? rest_init+0xb0/0xb0
[    1.369863]  kernel_init+0xf0/0x110
[    1.370397]  ret_from_fork+0x35/0x40
[    1.370999] Kernel Offset: disabled
[    1.371523] Rebooting in 1 seconds..
INFO[0003] firecracker exited: status=0                 
root@host:~# 

i see this:

[ 1.354949] Run /sbin/init as init process [ 1.359181] Run /etc/init as init process [ 1.360743] Run /bin/init as init process [ 1.362335] Run /bin/sh as init process [ 1.364061] Kernel panic - not syncing: No working init found. Try passing init= option to kernel. See Linux Documentation/admin-guide/init.rst for guidance.

how would i fix this?

eliah-h commented 4 years ago

did you fix the problem?

cbluth commented 4 years ago

@H34V33N i dont know how to fix the problem

stealthybox commented 4 years ago

@cbluth I think you're missing udev in your image.

I pulled cbluth/kali:latest and was able to replicate the issue. These are the important bits from the systemd log that cause the init to fail:

sudo bin/ignite logs kali
[  OK  ] Mounted Kernel Debug File System.
[    1.246742] systemd[1]: kmod-static-nodes.service: Main process exited, code=exited, status=203/EXEC
[    1.247703] systemd[1]: kmod-static-nodes.service: Failed with result 'exit-code'.
[    1.248730] systemd[1]: Failed to start Create list of static device nodes for the current kernel.
[FAILED] Failed to start Create lis… nodes for the current kernel.
See 'systemctl status kmod-static-nodes.service' for details.
[    1.255771] systemd[1]: Started Load Kernel Modules.
[  OK  ] Started Load Kernel Modules.
[  OK  ] Started Getty on tty1.
[  OK  ] Started Login Service.
[  *** ] (1 of 3) A start job is running for…cure Shell server (33s / 1min 30s)
[  OK  ] Started Load/Save Random Seed.
[  OK  ] Started OpenBSD Secure Shell server.
[ TIME ] Timed out waiting for device /dev/ttyS0.
[DEPEND] Dependency failed for Serial Getty on ttyS0.
[  OK  ] Reached target Login Prompts.
[  OK  ] Reached target Multi-User System.

I built this Dockerfile based on ./images/ubuntu/Dockerfile and the machine booted. I was able to attach to it by logging in. The automatic SSH feature did not work with my quick edit so that's a small thing to work out:

cat images/kali-test/Dockerfile
FROM cbluth/kali

# udev is needed for booting a "real" VM, setting up the ttyS0 console properly
# kmod is needed for modprobing modules
# systemd is needed for running as PID 1 as /sbin/init
# Also, other utilities are installed
RUN apt-get update && apt-get install -y \
      curl \
      dbus \
      kmod \
      iproute2 \
      iputils-ping \
      net-tools \
      openssh-server \
      sudo \
      systemd \
      udev \
      vim-tiny \
      wget && \
    apt-get clean && \
    rm -rf /var/lib/apt/lists/*

# Create the following files, but unset them
RUN echo "" > /etc/machine-id && echo "" > /var/lib/dbus/machine-id

# This container image doesn't have locales installed. Disable forwarding the
# user locale env variables or we get warnings such as:
#  bash: warning: setlocale: LC_ALL: cannot change locale
RUN sed -i -e 's/^AcceptEnv LANG LC_\*$/#AcceptEnv LANG LC_*/' /etc/ssh/sshd_config

# Set the root password to root when logging in through the VM's ttyS0 console
RUN echo "root:root" | chpasswd

I've tagged and pushed this image to dockerhub: stealthybox/ignite-kali-test:issue-567

It's based directly off of your most recent image.