Re: [lxc-users] lxc.mount.entry selectively mount parts of sys and proc read write

2014-03-21 Thread GC
On 03/21/2014 09:11 PM, Serge Hallyn wrote: Quoting GC (catch...@gc9.org): On 03/21/2014 07:15 AM, Serge Hallyn wrote: Quoting GC (catch...@gc9.org): Hello, I want to selectively mount parts of sys and proc rw, but the rest ro. I thought I might be able to e.g., mount /sys ro (in the contain

Re: [lxc-users] lxc.mount.entry selectively mount parts of sys and proc read write

2014-03-21 Thread Serge Hallyn
Quoting GC (catch...@gc9.org): > On 03/21/2014 07:15 AM, Serge Hallyn wrote: > >Quoting GC (catch...@gc9.org): > >>Hello, > >> > >>I want to selectively mount parts of sys and proc rw, but the rest > >>ro. I thought I might be able to e.g., mount /sys ro (in the > >>container), and mount /.sys rw

Re: [lxc-users] lxc.mount.entry selectively mount parts of sys and proc read write

2014-03-21 Thread GC
On 03/21/2014 07:15 AM, Serge Hallyn wrote: Quoting GC (catch...@gc9.org): Hello, I want to selectively mount parts of sys and proc rw, but the rest ro. I thought I might be able to e.g., mount /sys ro (in the container), and mount /.sys rw (in the container), then bind mount bits from /.sys t

Re: [lxc-users] Apparmor profile boken

2014-03-21 Thread Serge Hallyn
If this is a stock ubuntu 14.04 system, please do file a bug asap against apparmor. If possible, using 'ubuntu-bug apparmor' from one of the failing hosts (maybe global04). I haven't seen this myself, but it sure looks bad. Quoting Flo (florian.engelm...@gmail.com): > Hi, > > after patching 6 U

Re: [lxc-users] Attach a lxc container to an existing cgroup ?

2014-03-21 Thread Serge Hallyn
Quoting Guido Jäkel (g.jae...@dnb.de): > On 2014-03-21 15:24, Serge Hallyn wrote: > >> > >> [...]. But you may write a little script that will re-read the lxc > >> configuration and update the definded cgroup entries. @Serge: Such an > >> lxc-reconfigure command may be something to add to the lxc

[lxc-users] Apparmor profile boken

2014-03-21 Thread Flo
Hi, after patching 6 Ubuntu 14.04 servers today (all 6 are same HW, same installation) two got problems with apparmor and the lxc-container-default profile? root@:/etc# service apparmor restart * Reloading AppArmor profiles

Re: [lxc-users] How to set the resource limits to a container

2014-03-21 Thread Guido Jäkel
Dear Andy, This will "put pressure on the memory". If something can be given free (like the file cache), it will. Then, if it's still over the limit, either the Linux OOM thread will kill processses. Or the container will freeze, if you configure it with memory.oom_control = 1 RFTM at https://

Re: [lxc-users] Attach a lxc container to an existing cgroup ?

2014-03-21 Thread Guido Jäkel
On 2014-03-21 15:24, Serge Hallyn wrote: >> >> [...]. But you may write a little script that will re-read the lxc >> configuration and update the definded cgroup entries. @Serge: Such an >> lxc-reconfigure command may be something to add to the lxc package. > > What would the lxc-reconfigure com

Re: [lxc-users] How to set the resource limits to a container

2014-03-21 Thread Andy Johnson
Hello, LXC-users, What happens if you try to set the memory to a value which is lower than the running container currently consumes ? can this create any problems ? or is it always handled with no issues ? Regards, Andy On Fri, Mar 21, 2014 at 11:42 AM, Andreas Laut wrote: > The memory limit i

Re: [lxc-users] Attach a lxc container to an existing cgroup ?

2014-03-21 Thread Serge Hallyn
Quoting Jäkel, Guido (g.jae...@dnb.de): > Dear Sebastian, > > as to my knowledge, with the current version of LXC you might use more than > one configuration file and in addition, there's a file include option in the > configuration parser. And even with an older, you may simulate this by a > l

Re: [lxc-users] lxc.mount.entry selectively mount parts of sys and proc read write

2014-03-21 Thread Serge Hallyn
Quoting GC (catch...@gc9.org): > Hello, > > I want to selectively mount parts of sys and proc rw, but the rest > ro. I thought I might be able to e.g., mount /sys ro (in the > container), and mount /.sys rw (in the container), then bind mount > bits from /.sys to /sys, and finally hide the rw /.s

Re: [lxc-users] Attach a lxc container to an existing cgroup ?

2014-03-21 Thread Serge Hallyn
Quoting Jäkel, Guido (g.jae...@dnb.de): > Hi Serge, > > i don't look into the code nor test it, but said it's a global option what > will happen if one use -s lxc.cgroup.pattern=foo as an option to lxc-start or > as a "local" configuration file option? lxc will try to set value foo to cgroup fi

Re: [lxc-users] How to set the resource limits to a container

2014-03-21 Thread Andreas Laut
The memory limit is set through cgroup. You can change this through lxc-cgroup -n [Container] memory.limit_in_bytes = XG Or echo into the /sys/fs/cgroup/lxc/[Container] memory.limit_in_bytes (and change this in container config: lxc.cgroup.memory.limit_in_bytes = XG) Regards, Andreas Am 21.03.

[lxc-users] How to set the resource limits to a container

2014-03-21 Thread Mingjiang Shi
Hi there, My application in the container is running out of memory. How to set the resource such as memory limits to a container so that it gets more memory? I googled a lot but didn't find straightforward tutorials. Thanks! -- Thanks -Mingjiang ___ l

Re: [lxc-users] Attach a lxc container to an existing cgroup ?

2014-03-21 Thread Jäkel , Guido
Dear Sebastian, as to my knowledge, with the current version of LXC you might use more than one configuration file and in addition, there's a file include option in the configuration parser. And even with an older, you may simulate this by a little wrapper that convert a config file into a bunc