Re: [lxc-users] LXC 2.0 has been released!

2016-04-12 Thread Andrey Repin
Greetings, Stéphane Graber! > It's with great pleasure that the LXC development team is announcing > the release of LXC 2.0! I've installed LXC 2.0 on my remote server today. However, that ended in a disaster. Now, I can't start my containers at all. lxc_cgfsng - cgfsng.c:all_controllers_found:4

Re: [lxc-users] Systemd as LXC 2.0 dependency ?

2016-04-12 Thread Serge Hallyn
Quoting Harald Dunkel (harald.dun...@aixigo.de): > Hi folks, > > On 04/04/2016 05:50 PM, Serge Hallyn wrote: > > Quoting Milan Beneš (mi...@benesovi.eu): > >> Hello, > >> does anybody know if systemd is a requirement for LXC 2.0? > > > > Systemd is not required. A name=systemd cgroup mount is.

Re: [lxc-users] Running LXC and LXD on the same host

2016-04-12 Thread Serge Hallyn
the pids cgroup and the kmem controller both help you to fight fork bombs. If you're doing nested unprivileged containers then you'll have a practical limit imposed by the ever growing uid ranges as you go up the stack. And the kernel actually imposes a strict depth limit of 32 user namespaces. -

Re: [lxc-users] Running LXC and LXD on the same host

2016-04-12 Thread Bostjan Skufca
Is there a limit to container nesting depth? Does containerization-based equivalent of fork bomb already exist? :) b. On 12 April 2016 at 16:54, Serge Hallyn wrote: > That's no problem. The try-it service for instance runs that way. > > Quoting jjs - mainphrame (j...@mainphrame.com): > > Ah,

Re: [lxc-users] Running LXC and LXD on the same host

2016-04-12 Thread Serge Hallyn
That's no problem. The try-it service for instance runs that way. Quoting jjs - mainphrame (j...@mainphrame.com): > Ah, wait, I might have misunderstood your question. > > One can run containers within containers, but I don't know of anyone > running an lxc ct inside an lxd ct or vice versa. >

Re: [lxc-users] sysvinit with cgroup namespace

2016-04-12 Thread Harald Dunkel
On 04/06/2016 05:18 PM, Serge Hallyn wrote: > Quoting KATOH Yasufumi (ka...@jazz.email.ne.jp): >> >> Will we be able to start a container on sysvinit with cgroup namespace >> in the future release? > > mkdir /sys/fs/cgroup > mount -t cgroup -o none,name=systemd systemd /sys/fs/cgroup > Or was it

Re: [lxc-users] Systemd as LXC 2.0 dependency ?

2016-04-12 Thread Harald Dunkel
Hi folks, On 04/04/2016 05:50 PM, Serge Hallyn wrote: > Quoting Milan Beneš (mi...@benesovi.eu): >> Hello, >> does anybody know if systemd is a requirement for LXC 2.0? > > Systemd is not required. A name=systemd cgroup mount is. You > can create that trivially > > sudo mkdir /sys/fs/cgroup/sy