Re: [lxc-users] blkio.weight cgroup problems

2016-10-26 Thread Andre Nathan
Well, duh... the weight must be between 10 and 1000... On 10/26/2016 11:01 AM, Andre Nathan wrote: > Hi > > I'm running a few hundred containers for my customers, which are limited > in CPU and memory use according to their plan. I'm trying to introduce > I/O limits via

[lxc-users] blkio.weight cgroup problems

2016-10-26 Thread Andre Nathan
Hi I'm running a few hundred containers for my customers, which are limited in CPU and memory use according to their plan. I'm trying to introduce I/O limits via blkio.weight so that the basic plan has weight 1000, the next plan has weight 1100, then 1200 and so on. I've added "lxc.cgroup.blkio.w

Re: [lxc-users] bind-mounting kernel directories

2015-04-01 Thread Andre Nathan
I've been running containers in production where pretty much everything is bind-mounted from the host, including /lib and /usr, with no problems at all. Cheers, Andre On 04/01/2015 01:07 PM, Chris Burroughs wrote: > Userland tools can be confused if the running kernel does not match > anything in

Re: [lxc-users] User authentication in containers via libnss-mysql

2014-09-10 Thread Andre Nathan
On 09/10/2014 03:33 PM, Serge Hallyn wrote: > Thanks for the update! No problem! After the permissions fix, I started being affected by this bug: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=729986 For now I built a custom libnss-mysql-bg package with the patch in the report above. Cheers,

Re: [lxc-users] User authentication in containers via libnss-mysql

2014-09-10 Thread Andre Nathan
On 09/09/2014 05:46 PM, Andre Nathan wrote: > I'm running Ubuntu 14.04 with LXC 1.0.4-0ubuntu0.1. I'm running a > container whose filesystem is populated via bind-mounts from the host. > The container starts up fine but for some reason calls to getpwnam() > block forever in

[lxc-users] User authentication in containers via libnss-mysql

2014-09-09 Thread Andre Nathan
Hello I'm facing a strange problem which I'm not sure is related to LXC, but since this used to work in 0.7.5 in Ubuntu 12.04 I figured I'd ask. I'm running Ubuntu 14.04 with LXC 1.0.4-0ubuntu0.1. I'm running a container whose filesystem is populated via bind-mounts from the host. The container s

Re: [lxc-users] Unprivileged container and multiple/external users

2014-06-25 Thread Andre Nathan
Serge, On 06/04/2014 05:54 PM, Serge Hallyn wrote: Quoting Andre Nathan (an...@digirati.com.br): Is there any way around that? Maybe some mount option to map the mount point's UID and GID to something different inside the container? Not yet. We were discussing just that yesterday (on l

Re: [lxc-users] Unprivileged container and multiple/external users

2014-06-05 Thread Andre Nathan
Hi Serge On 06/04/2014 05:54 PM, Serge Hallyn wrote: > For now you must have a separate filesystem > for each unprivileged container (or at least one per uid map). Do you have an example of how this would be done? I created a filesystem for /home/local (ext4 FS over an LVM logical volume) and bin

[lxc-users] Unprivileged container and multiple/external users

2014-06-04 Thread Andre Nathan
Hello I'm currently running in production a pre-1.0 LXC version. These run a minimum number of processes as root and a bunch of processes running as a normal user (eg. apache, cron, syslog-ng). Most container directories are bind-mounted from the host in read-only mode, including the unprivileged