Re: [Lxc-users] Upgrading udev and plymouth in a lucid container

2011-07-27 Thread Serge Hallyn
Quoting Elliot Pahl (elliot.p...@gmail.com):
 Upgrading udev and plymouth in a lucid container seems to require access to
 udev devices with the following lines in container/config
 lxc.cgroup.devices.allow = c 108:0 rwm
 lxc.cgroup.devices.allow = b 7:0 rwm
 lxc.cgroup.devices.allow = c 10:200 rwm
 
 Otherwise you get something along the lines of:
 Setting up udev (151-12.3) ...
 mknod: `/lib/udev/devices/ppp': Operation not permitted
 dpkg: error processing udev (--configure):
  subprocess installed post-installation script returned error exit status 1
 dpkg: dependency problems prevent configuration of plymouth:
  plymouth depends on udev (= 149-2); however:
   Package udev is not configured yet.
 dpkg: error processing plymouth (--configure):
  dependency problems - leaving unconfigured
 No apport report written because the error message indicates its a followup
 error from a previous failure.
 Errors were encountered while processing:
  udev
  plymouth
 E: Sub-process /usr/bin/dpkg returned an error code (1)
 
 Can this be added to the ubuntu creation template? (I'm running lxc daily
 from https://launchpad.net/~ubuntu-lxc/+archive/daily).

I think we might want to open a bug against udev and see if we
can get it to not fail bc it can't create/open a specific device.
Bug might be rejected, but I think it's the right place to handle
this.

--
Got Input?   Slashdot Needs You.
Take our quick survey online.  Come on, we don't ask for help often.
Plus, you'll get a chance to win $100 to spend on ThinkGeek.
http://p.sf.net/sfu/slashdot-survey
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


Re: [Lxc-users] [PATCH] Don't try to add host user's groups in container

2011-07-27 Thread Daniel Lezcano
On 07/25/2011 03:10 AM, Serge E. Hallyn wrote:
 When '-b user' is specified to lxc-ubuntu container creation template, do
 not automatically add all the groups of which user is a member on the host,
 to user's groups in the container.

 Signed-off-by: Serge Hallyn serge.hal...@ubuntu.com
 ---

Applied.

--
Got Input?   Slashdot Needs You.
Take our quick survey online.  Come on, we don't ask for help often.
Plus, you'll get a chance to win $100 to spend on ThinkGeek.
http://p.sf.net/sfu/slashdot-survey
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


[Lxc-users] unexpected device renaming behavior with phys network.types

2011-07-27 Thread Amy Fong
Hi,

I'm using 2.6.34 with patches applied from:

http://www.kernel.org/pub/linux/kernel/people/gregkh/driver_core/2.6/2.6.34/

It seem that when I try to create a container where I rename the
device

e.g.

lxc-execute --name net -s lxc.network.type=phys -s lxc.network.link=eth0 
-work.name=eth1 -s lxc.network.flags=up bash

When I exit the container, my eth0 becomes renamed to something else
(in this case, dev2)

root@localhost:/root ip link
1: lo: LOOPBACK,UP,LOWER_UP mtu 16436 qdisc noqueue state UNKNOWN 
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: dev2: BROADCAST,MULTICAST mtu 1500 qdisc noop state DOWN qlen 1000
link/ether 00:15:17:dd:a7:32 brd ff:ff:ff:ff:ff:ff
3: eth1: BROADCAST,MULTICAST mtu 1500 qdisc noop state DOWN qlen 1000
link/ether 00:15:17:dd:a7:33 brd ff:ff:ff:ff:ff:ff
4: eth2: BROADCAST,MULTICAST,UP,LOWER_UP mtu 1500 qdisc mq state UP qlen 1000
link/ether 00:15:17:d8:08:14 brd ff:ff:ff:ff:ff:ff
5: eth3: BROADCAST,MULTICAST mtu 1500 qdisc mq state DOWN qlen 1000
link/ether 00:15:17:d8:08:15 brd ff:ff:ff:ff:ff:ff
6: br0: BROADCAST,MULTICAST,UP,LOWER_UP mtu 1500 qdisc noqueue state UNKNOWN 
link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff

I tried this out in 2.6.39, and I don't see the same behaviour. Is there
a certain patch or set of patches that I need to fix this unexpected
behaviour?

Thanks!

--
Got Input?   Slashdot Needs You.
Take our quick survey online.  Come on, we don't ask for help often.
Plus, you'll get a chance to win $100 to spend on ThinkGeek.
http://p.sf.net/sfu/slashdot-survey
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


[Lxc-users] lxc-console over ssh

2011-07-27 Thread John
Hi, quick one that is puzzling me. Do the lxc commands work over ssh ?

I am trying to open a console on a remote host. I try this:

$ ssh remote_host lxc-console -n vps_on_remote_host

But I get an error:
lxc-console: '0' is not a tty
lxc-console: failed to setup tios

Other commands work fine like this

$ ssh remote_host lxc-ls

works fine.

$ ssh remote_host lxc-start -n vps_on_remote_host

also works fine but the output (boot messages) don't appear in the ssh 
session. The ssh session appears to hang until the container is closed down.

What am I missing?

In case you're wondering... I can't ssh vps_on_remote_host because it 
isn't set up. The remote_host is in another room making the ssh more 
convenient.

Thanks,
John


--
Got Input?   Slashdot Needs You.
Take our quick survey online.  Come on, we don't ask for help often.
Plus, you'll get a chance to win $100 to spend on ThinkGeek.
http://p.sf.net/sfu/slashdot-survey
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


Re: [Lxc-users] lxc-console over ssh

2011-07-27 Thread Michael H. Warfield
On Wed, 2011-07-27 at 21:12 +0100, John wrote: 
 Hi, quick one that is puzzling me. Do the lxc commands work over ssh ?
 
 I am trying to open a console on a remote host. I try this:
 
 $ ssh remote_host lxc-console -n vps_on_remote_host

 But I get an error:
 lxc-console: '0' is not a tty
 lxc-console: failed to setup tios

That's because ssh did not allocate a pty for your command.

Try this:

ssh -t remote_host lxc_console -n vps_on_remote

 Other commands work fine like this
 
 $ ssh remote_host lxc-ls

Doesn't need a pty.

 works fine.
 
 $ ssh remote_host lxc-start -n vps_on_remote_host
 
 also works fine but the output (boot messages) don't appear in the ssh 
 session. The ssh session appears to hang until the container is closed down.
 
 What am I missing?
 
 In case you're wondering... I can't ssh vps_on_remote_host because it 
 isn't set up. The remote_host is in another room making the ssh more 
 convenient.
 
 Thanks,
 John

Regards,
Mike
-- 
Michael H. Warfield (AI4NB) | (770) 985-6132 |  m...@wittsend.com
   /\/\|=mhw=|\/\/  | (678) 463-0932 |  http://www.wittsend.com/mhw/
   NIC whois: MHW9  | An optimist believes we live in the best of all
 PGP Key: 0x674627FF| possible worlds.  A pessimist is sure of it!


signature.asc
Description: This is a digitally signed message part
--
Got Input?   Slashdot Needs You.
Take our quick survey online.  Come on, we don't ask for help often.
Plus, you'll get a chance to win $100 to spend on ThinkGeek.
http://p.sf.net/sfu/slashdot-survey___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


Re: [Lxc-users] lxc-console over ssh

2011-07-27 Thread Joerg Gollnick
Hello John,
ssh has different (pseudo) terminal allocation if you execute a command.

Please use ssh -t to force pseudo-tty  allocation. 
ssh -t remote_host lxc-console -n vps_on_remote_host 

The other way around is to ssh remote_host and work with lxc-* as normal.
For lxc-start it is not very convenient, so I recommend to use the start 
sequence from some Archlinux start script screen -dmS init-vps_on_remote_host 
lxc-start -n vps_on_remote_host.

Best regards Jörg

On Wednesday 27 July 2011 21:12:36 John wrote:
 Hi, quick one that is puzzling me. Do the lxc commands work over ssh ?
 
 I am trying to open a console on a remote host. I try this:
 
 $ ssh remote_host lxc-console -n vps_on_remote_host
 
 But I get an error:
 lxc-console: '0' is not a tty
 lxc-console: failed to setup tios
 
 Other commands work fine like this
 
 $ ssh remote_host lxc-ls
 
 works fine.
 
 $ ssh remote_host lxc-start -n vps_on_remote_host
 
 also works fine but the output (boot messages) don't appear in the ssh
 session. The ssh session appears to hang until the container is closed down.
 
 What am I missing?
 
 In case you're wondering... I can't ssh vps_on_remote_host because it
 isn't set up. The remote_host is in another room making the ssh more
 convenient.
 
 Thanks,
 John
 
 
 
 -- Got Input?   Slashdot Needs You.
 Take our quick survey online.  Come on, we don't ask for help often.
 Plus, you'll get a chance to win $100 to spend on ThinkGeek.
 http://p.sf.net/sfu/slashdot-survey
 ___
 Lxc-users mailing list
 Lxc-users@lists.sourceforge.net
 https://lists.sourceforge.net/lists/listinfo/lxc-users

--
Got Input?   Slashdot Needs You.
Take our quick survey online.  Come on, we don't ask for help often.
Plus, you'll get a chance to win $100 to spend on ThinkGeek.
http://p.sf.net/sfu/slashdot-survey
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


[Lxc-users] Can a process change its container membership ?

2011-07-27 Thread Vinay Wagh
Hi,

I had an architectural question on containers. I wanted to use containers to
run multiple instances of the same application with different resource
allocation (CPU, memory). The problem is that I have user/kernel space
drivers that access network processors and I might not be able to run
multiple instances in this case. These processes need to serve requests from
applications running in different containers. So I need these processes to
run in a container that can communicate with other containers. But since
this process will serve requests from other containers it should be able to
honor the CPU resource isolation that containers provide.

To do this I could embed an id in the IPC that maps to the container but I
still need the serving process to be able to 'switch' in to a different
container membership based on which container I received the request from.
Is that something that can be done today or is there another way to do
this.

Thanks,
Vinay
--
Got Input?   Slashdot Needs You.
Take our quick survey online.  Come on, we don't ask for help often.
Plus, you'll get a chance to win $100 to spend on ThinkGeek.
http://p.sf.net/sfu/slashdot-survey___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


Re: [Lxc-users] Can a process change its container membership ?

2011-07-27 Thread Serge E. Hallyn
Quoting Vinay Wagh (vinay.h.w...@gmail.com):
 Hi,
 
 I had an architectural question on containers. I wanted to use containers to
 run multiple instances of the same application with different resource
 allocation (CPU, memory). The problem is that I have user/kernel space
 drivers that access network processors and I might not be able to run
 multiple instances in this case. These processes need to serve requests from
 applications running in different containers. So I need these processes to
 run in a container that can communicate with other containers. But since
 this process will serve requests from other containers it should be able to
 honor the CPU resource isolation that containers provide.
 
 To do this I could embed an id in the IPC that maps to the container but I
 still need the serving process to be able to 'switch' in to a different
 container membership based on which container I received the request from.
 Is that something that can be done today or is there another way to do
 this.

Just the moving to different resource isolations, yeah that's simple enough.
Just move yourself into the container's cgroup, then (assuming you're not
using the ns cgroup) back out.  I.e. if the container task's /proc/self
cgroup shows:

  5:freezer:/apache2
  4:memory:/apache2
  3:devices:/apache2
  2:cpuacct:/apache2
  1:cpu:/apache2

and you want the same cpu, cpuacct, and memory restrictions, then do

for f in cpu cpuacct memory; do
echo $$  /sys/fs/cgroup/$f/apache2/tasks
done

Then to jump back out:

for f in cpu cpuacct memory; do
echo $$  /sys/fs/cgroup/$f/tasks
done

-serge

--
Got Input?   Slashdot Needs You.
Take our quick survey online.  Come on, we don't ask for help often.
Plus, you'll get a chance to win $100 to spend on ThinkGeek.
http://p.sf.net/sfu/slashdot-survey
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users