Re: [lxc-users] LXD firewall container?

2017-04-27 Thread Ron Kelley
Thanks Fajar. Always appreciate seeing other people’s input on stuff like this. > On Apr 27, 2017, at 8:25 PM, Fajar A. Nugraha wrote: > > On Fri, Apr 28, 2017 at 1:05 AM, Ron Kelley wrote: > Thanks for the feedback, Spike. After looking around for a while, I, too, > decided a small ubuntu

Re: [lxc-users] LXD move, how to reduce downtime without live migration

2017-04-27 Thread Fajar A. Nugraha
On Thu, Apr 27, 2017 at 9:09 PM, Spike wrote: > Tamas, > > are you actually doing this? any gotchas? > > I'm trying to set up exactly the same, have a live node and a backup node, > both running zfs. I have the same containers, with the same mac, at > destination, however I'm unclear that just by

[lxc-users] lxc launch imported image results in "ENTERHOSTNAME" hostname

2017-04-27 Thread Ron Kelley
Greetings all, I had a CentOS6 container running on an LXD 2.12 server and wanted to test my backup procedures for future use. I used the “lxc publish” command to publish it to my local image repository then “lxc image export” to save it as a *tgz file. I shutdown the container and removed it

Re: [lxc-users] LXD firewall container?

2017-04-27 Thread Fajar A. Nugraha
On Fri, Apr 28, 2017 at 1:05 AM, Ron Kelley wrote: > Thanks for the feedback, Spike. After looking around for a while, I, too, > decided a small ubuntu container with a minimal firewall tool is the way to > go. In my case, I used “ufw” but will also look at "firehol”. > > Our firewall/NAT requi

Re: [lxc-users] LXD firewall container?

2017-04-27 Thread Ron Kelley
Thanks for the feedback, Spike. After looking around for a while, I, too, decided a small ubuntu container with a minimal firewall tool is the way to go. In my case, I used “ufw” but will also look at "firehol”. Our firewall/NAT requirements are not very large, and I finally figured out the

Re: [lxc-users] LXD firewall container?

2017-04-27 Thread Spike
after testing one of too many firewall solutions I went back to just running plain ubuntu and then put an iptables "frontend" on top of it. In my case I chose firehol, but there's a number of them and it's largely a matter of taste/how you work. It really depends what you care for, if you want an a

Re: [lxc-users] LXD move, how to reduce downtime without live migration

2017-04-27 Thread Tamas Papp
On 04/27/2017 04:09 PM, Spike wrote: Tamas, are you actually doing this? any gotchas? Yes, I do, but with LXC. I'm trying to set up exactly the same, have a live node and a backup node, both running zfs. I have the same containers, with the same mac, at destination, however I'm unclear th

Re: [lxc-users] LXD move, how to reduce downtime without live migration

2017-04-27 Thread Spike
Tamas, are you actually doing this? any gotchas? I'm trying to set up exactly the same, have a live node and a backup node, both running zfs. I have the same containers, with the same mac, at destination, however I'm unclear that just by copying over the rootfs dataset from zfs it will be enough

Re: [lxc-users] LXD move, how to reduce downtime without live migration

2017-04-27 Thread Benoit GEORGELIN - Association Web4all
- Mail original - > De: "Tamas Papp" > À: "lxc-users" > Envoyé: Jeudi 27 Avril 2017 01:59:34 > Objet: Re: [lxc-users] LXD move, how to reduce downtime without live migration > On 04/27/2017 03:43 AM, Benoit GEORGELIN - Association Web4all wrote: > > Good evening >> I'm running into a pro

[lxc-users] Access /dev/mem in lxc

2017-04-27 Thread Ganesh Sathyanarayanan
Hi All, This is similar to a post by a John sometime in Aug-2010. He was trying to run Xorg in an lxc which required access to /dev/mem. Am trying to run a custom/proprietary application that needs the same (access to /dev/mem). I have a privileged container - as in I've created the container as