Re: [Lxc-users] Startup scripts [Was: Re: security question]

2011-08-21 Thread Matto Fransen
Hi, On Sun, Aug 21, 2011 at 06:01:02PM +0100, Gordon Henderson wrote: > FWIW: > > I've been using the file-rc boot script mechanisms rather than the sysv-rc > system for LXC containers. That might seem like a step backwards, but > actually, it's fine and gives you much finer (& easier IMO) co

Re: [Lxc-users] Containers in NFS, or ...

2011-07-23 Thread Matto Fransen
Hi, On Thu, Jul 21, 2011 at 06:02:09PM +0100, Gordon Henderson wrote: > A few months ago there were some posts about running containers in a > diskless host - just looking for some more info about this in my ponderous > ponderings! > > I'm not after having a diskless host (although it's an opt

Re: [Lxc-users] LXC and Slackware 13.37

2011-07-12 Thread Matto Fransen
Hi Laurens, On Tue, Jul 12, 2011 at 07:11:21PM +0200, Laurens Vets wrote: > I'm trying to configure LXC on Slackware 13.37 following these 2 > guides: http://www.vislab.uq.edu.au/howto/lxc.html & > http://www.vislab.uq.edu.au/howto/lxc/create_container.html. However, I > cannot reach the LXC

Re: [Lxc-users] read only rootfs

2011-07-04 Thread Matto Fransen
Hi, On Mon, Jun 27, 2011 at 06:05:13PM +0200, Samuel Maftoul wrote: > I'm searching for a solution to have a read only rootfs inside an LXC > container. I have a webserver running this way :) > I created a container with the busybox template, this container works. > As soon as I try to mount it

Re: [Lxc-users] Control panel

2011-03-11 Thread Matto Fransen
Hi all, This thread is becoming more interesting all the time :) On Fri, Mar 11, 2011 at 11:06:53AM +, Stuart Johnson wrote: > > If you're in a production environment, you will tend to start or stop > > your containers as seldom as you will start and stop your servers. > > > I see this as

Re: [Lxc-users] Control panel

2011-03-10 Thread Matto Fransen
Hi, On Thu, Mar 10, 2011 at 07:56:23AM -0600, Serge E. Hallyn wrote: > > One of the nice things IMHO of LXC Linux Containers is that it hardly > > needs any extra's on the host. The user-space app's are either > > compiled C-programs or bash-scripts. There is one Perl application > > but that is

Re: [Lxc-users] Control panel

2011-03-09 Thread Matto Fransen
Hi, On Tue, Mar 08, 2011 at 07:35:38AM -0600, Serge E. Hallyn wrote: > > Ideally I want a simple ncurses application that shows you what > > containers are active, and allows simple functionality, such as create, > > start, stop and configure settings. Super easy to install, and runs > > from

Re: [Lxc-users] GUI container

2011-02-15 Thread Matto Fransen
Hi, On Tue, Feb 15, 2011 at 01:20:15AM -0800, Nirmal Guhan wrote: > >> I have set up an short howto on setting up an xserver in an lxc linux > >> container, > >> see > >> http://box.matto.nl/lxcxserver.html [ .. ] > > Am trying these steps and installed X, xdm, xterm and blackbox in the > > lx

Re: [Lxc-users] Jumping out of a read-only bind mount container

2011-02-07 Thread Matto Fransen
Hi, On Tue, Feb 08, 2011 at 11:19:20AM +1100, Trent W. Buck wrote: > Matto Fransen writes: > > This is a problem with the sshd bind readonly containers, because > > lxc-init mounts /proc, /dev/shm and /dev/mqueue. > > With lxc.cap.drop=sys_admin it is therefor not possibl

Re: [Lxc-users] Jumping out of a read-only bind mount container

2011-02-07 Thread Matto Fransen
Hi, On Mon, Feb 07, 2011 at 11:40:47AM +1100, Trent W. Buck wrote: > >> In the container, I can use the mount command with the -oremount,rw > >> options and then edit the file from the container. > > > > So the bind read-only mounts are no protection against changing the > > filesystem of the co

[Lxc-users] Jumping out of a read-only bind mount container (was Re: Changing mount options from inside a container)

2011-02-06 Thread Matto Fransen
Hi, On Fri, Feb 04, 2011 at 04:39:57PM -0200, Andre Nathan wrote: > Let's say I have a file bind-mounted in read-only mode from the host to > the container. For example, /etc/resolv.conf. > > In the container, I can use the mount command with the -oremount,rw > options and then edit the file fr

Re: [Lxc-users] GUI container

2010-12-17 Thread matto fransen
Hi, On 17 December 2010 11:28, Matto Fransen wrote: >> Do I need to start container with X (level 5?). I tried these steps : I have set up an short howto on setting up an xserver in an lxc linux container, see http://box.matto.nl/lxcxserver.html Cheers,

Re: [Lxc-users] GUI container

2010-12-17 Thread Matto Fransen
Hi, >> > >> It is no problem to run GUI apps in a container. > >> I have set up one of my containers as an X-server. From an > >> old laptop I do "X -query and run the window-manager > >> that is installed on the container. > >> > >> You can use ssh -X to log in into the container and start > >>

Re: [Lxc-users] GUI container

2010-12-10 Thread Matto Fransen
Hi, On Thu, Dec 09, 2010 at 10:21:49PM -0800, Nirmal Guhan wrote: > Has anyone tried running a GUI app (firefox for instance) inside a > container or as an application container? Just want to know if this > requires any special steps before I tread that path. Am using Fedora > 12 for both host a

Re: [Lxc-users] Running LXC containers on a laptop

2010-09-24 Thread matto fransen
Hi, On Fri, Sep 24, 2010 at 05:20:04PM +0200, Daniel Lezcano wrote: > On my host I have also in /etc/network/interfaces: > > auto br0 > iface br0 inet static > address 172.20.0.1 > netmask 255.255.255.0 > bridge_stp off > bridge_maxwait 5 > pre-up /usr/sbin/brctl addbr br0 >

[Lxc-users] Running LXC containers on a laptop

2010-09-24 Thread matto fransen
Hi, When I use br0 on my laptop (with wifi connection) I can connect from the container to the laptop, but not outside the laptop. What is the most easy way to setup wlan0 as gateway for the containers? Thanx! Matto --

Re: [Lxc-users] Cannot start a container with a new MAC address

2010-08-27 Thread Matto Fransen
Hi, On Fri, Aug 27, 2010 at 11:27:16AM +0200, Sebastien Douche wrote: > I created a container with an interface. I stop it, I change the MAC > address, restart it: > > lxc-start: ioctl failure : Cannot assign requested address > lxc-start: failed to setup hw address for 'eth0' > lxc-start: failed