Hi,
I'm looking to avoid network changes in an LXC container with root access while
the system is up and running.
Let's say I have two containers running.
A: 192.168.0.100/24
B: 192.168.0.200/24
They are both on the same private network but it can be a public network too.
How can I preve
er and the network configuration is slef secured.
-- envoyé depuis mon téléphone --
De : "Fajar A. Nugraha"
envoyé : 2015-06-26 00:19
à: LXC users mailing-list
Objet: Re: [lxc-users] LXC - Best way to avoid networking changes in a container
On Fri, Jun 26, 2015 at 10:59
jar A. Nugraha"
À: "lxc-users"
Envoyé: Vendredi 26 Juin 2015 01:47:31
Objet: Re: [lxc-users] LXC - Best way to avoid networking changes in a
container
On Fri, Jun 26, 2015 at 11:57 AM, Benoit GEORGELIN - Association
Web4all wrote:
> Thanks for link.
>
> I'll t
thanks for the link.
I will consider this option too. This should be an interesting configuration.
I'm surprise there isn't many talks about it .
Cordialement,
- Mail original -
De: "gustavo panizzo (gfa)"
À: "lxc-users" , "Benoit GEORGELIN -
Ass
-users"
Envoyé: Lundi 29 Juin 2015 10:54:22
Objet: Re: [lxc-users] LXC - Best way to avoid networking changes in a container
Quoting Fajar A. Nugraha (l...@fajar.net):
> On Fri, Jun 26, 2015 at 8:20 PM, Benoit GEORGELIN - Association
> Web4all wrote:
> > Hi Fajar,
&
Hi,
I don't know if there is any option to make our own remote image repository in
a local network.
Is this something that can be done ? Exactly like "Ubuntu Cloud Images"
Thanks
Cordialement,
De: "Jordan GRONDIN"
À: "lxc-users"
Envoyé: Mardi 7 Juillet 2015 12:35:10
Objet: [lxc-use
on=normal"
To find port numbers:
ovs-ofctl show BRIDGE
Cordialement,
Benoît Georgelin -
Afin de contribuer au respect de l'environnement, merci de n'imprimer ce mail
qu'en cas de nécessité
De: "Benoit GEORGELIN - Association Web4all"
À: "gustavo pa
Hi lxc-users :)
I'm currently working and playing around with LXC containers. I came across
"Unprivileged Containers"
I would like to get some feedback about this really interesting feature.
It's not easy to get a good tour about the technology and about the maturity of
this kind of container
needed for safe, unprivileged LXC
containers" - and not LTS versions.
El 17/08/15 a les 06:48, Benoit GEORGELIN - Association Web4all ha escrit:
> Hi lxc-users :)
>
> I'm currently working and playing around with LXC containers. I came
> across "Unprivileged Containers&
Hi,
do you think veth.pair name option in a unprivileged container can remain the
same ?
As for security purpose, veth.pair name cannot be defined in the config file,
every boot time a new one is created. Is there any plan to keep the same one
based on the MAC address for example if exist in
Hi,
since the last upgrade with lxc I'm not able to install xfce4 and x2go
Os: Debian Jessie
Unprivileged containter
apt-get install xfce4 never ends
Kernel: Linux 3.19.0-15-generic #15-Ubuntu SMP Thu Apr 16 23:32:37 UTC 2015
x86_64 x86_64 x86_64 GNU/Linux
lxc version: 0.15
lxd --versio
vivid main )
Thanks for your help
Cordialement,
De: "Benoit GEORGELIN - Association Web4all"
À: "lxc-users"
Envoyé: Mardi 25 Août 2015 12:01:57
Objet: [lxc-users] unpriv container - xfce4 - freeze
Hi,
since the last upgrade with lxc I'm not able to install
at least the (sanitized if needed)
/var/log/apt/term.log.
Quoting Benoit GEORGELIN - Association Web4all (benoit.george...@web4all.fr):
> It looks like it come from "dbus"
>
> Into the container:
> Paramétrage de dbus (1.8.18-0+deb8u1) ...
>
> On the LXC Host:
Hi Peter,
lxc.network.type = veth
lxc.network.veth.pair = veth0
Should be enough in your container configuration file (config)
Also, you can make sure there is no related entries in lxc.conf and
default.conf .
lxc.network.veth.pair cannot be set when using Unprivileged container
But you
Hi,
I would like to know if there is an alternative option of lxc.network.script.up
with an unprivileged containter.
It looks like this configuration file is not used.
I would like to use script.up and script.down to manage the network and
Openflow configuration
Every time a containter star
tack or Proxmox are integrating LXC
Unprivileged container but they should talk/share more about it ^^
Regards,
Cordialement,
Benoît Georgelin
De: "Serge Hallyn"
À: "lxc-users"
Envoyé: Lundi 31 Août 2015 09:39:01
Objet: Re: [lxc-users] Unprivileged contain
.
Quoting Benoit GEORGELIN - Association Web4all (benoit.george...@web4all.fr):
> unfortunately, it's the only way to allow custom network configuration from
> an unprivileged exactly how lxc add the network interface into the Ovs switch
> .
>
> My design is this one , I use
Hi everyone,
Can someone explain to me why/how this problem can happen : LXC is running for
days, suddenly something happen and LXC is not able to communicate with some
process related to cgmanager . Only option is to stop/start the container again
lxc-ls -f
NAME STATE IPV4 IPV6 GROUPS AUTO
This limit the number of cores in a container but if you have one container
using 100% of a core, every containers using the same core will have an 100%
core use.
Even with shares cpu cgroups limits.
Is there any way that one container using core 0 only sees the amount of his
own usage in th
;t know if it affect
every users or just my system.
Thanks
Cordialement,
De: "Serge Hallyn"
À: "lxc-users"
Envoyé: Lundi 7 Septembre 2015 12:32:45
Objet: Re: [lxc-users] cgmanager_move_pid_abs_sync failed: invalid request
Quoting Benoit GEORGELIN - Asso
rs"
Envoyé: Lundi 7 Septembre 2015 21:27:30
Objet: Re: [lxc-users] cgmanager_move_pid_abs_sync failed: invalid request
On Tue, Sep 8, 2015 at 1:58 AM, Benoit GEORGELIN - Association Web4all
wrote:
> I will try those commands next time it happen. Thanks
>
> In general, I have a lot
others containbers
with cpu usage at 90%
Thanks
Cordialement,
Benoit
De: "Benoit GEORGELIN - Association Web4all"
À: "lxc-users"
Envoyé: Samedi 5 Septembre 2015 22:08:54
Objet: Re: [lxc-users] Limiting number of cores in a container
This limit the number of cores i
I'm using an openvswith to provide network isolation/rules.
- Containers cannot change their own IP or MAC address. They will not receive
any traffic anymore.
- I'm also able to manage network queue and limit traffic
Here is what I shared some time ago on that talk (
https://www.mail-archive
Hi,
can you provide from the host and from the container :
route -n
can you provide from the container :
arp -n
can you also give the bridge configuration from /etc/network/interfaces
LXC configuration looks good to me .
I would try to set the mac address manually in the configuration
5.255.255.128 U 0 0 0 eth0
root@thinkweb:~# arp -n
Address HWtype HWaddress Flags Mask Iface
192.168.54.65 ether 00:50:56:be:13:94 C eth0
192.168.54.1 ether 00:13:c4:f2:64:41 C eth0
On Fri, Oct 23, 2015 at 12:23 PM, Benoit GEORGELIN - Association Web4all <
benoit.george...@web4all.fr >
>From what I understand , there is two options :
- lxc configuration file
- network config file into the container
I don't think you can mix both and you are better to stick with one solution .
Cordialement,
Benoît Georgelin -
Afin de contribuer au respect de l'environnement, merci de n
Hi dear members of the list :)
Have you heard about Vmware Photon ? https://vmware.github.io/photon/
Do you think LXC will be part of the supported containers ?
I'm interested in any feedback or vision about this product and LXC
integration.
What do you think about it.
Thanks
Cordialemen
very good. I already run my business using Vmware ESXi and a VM,
containing pure LXC containers.
Maybe we can get even better performance.
.
On Wed, Feb 3, 2016 at 9:34 AM, Benoit GEORGELIN - Association Web4all <
benoit.george...@web4all.fr > wrote:
Hi dear members of the list :)
H
stribution is irrelevant, since all of the modern ones support LXC.
However, Centos 7 cannot be used, it is behind in LXC, for it needs an upgrade
in some critical packages that are requisites for unprivileged containers.
On Wed, Feb 3, 2016 at 10:33 AM, Benoit GEORGELIN - Association Web
Hi,
I have a (stupid?) question, I think I have a misunderstanding of something
around LXD and LXC
Here is what I don't understand
$ lxc list
+--+-+--+--++---+
| NAME | STATE | IPV4 | IPV6 | TYPE | SNAPSHOTS |
+--+-+-
d I'm lost somewhere
Quoting Benoit GEORGELIN - Association Web4all (benoit.george...@web4all.fr):
> Hi,
>
> I have a (stupid?) question, I think I have a misunderstanding of something
> around LXD and LXC
>
xc-users] lxc / lxd I'm lost somewhere
See https://github.com/lxc/lxd for how to set up lxd using lvm.
Quoting Benoit GEORGELIN - Association Web4all (benoit.george...@web4all.fr):
> It's a bit confusing. Thanks for the explanation .
>
> I thought I was using LXD but since t
to.
Cordialement,
Benoît
De: "Mark Constable"
À: "lxc-users"
Envoyé: Mardi 1 Mars 2016 18:34:29
Objet: Re: [lxc-users] lxc / lxd I'm lost somewhere
On 02/03/16 01:34, Benoit GEORGELIN - Association Web4all wrote:
> User A will have his own space for contai
lyn"
À: "lxc-users"
Envoyé: Mardi 1 Mars 2016 13:55:20
Objet: Re: [lxc-users] lxc / lxd I'm lost somewhere
Quoting Benoit GEORGELIN - Association Web4all (benoit.george...@web4all.fr):
> Hi Serge,
>
> Thanks for your input.
> I still don't understand how I can
hi think what you mentioned here is quite important and relevant :
The legacy lxc-* utilities are a separate system. In my opinion the
"lxc" command is very, VERY poorly named, because it actually serves
as a client for lxd, which is a userspace layer on top of the base lxc
(which is built on
I'm currently switching from pure LXC to LXD
I have few questions :)
1- subuid /subgid
Can LXD use different uid/gid from container configuration ?
Let's say I have one LXD daemon running . This daemon is using suidui/gid from
the user who launch de container. Can I have different id/gid mapp
bjet: Re: [lxc-users] lxc / lxd I'm lost somewhere
On Fri, Mar 11, 2016 at 9:05 AM, Benoit GEORGELIN - Association
Web4all wrote:
> 1- subuid /subgid
> Can I have different id/gid mapping
> for this daemon ?
>
> Exemple :
> Container A: 10:65536
> Container
Hi
I have two containers running with LXD
Today, the uptime went back to 0 (on both containers) without any
stop/start/reboot of the host or the container.
Does anyone already had this behavior before ?
Container:
root@ben:/var/log# uptime
00:47:57 up 2:20, 0 users, load average: 0.24, 0.
Interesting, look the process monitor :
root 1942 0.0 0.1 72544 1280 ? Ss Mar10 0:00 [lxc monitor]
/var/lib/lxd/containers vps-01
root 1984 0.0 0.0 72544 948 ? S Mar10 0:00 \_ [lxc monitor]
/var/lib/lxd/containers vps-01
root 19734 0.0 0.3 72544 3460 ? Ss Mar15 0:00 [lxc monitor]
/var/lib/lx
4933 +0100
Birth: -
Cordialement,
Benoît
Afin de contribuer au respect de l'environnement, merci de n'imprimer ce mail
qu'en cas de nécessité
De: "Serge Hallyn"
À: "lxc-users"
Envoyé: Mardi 22 Mars 2016 19:17:39
Objet: Re: [lxc-users] LXD uptime back
quot;lxc-users"
Envoyé: Mardi 22 Mars 2016 19:36:09
Objet: Re: [lxc-users] LXD uptime back to 0
Oh, right, but what we really want is the cgroups
of the container init task (lxc-info -n vps-01 -p -H)
Quoting Benoit GEORGELIN - Association Web4all (benoit.george...@web4all.fr):
&
which should be used in
/proc/uptime is the st.st_ctime for /proc/.
Quoting Benoit GEORGELIN - Association Web4all (benoit.george...@web4all.fr):
> For container "ben"
>
> This would be :
>
> Dir: /sys/fs/cgroup/systemd/lxc/ben
> File: tasks
>
> /sys/fs/
>
>
> De: "Serge Hallyn"
> À: "lxc-users"
> Envoyé: Mardi 22 Mars 2016 22:10:13
> Objet: Re: [lxc-users] LXD uptime back to 0
>
> D'oh, I was misremember how it works. And good thing too, as what I was
> thinking couldn't possibly
Hi ,
I was wondering if the real disk information and usage will be one day inside
the container or if this is technically not possible ?
So far, using Btrfs with a subvolume , quotas are working like a charm but
inside the container, disk information and usage are those of the host.
I guess i
De: "Fajar A. Nugraha"
À: "lxc-users"
Envoyé: Lundi 6 Juin 2016 00:58:18
Objet: Re: [lxc-users] Real disk information inside container - Btrfs
On Sun, Jun 5, 2016 at 10:37 PM, Benoit GEORGELIN - Association
Web4all wrote:
> Hi ,
> I was wondering if the real dis
Bonjour :)
I'm looking for a feedback about people using LXC technology containers and
automation tools for system task and system update.
With the ability of having hundred of containers running at the same time, I
was wondering how you manage your infrastructure.
Let's say we talk about 50
r and afterwards the software
package itself on the top layer.
with greetings
Guido
On 22.06.2016 23:12, Benoit GEORGELIN - Association Web4all wrote:
> Bonjour :)
>
> I'm looking for a feedback about people using LXC technology containers and
> automation tools for system ta
Hi,
For once, simple question :)
Do you have experienced any "disk quota exceeded" with a container using BTRFS
as a backing storage ?
LXD using btrfs
Subvolume with quota applied to 10Go
Container can't do any write after 24h uptime and less than 2Go used
If I restart the container, look
about that.
Cordialement,
De: "Mike Wright"
À: "lxc-users"
Envoyé: Mardi 28 Juin 2016 10:22:22
Objet: Re: [lxc-users] btrfs and LXC/LXD - disk quota exceeded
On 06/28/2016 06:32 AM, Benoit GEORGELIN - Association Web4all wrote:
> Hi,
>
> For once, simple que
Hi, (without hijacking another thread)
I'm sharing with you some information about BTRFS and Ubuntu 15.10, Kernel
4.2.0-30-generic regarding a quota disk error on my LXC containers
If you plan tu use quota, this will be interesting for you to know.
Cheers
-- Email sent to BTRFS list
Hi de
Yesterday I tried the kernel:v4.6.3-yakkety
The command "lxc stop container" totaly crash the system . Hard reboot
mandatory
With v4.5.7-yakkety so far, everything looks fine, including the quota.
But after what I read about btrfs, I'll find another FS for production system
ready because I n
- Disk quota and Ubuntu 15.10
On 30/06/2016 15:50, Benoit GEORGELIN - Association Web4all wrote:
> Yesterday I tried the kernel:v4.6.3-yakkety
>
> The command "lxc stop container" totaly crash the system . Hard reboot
> mandatory
>
> With v4.5.7-yakkety so far, e
lxc-users] Btrfs - Disk quota and Ubuntu 15.10
>From https://www.stgraber.org/2016/03/26/lxd-2-0-resource-control-412/
lxc config device set my-container root size 20GB
Works with ZFS and BTFS
From: lxc-users [mailto:lxc-users-boun...@lists.linuxcontainers.org] On Behalf
Of Benoit GEORGELIN
I upgraded the system to Ubuntu 16.04, kernel downgraded to 4.4.0-28-generic (
I wanted to use Cgroup Namespaces )
BTRFS quotas looks to work properly , system is stable .
Cordialement,
Benoît
De: "Benoit GEORGELIN - Association Web4all"
À: "lxc-users"
Envoyé: Jeud
container à working.
For those that will need to do the same I share a small script I used to
migrate data : https://github.com/givre/lxd_btrfs_to_zfs
Cordialement,
Benoît
De: "Benoit GEORGELIN - Association Web4all"
À: "lxc-users"
Envoyé: Vendredi 1 Juillet 2016 12:06
Hi,
I'm looking to move unprivileged containers from one host to another.
I'm actually moving pure LXC containers to a new LXD/LXC host
I would like to know how should I deal with the uid/gid inside the container.
The root uid/gid is différent on the new host. But I can simply remplace the
o
Have a nice day
Cordialement,
Benoît
De: "Fajar A. Nugraha"
À: "lxc-users"
Envoyé: Lundi 11 Juillet 2016 02:16:34
Objet: Re: [lxc-users] move unprivileged containers - uid/gid map
On Sun, Jul 10, 2016 at 7:20 AM, Benoit GEORGELIN - Association Web4all <
benoit.georg
Yes, LXD Containers is what I would use.
I often say "LXC/LXD containers" just to remember that LXD is not a container
technology and it's require LXC to works :)
Great articles btw . thanks for sharing that on the list.
Cordialement,
Benoît G
De: "Eric"
À: "lxc-users" , "Simos Xenitel
Hi dear members of the list
Are you able to use docker inside an LXD container , using a docker swarm
cluster and an overlay network ?
Here is what I have when I run a docker inside the cluster :
docker: Error response from daemon: Error response from daemon: error creating
external connecti
arch_moddep() could not open moddep file
'/lib/modules/4.4.0-28-generic/modules.dep.bin'
Cordialement,
Benoît G
De: "Benoit GEORGELIN - Association Web4all"
À: "lxc-users"
Envoyé: Lundi 29 Août 2016 00:42:48
Objet: [lxc-users] docker 1.11 - swarm - overlay
Looks like it will manage by docker.io team .
Here is the link :
https://bugs.launchpad.net/ubuntu/+source/docker.io/+bug/1618283
Cordialement,
Benoît G
De: "Benoit GEORGELIN - Association Web4all"
À: "lxc-users"
Envoyé: Lundi 29 Août 2016 12:11:48
Objet: Re: [lx
Hi,
looks like the lxd should be able to run a "zpool list" so the zfs backend will
be considered as an option
https://github.com/lxc/lxd/blob/6cbf82757e96213e73be9a7305803910b09ea5ed/lxd/main.go#L628
Maybe, using puppet , the zpool list command from LXD failed .
I would try to get the "z
Hi,
I'm wondering what kind of storage are you using in your infrastructure ?
In a multiple LXC/LXD nodes how would you design the storage part to be
redundant and give you the flexibility to start a container from any host
available ?
Let's say I have two (or more) LXC/LXD nodes and I want
Thanks, looks like nobody use LXD in a cluster
Cordialement,
Benoît
De: "Tomasz Chmielewski"
À: "lxc-users"
Cc: "Benoit GEORGELIN - Association Web4all"
Envoyé: Mercredi 2 Novembre 2016 12:01:50
Objet: Re: [lxc-users] Question about your storage on multi
mance/stability. I
am looking into setting up an HA NFSv4 config to address the single point of
failure with NFS v3 setups.
-Ron
On 11/3/2016 9:42 AM, Benoit GEORGELIN - Association Web4all wrote:
> Thanks, looks like nobody use LXD in a cl
to use in production. Just do a quick search for ScaleIO and
read the literature.
Let me know if you have more questions...
Thanks,
-Ron
On 11/3/2016 11:38 AM, Benoit GEORGELIN - Association Web4all wrote:
> Hi Ron,
> sounds like a good way to manage it. Thanks
> How
> Hello,
> I have single static IP address from my ISP. I have registered DNS name
> (root-domain.com for example) mapped to that public IP.
> I have an router (Linksys E1700) and home network.
> I want to create specific sub-domain (sub1.root-domain.com – for example),
> register it on DNS prov
Hi all,
I was wondering how the version of LXD / LXC is working.
I'm not able to understand if i'm running the latest version of LXD / LXC
Here is what I have on my system :
lxc --version
2.5
lxd --version
2.0.5
Here are the version online on linuxcontainers website it's the opposite .
> Quoting Benoit GEORGELIN - Association Web4all (benoit.george...@web4all.fr):
> > Hi all,
> > I was wondering how the version of LXD / LXC is working.
> > I'm not able to understand if i'm running the latest version of LXD / LXC
> > Here is what I have on
>> Quoting Benoit GEORGELIN - Association Web4all (benoit.george...@web4all.fr):
>> > Hi all,
>> > I was wondering how the version of LXD / LXC is working.
>> > I'm not able to understand if i'm running the latest version of LXD / LXC
>> > H
Hi lxc-users ,
I would like to know if you have any experience with a large number of LXC/LXD
containers ?
In term of performance, stability and limitation .
I'm wondering for exemple, if having 100 containers behave the same of having
1.000 or 10.000 with the same configuration to avoid to
- Mail original -
> De: "Simos Xenitellis"
> À: "lxc-users"
> Envoyé: Lundi 13 Mars 2017 20:22:03
> Objet: Re: [lxc-users] Experience with large number of LXC/LXD containers
> On Sun, Mar 12, 2017 at 11:28 PM, Benoit GEORGELIN - Association
> Web
- Mail original -
> De: "Caleb Everett"
> À: "lxc-users"
> Envoyé: Mardi 14 Mars 2017 12:32:11
> Objet: [lxc-users] Trouble locating rootfs
> I'm trying to set acl permissions on some files in the root file system from
> the
> host, but can't seem to find the root file systems for the c
fault/containers/
> but there doesn't appear to be anything there.
> On Tue, Mar 14, 2017 at 9:51 AM, Benoit GEORGELIN - Association Web4all < [
> mailto:benoit.george...@web4all.fr | benoit.george...@web4all.fr ] > wrote:
>> - Mail original -
>> > De: "
torage-pools/default/containers/ local
> and from: zfs get mounted top/lxd/containers/
> NAME PROPERTY VALUE SOURCE
> top/lxd/containers mounted no -
> On Tue, Mar 14, 2017 at 11:30 AM, Benoit GEORGELIN - Association Web4all < [
> mailto:benoit.george...@web4all.fr | benoit.
- Mail original -
> De: "David Favor"
> À: "lxc-users"
> Envoyé: Lundi 27 Mars 2017 12:55:09
> Objet: Re: [lxc-users] Experience with large number of LXC/LXD containers
> Serge E. Hallyn wrote:
>> On Tue, Mar 14, 2017 at 02:29:01AM +0100, B
- Mail original -
> De: "Serge E. Hallyn"
> À: "lxc-users"
> Envoyé: Mardi 28 Mars 2017 21:07:08
> Objet: Re: [lxc-users] subuids and subgid range with multiple LXC
> containers
> On Wed, Mar 29, 2017 at 07:35:15AM +0700, Fajar A. Nugraha wrote:
> > On Wed, Mar 29, 2017 at 4:20 AM,
t; > À: "lxc-users"
> > Envoyé: Lundi 27 Mars 2017 12:55:09
> > Objet: Re: [lxc-users] Experience with large number of LXC/LXD containers
> > Serge E. Hallyn wrote:
> >> On Tue, Mar 14, 2017 at 02:29:01AM +0100, Benoit GEORGELIN – Association
> &g
Good evening
I'm running into a problem with LXD live migration, so I can't use live
migration
I have this kind of error:
error: Error transferring container data: migration restore failed
(00.018254) Warn (criu/apparmor.c:421): apparmor namespace
/sys/kernel/security/apparmor/policy/namespac
- Mail original -
> De: "Tamas Papp"
> À: "lxc-users"
> Envoyé: Jeudi 27 Avril 2017 01:59:34
> Objet: Re: [lxc-users] LXD move, how to reduce downtime without live migration
> On 04/27/2017 03:43 AM, Benoit GEORGELIN - Association Web4all wrote:
>
80 matches
Mail list logo
