Re: [Lxc-users] lxc, CIFS mounts and apparmor

2012-09-06 Thread Serge Hallyn
Quoting TuxRaiderPen (tuxraider...@wpascanner.com): Playing with lxc virtualization to possibly isolate some things in their own little/light world(s) v. standard VM via VMWare Server or Player. I am trying to use mount for cifs to mount to a NAS to export out some data apparmor is

Re: [Lxc-users] Setting yama/ptrace_scope to 0 inside container?

2012-09-13 Thread Serge Hallyn
Quoting Dan Kegel (d...@kegel.com): I'd like to strace a stray process, but in Ubuntu 12.04, to do that you have to do echo 0 | sudo tee /proc/sys/kernel/yama/ptrace_scope This fails inside an LXC (ephemeral) container. But since there's only one kernel, you can do that in the host, and

Re: [Lxc-users] Server capacity planing and real world usage.

2012-09-26 Thread Serge Hallyn
Quoting Toens Bueker (toens.bue...@lists0903.nurfuerspam.neuroserve.de): Leon Waldman le.wald...@gmail.com wrote: Hi all, first post on the list :) Welcome. Assuming a hardened Guest image (SELinux or Apparmor + The NSA Guidelines + no shell access on the guests), A LXC Host would

Re: [Lxc-users] use libvirt-bin in lxc

2012-10-01 Thread Serge Hallyn
Quoting 宣铭艺 (xuanmin...@gmail.com): can we use libvirt-bin in lxc??? Yes, you can. The failures you show are due to your apparmor policy not allowing mounting of cgroups in the containers. You can create a new policy for your containers allowing just the permissions you need, or (not

Re: [Lxc-users] Grub error when setting up a current ubuntu cloud-image template

2012-10-02 Thread Serge Hallyn
Quoting Florian Motlik (flomot...@gmail.com): When setting up a current cloud image I ran into the following error: /usr/sbin/grub-probe: error: cannot find a device for / (is /dev mounted?) I tried it on our Development Server and my local system. Both lead to the same error. To

Re: [Lxc-users] lxc-start-ephemeral + upstart = pain?

2012-10-05 Thread Serge Hallyn
Quoting Dan Kegel (d...@kegel.com): Hi ho. ( I see https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1049908 also deals with lxc and upstart, but my use case is probably different.) I'd like to run an ephemeral container in a respawning upstart job, but I don't know how shutdown should

Re: [Lxc-users] Issues with mass-starting and bridge

2012-10-08 Thread Serge Hallyn
I just created and started 99 containers on a cloud instance. Those were using the lxcbr0 bridge and using dnsmasq rather than statically assigned ips. But I had no problems. So your issue isn't with the container's veth devices themselves, though it still could be a bug in your kernel's

[Lxc-users] uevent when moving nic between network namespaces?

2012-10-11 Thread Serge Hallyn
Hi, Dan Kegel (cc:d) found an interesting nuisance relating to upstart and network interfaces with lxc containers. In particular, when you start a container, two veths are created. A uevent for their creation is sent, and so a 'network-interface' upstart job is created for each. One of the

Re: [Lxc-users] lxc-setcap 'Failed to set capabilities on file /usr/local/libexec/lxc-init'

2012-10-12 Thread Serge Hallyn
Quoting Frank Scholten (fr...@frankscholten.nl): Hi all, I want to run non-root LXCs and I read I have to run sudo lxc-setcap first. I am running Ubuntu 12.04 btw. So I cloned the git repo, ran ./configure, make, make install but when I run lxc-setcap I get:

Re: [Lxc-users] uevent when moving nic between network namespaces?

2012-10-12 Thread Serge Hallyn
Quoting Eric W. Biederman (ebied...@xmission.com): Serge Hallyn serge.hal...@canonical.com writes: Hi, Dan Kegel (cc:d) found an interesting nuisance relating to upstart and network interfaces with lxc containers. In particular, when you start a container, two veths are created

Re: [Lxc-users] lxc-start-ephemeral fails unless run as root?

2012-10-12 Thread Serge Hallyn
Try in quantal. I think Stephane got it all fixed back up there. Looking at the diff, pulling the lxc-start-ephemeral out of the quantal package and using it in precise might work just fine. Quoting Dan Kegel (d...@kegel.com): Not sure what's up with this, but on my ubuntu 12.04.1 system,

Re: [Lxc-users] uevent when moving nic between network namespaces?

2012-10-12 Thread Serge Hallyn
Quoting Eric W. Biederman (ebied...@xmission.com): Serge Hallyn serge.hal...@canonical.com writes: Quoting Eric W. Biederman (ebied...@xmission.com): I am not currently working on a patch for this, but I will be happy to review one. At a quick glance it looks like this could just

Re: [Lxc-users] uevent when moving nic between network namespaces?

2012-10-12 Thread Serge Hallyn
Quoting Eric W. Biederman (ebied...@xmission.com): Serge Hallyn serge.hal...@canonical.com writes: Quoting Eric W. Biederman (ebied...@xmission.com): Serge Hallyn serge.hal...@canonical.com writes: Quoting Eric W. Biederman (ebied...@xmission.com): I am not currently working

[Lxc-users] [PATCH 1/1] dev_change_net_namespace: send a KOBJ_REMOVED/KOBJ_ADD

2012-10-15 Thread Serge Hallyn
KOBJ_ADD to new netns. There will then be a _MOVE event from the device_rename() call, but that should be innocuous. Signed-off-by: Serge Hallyn serge.hal...@canonical.com Acked-by: Eric W. Biederman ebied...@xmission.com --- net/core/dev.c |6 ++ 1 file changed, 6 insertions(+) diff --git

Re: [Lxc-users] [lxc-attach error] Failed to open /proc/4468/ns/pid. Failed to enter namespace

2012-10-16 Thread Serge Hallyn
to which you can setns. I also have the setns man page. How do I enable it? Do I have to compile a new kernel? Cheers, Frank On Mon, Oct 15, 2012 at 6:25 PM, Serge Hallyn serge.hal...@canonical.com wrote: Quoting Frank Scholten (fr...@frankscholten.nl): Hi all, I am trying to run

Re: [Lxc-users] can we run a kvm vm in lxc?

2012-10-17 Thread Serge Hallyn
Quoting 宣铭艺 (xuanmin...@gmail.com): Dear all: Can we run a kvm vm in lxc? Yes. Should we modify some thing to make sure the vm work? Depends on what you're starting with. You mainly just need to make sure the container can access /dev/kvm.

Re: [Lxc-users] systemd inside LXC

2012-10-19 Thread Serge Hallyn
Quoting John (l...@jelmail.com): Hello, I'm in the middle of a migration from init to systemd. I've completed the transition of my host environment and my 6 existing containers continue to work as expected (they all use sysvinit internally). I've started work on a systemd container and am

Re: [Lxc-users] apparmor and nfs

2012-10-19 Thread Serge Hallyn
Quoting Gary Ballantyne (gary.ballant...@haulashore.com): Hi I use lxc.aa_profile = unconfined to get the NFS client to work in a container (precise host and container). Is that the best approach? If disabling apparmor works, then a custom profile should also work, and would be your best

Re: [Lxc-users] systemd inside LXC

2012-10-21 Thread Serge Hallyn
is something I've been trying to do and I had run into that posters problems. You responded with this: Subject: Re: [Lxc-users] fedora 16 under lxc On Tue, 2012-02-14 at 09:23 -0600, Serge Hallyn wrote: Quoting Ramez Hanna (rha...@informatiq.org): now all my efforts have not succeedd to get

Re: [Lxc-users] systemd inside LXC

2012-10-21 Thread Serge Hallyn
Quoting John (l...@jelmail.com): On 19/10/12 16:51, Serge Hallyn wrote: Add: lxc.network.type = empty If you don't have any lxc.network.type sections, then the container shares network with the host, and so the container talks to the host's systemd. (same with upstart

Re: [Lxc-users] systemd inside LXC

2012-10-22 Thread Serge Hallyn
Quoting Michael H. Warfield (m...@wittsend.com): On Mon, 2012-10-22 at 16:21 -0500, Serge Hallyn wrote: Quoting Michael H. Warfield (m...@wittsend.com): On Mon, 2012-10-22 at 15:14 -0500, Serge Hallyn wrote: Quoting Michael H. Warfield (m...@wittsend.com): Serge, On Mon

Re: [Lxc-users] how to limit disk space in lxc

2012-10-25 Thread Serge Hallyn
Quoting Fajar A. Nugraha (l...@fajar.net): On Thu, Oct 25, 2012 at 4:11 PM, 宣铭艺 xuanmin...@gmail.com wrote: Dear all: The problem is that,how can we limit the disk space in lxc.Now I use the default config. And the container can access all space in host.can we use lvm or other tools to

Re: [Lxc-users] [systemd-devel] Unable to run systemd in an LXC / cgroup container.

2012-10-25 Thread Serge Hallyn
Quoting Michael H. Warfield (m...@wittsend.com): Sorry for taking a few days to get back on this. I was delivering a guest lecture up at Fordham University last Tuesday so I was out of pocket a couple of days or I would have responded sooner... On Mon, 2012-10-22 at 16:59 -0400, Michael H.

Re: [Lxc-users] [systemd-devel] Unable to run systemd in an LXC / cgroup container.

2012-10-25 Thread Serge Hallyn
Quoting Michael H. Warfield (m...@wittsend.com): On Thu, 2012-10-25 at 13:23 -0400, Michael H. Warfield wrote: Hey Serge, On Thu, 2012-10-25 at 11:19 -0500, Serge Hallyn wrote: ... Oh, sorry - I take back that suggestion :) Note that we have mount hooks, so templates could

Re: [Lxc-users] [systemd-devel] Unable to run systemd in an LXC / cgroup container.

2012-10-25 Thread Serge Hallyn
Quoting Michael H. Warfield (m...@wittsend.com): On Thu, 2012-10-25 at 23:38 +0200, Lennart Poettering wrote: On Thu, 25.10.12 11:59, Michael H. Warfield (m...@wittsend.com) wrote: I've got some more problems relating to shutting down containers, some of which may be related to mounting

Re: [Lxc-users] [systemd-devel] Unable to run systemd in an LXC / cgroup container.

2012-10-26 Thread Serge Hallyn
Quoting Michael H. Warfield (m...@wittsend.com): On Thu, 2012-10-25 at 20:30 -0500, Serge Hallyn wrote: Quoting Michael H. Warfield (m...@wittsend.com): On Thu, 2012-10-25 at 23:38 +0200, Lennart Poettering wrote: On Thu, 25.10.12 11:59, Michael H. Warfield (m...@wittsend.com) wrote

Re: [Lxc-users] [lxc-devel] [systemd-devel] Unable to run systemd in an LXC / cgroup container.

2012-10-28 Thread Serge Hallyn
Quoting Michael H. Warfield (m...@wittsend.com): On Sun, 2012-10-28 at 18:52 +0100, Serge Hallyn wrote: Quoting Michael H. Warfield (m...@wittsend.com): On Sat, 2012-10-27 at 13:51 -0400, Michael H. Warfield wrote: On Sat, 2012-10-27 at 13:40 -0400, Michael H. Warfield wrote: /me

Re: [Lxc-users] [lxc-devel] [systemd-devel] Unable to run systemd in an LXC / cgroup container.

2012-10-29 Thread Serge Hallyn
Quoting Michael H. Warfield (m...@wittsend.com): ... Yeah, I don't think I need to play a game like this anymore. I'd have to go back through some old old E-Mails to see why I did that before. I seem to recall we were playing with all sorts of bind mount options for some PRIVATE thing or

Re: [Lxc-users] [lxc-devel] [systemd-devel] Unable to run systemd in an LXC / cgroup container.

2012-10-30 Thread Serge Hallyn
Quoting Michael H. Warfield (m...@wittsend.com): On Sun, 2012-10-28 at 23:02 +0100, Serge Hallyn wrote: Quoting Michael H. Warfield (m...@wittsend.com): : I did see some errors setting up that dev... -- [root@forest mhw]# lxc-start -n Alcove lxc-start: No such file

Re: [Lxc-users] Lxc with Slackware 14 64bit will not start.

2012-10-30 Thread Serge Hallyn
Quoting Giuseppe Tofoni (gt0...@gmail.com): 2012/10/28 Serge Hallyn serge.hal...@canonical.com: Quoting Giuseppe Tofoni (gt0...@gmail.com): Hello, First thanks for your great work. I am a happy user of LXC with Slackware 13.37 and lxc-0.7.4.2, but with slack64 14.0 and lxc-0.8.0-rc2

Re: [Lxc-users] [lxc-devel] [systemd-devel] Unable to run systemd in an LXC / cgroup container.

2012-10-31 Thread Serge Hallyn
Can you tell me the exact git tree and branch you are using? The results you're getting don't make sense to me... Hoping I can find a simple answer. -serge -- Everyone hates slow websites. So do we. Make your web apps

Re: [Lxc-users] [lxc-devel] [systemd-devel] Unable to run systemd in an LXC / cgroup container.

2012-10-31 Thread Serge Hallyn
Quoting Michael H. Warfield (m...@wittsend.com): On Mon, 2012-10-29 at 10:18 +0100, Serge Hallyn wrote: Quoting Michael H. Warfield (m...@wittsend.com): ... Yeah, I don't think I need to play a game like this anymore. I'd have to go back through some old old E-Mails to see why I did

Re: [Lxc-users] [lxc-devel] [GIT] lxc branch, master, updated. 7f99e339363d9f005c9386f60a1d8c0953c85053

2012-11-01 Thread Serge Hallyn
Quoting Michael H. Warfield (m...@wittsend.com): On Thu, 2012-11-01 at 21:20 +0100, Daniel Baumann wrote: On 11/01/2012 09:08 PM, Michael H. Warfield wrote: I know, I KNOW this is an 11th hour request. Can we please get Serge's autodev stuff into this release? Please? release early,

Re: [Lxc-users] [lxc-devel] [GIT] lxc branch, master, updated. 7f99e339363d9f005c9386f60a1d8c0953c85053

2012-11-01 Thread Serge Hallyn
Quoting Michael H. Warfield (m...@wittsend.com): On Thu, 2012-11-01 at 22:44 +0100, Serge Hallyn wrote: Quoting Michael H. Warfield (m...@wittsend.com): On Thu, 2012-11-01 at 21:20 +0100, Daniel Baumann wrote: On 11/01/2012 09:08 PM, Michael H. Warfield wrote: I know, I KNOW

Re: [Lxc-users] connecting lxc-console is impossible after deny cgroup by default activated

2012-11-05 Thread Serge Hallyn
Quoting Thierry (mys...@cynetek.com): Hello, lxc-console not functionnal after activate lxc.cgroup.devices.deny = a Phew, so it's working correctly. Now add lxc.cgroup.devices.allow = c 136:* rwm to allow access to the console devices created by lxc. -serge

Re: [Lxc-users] [lxc-devel] pivot root failures when / is mounted as shared

2012-11-05 Thread Serge Hallyn
Quoting Michael H. Warfield (m...@wittsend.com): ... This was from another threat with the systemd guys. On Mon, 2012-10-22 at 16:11 +0200, Lennart Poettering wrote: Note that there are reports that LXC has issues with the fact that newer systemd enables shared mount propagation for all

Re: [Lxc-users] connecting lxc-console is impossible after deny cgroup by default activated

2012-11-05 Thread Serge Hallyn
Quoting Thierry (mys...@cynetek.com): My understanding was that you manually set lxc.cgroup.devices.deny = a after starting up the container. Is that right, or not? If not, please give your full config files for working and not working cases. -serge Using only configuration file. Not

Re: [Lxc-users] connecting lxc-console is impossible after deny cgroup by default activated

2012-11-05 Thread Serge Hallyn
Quoting Thierry (mys...@cynetek.com): lxc-start 1352149909.205 DEBUGlxc_conf - trying to mount '/dev/vg1/debian-dev'-'/usr/lib/lxc/rootfs' with fstype '# /etc/filesystems' lxc-start 1352149909.205 DEBUGlxc_conf - mount failed with error: No such device (And a bunch more)

Re: [Lxc-users] connecting lxc-console is impossible after deny cgroup by default activated

2012-11-05 Thread Serge Hallyn
Quoting Thierry (mys...@cynetek.com): Le 05/11/2012 22:25, Serge Hallyn a écrit : Quoting Thierry (mys...@cynetek.com): lxc-start 1352149909.205 DEBUGlxc_conf - trying to mount '/dev/vg1/debian-dev'-'/usr/lib/lxc/rootfs' with fstype '# /etc/filesystems' lxc-start

Re: [Lxc-users] connecting lxc-console is impossible after deny cgroup by default activated

2012-11-07 Thread Serge Hallyn
Quoting Thierry (mys...@cynetek.com): Le 05/11/2012 23:36, Serge Hallyn a écrit : Quoting Thierry (mys...@cynetek.com): Le 05/11/2012 22:25, Serge Hallyn a écrit : Quoting Thierry (mys...@cynetek.com): lxc-start 1352149909.205 DEBUGlxc_conf - trying to mount '/dev/vg1/debian

Re: [Lxc-users] Libvirt-bin in lxc

2012-11-07 Thread Serge Hallyn
Quoting 宣铭艺 (xuanmin...@gmail.com): Hi I can't use libvirt-bin in lxc,who can tell me why and how to do it. I have mknod some devices such as kvm hpet this is the lxc config file http://paste.ubuntu.com/1338853/ this is the strace message.(strace virsh start cflinux)

Re: [Lxc-users] connecting lxc-console is impossible after deny cgroup by default activated

2012-11-07 Thread Serge Hallyn
Quoting Thierry (mys...@cynetek.com): Sorry, this might be debug-able hands-on, but not like this (and esp not with non-standard reply formats). Both your supposed working and non-working cases show /dev/console and /dev/ttyN being wrong (so lxc-console should actually fail for both) while the

Re: [Lxc-users] Libvirt-bin in lxc

2012-11-07 Thread Serge Hallyn
Quoting 宣铭艺 (xuanmin...@gmail.com): 2012/11/7 Serge Hallyn serge.hal...@canonical.com Quoting 宣铭艺 (xuanmin...@gmail.com): Hi I can't use libvirt-bin in lxc,who can tell me why and how to do it. I have mknod some devices such as kvm hpet this is the lxc config file http

Re: [Lxc-users] [lxc][Openstack swift] How to use lxc in openstack swift

2012-11-09 Thread Serge Hallyn
Quoting Sujay M (sujay@gmail.com): Hi all, I am new to both lxc and Openstack swift. I want to set up cloud storage environment with lxc for virtualization. I want some help regarding how i can use lxc for virtualization in openstack swift. Thanks in advance Openstack uses

Re: [Lxc-users] lxcbr0 versus virbr0 (Ubuntu)

2012-11-09 Thread Serge Hallyn
Quoting Ulli Horlacher (frams...@rus.uni-stuttgart.de): On Fri 2012-11-09 (08:31), Serge Hallyn wrote: Since you have a real bridge, it is better to keep using br0. I have just discovered, that br0 is still available! I was in mistake to think only lxcbr0 and virbr0 are choosable

Re: [Lxc-users] cloud environment

2012-11-13 Thread Serge Hallyn
Quoting Rintcius Blok (rintc...@gmail.com): Hi, Just curious. I was running an lxc-create command for ubuntu-cloud and saw this output: Configuring for running outside of a cloud environment If you want to configure for a cloud evironment, please use '-- -C' to create the container

Re: [Lxc-users] Problem starting oneiric container in 12.10

2012-11-13 Thread Serge Hallyn
Quoting Rintcius Blok (rintc...@gmail.com): How can I properly run an ubuntu-cloud template on 12.10 with an oneiric container? I tried this command: lxc-create -t ubuntu-cloud -n oneiric.lxc -- --auth-key $HOME/.ssh/id_rsa.pub --userdata ~/userdata.txt.gz -r oneiric This creates the

Re: [Lxc-users] sudo: unable to resolve host..

2012-11-16 Thread Serge Hallyn
Quoting Rintcius Blok (rintc...@gmail.com): Hi, I am getting messages like this with every sudo I do in the container: sudo: unable to resolve host test.lxc It happens with every container I create on 12.10 (with 12.10 container). Reproduction: lxc-create -t ubuntu-cloud -n

Re: [Lxc-users] how to troubleshoot lxc service

2012-11-19 Thread Serge Hallyn
Since you say that after this you cannot start any containers at all until a host reboot, I think what you get is a known kernel netdev refcounting bug. (Check your host syslog messages.) You might try a backported raring kernel. -serge Quoting Rintcius Blok (rintc...@gmail.com): Hi, I get

Re: [Lxc-users] how to troubleshoot lxc service

2012-11-19 Thread Serge Hallyn
Quoting Rintcius Blok (rintc...@gmail.com): Hmm.. I just had the same problem again. I thought it was this bug: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1021471 (fixed in 3.5.0-17.28) Am I having the correct version installed? : 3.5.0-18-generic #29-Ubuntu SMP Fri Oct 19

Re: [Lxc-users] how to troubleshoot lxc service

2012-11-20 Thread Serge Hallyn
Quoting Rintcius Blok (rintc...@gmail.com): Yes indeed, that version of the kernel is running. No, I'm not on a macbook air. Hi, sorry I've lost track - have you tried the kernel in quantal-proposed? There was in fact another bug and I can't remember now if it came up in this thread, or

Re: [Lxc-users] autodev (was Re: [lxc-devel] [GIT] lxc branch, master, updated.) 7f99e339363d9f005c9386f60a1d8c0953c85053

2012-11-23 Thread Serge Hallyn
Quoting Michael H. Warfield (m...@wittsend.com): Serge... You need to go in for doing psychic readings or buy lots of lottery ticks because I think you must have been channeling me and reading my mind. I've been close to posting on this off and on for the last couple of days but kept going

Re: [Lxc-users] Camera access inside container

2012-11-28 Thread Serge Hallyn
Quoting vignesh kumar (vigneshkuma...@gmail.com): Hi, I am using a lxc-ubuntu container in a ubuntu 11.10 host OS. An application running in a container requires camera access . Currently I have a USB based webcam which mount as /dev/video0 in my host.I tried giving access to the device

Re: [Lxc-users] Network Performance

2012-11-28 Thread Serge Hallyn
Quoting daniel marques (daniel.marq...@uniriotec.br): Hi Folks, Recently I've adopted LXC as a network virtualization tool, where I use the containers to generate traffic via iperf and do my experiments. So far, everything seems to be fine, but I am with doubts regarding the network

Re: [Lxc-users] Camera access inside container

2012-11-29 Thread Serge Hallyn
Quoting vignesh kumar (vigneshkuma...@gmail.com): Hi, I have added the line as you mentioned and restarted the container as well. Still getting the same issue. On Wed, Nov 28, 2012 at 8:23 PM, Serge Hallyn serge.hal...@canonical.comwrote: Quoting vignesh kumar (vigneshkuma

Re: [Lxc-users] Network Performance

2012-11-30 Thread Serge Hallyn
Quoting daniel marques (daniel.marq...@uniriotec.br): Hi Serge, Sorry for my late answer. I do use veth, but the other experiments also use it. Please explain exactly how the non-container network namespace test was set up, though. But my guess there is might be some kind of kernel

Re: [Lxc-users] [systemd-devel] Unable to run systemd in an LXC / cgroup container.

2012-12-05 Thread Serge Hallyn
Quoting John (l...@jelmail.com): If so, I'd be grateful for some guidance on what I need to do to to my configuration to make it work. Right now, you'll have to build from git. I will go away and do a git build later today. I presume that would be from

Re: [Lxc-users] [systemd-devel] Unable to run systemd in an LXC / cgroup container.

2012-12-05 Thread Serge Hallyn
Quoting Michael H. Warfield (m...@wittsend.com): You have to add an option to the config file for your systemd containers. lxc.autodev = 1 Phrasing it this way makes me wonder, should lxc look for '$rootfs/dev/console' and automatically set lxc.autodev if that is not found? (Right now if

Re: [Lxc-users] Container sends login prompt to the system console

2012-12-06 Thread Serge Hallyn
The short answer is, if login prompt is going to the system console then that means /dev/console was recreated in the container as 5:1. What you probably want to do is grab the lxc version from git://github.com/lxc/lxc.git#staging and set lxc.autodev=1 in your container config. Then systemd in

Re: [Lxc-users] [systemd-devel] Unable to run systemd in an LXC / cgroup container.

2012-12-06 Thread Serge Hallyn
Quoting John (l...@jelmail.com): On 05/12/12 21:59, Serge Hallyn wrote: You have to specify a template, i.e. '-t debian'. Oh. I wasn't using a template. Up to now, I have an existing root fileyststem, say /srv/lxc/mycontainer.x86_64 that is pointed to by my configuration file, say

Re: [Lxc-users] [systemd-devel] Unable to run systemd in an LXC / cgroup container.

2012-12-06 Thread Serge Hallyn
Quoting John (l...@jelmail.com): On 06/12/12 20:06, Dan Kegel wrote: On Thu, Dec 6, 2012 at 12:00 PM, John l...@jelmail.com wrote: While on the subject, any reason for lxc-destroy now being destructive? Wait, isn't that the point? It's in the name and all. When was it ever

Re: [Lxc-users] [systemd-devel] Unable to run systemd in an LXC / cgroup container.

2012-12-07 Thread Serge Hallyn
Quoting John (l...@jelmail.com): On 07/12/12 00:48, Serge Hallyn wrote: Quoting John (l...@jelmail.com): On 06/12/12 20:06, Dan Kegel wrote: On Thu, Dec 6, 2012 at 12:00 PM, John l...@jelmail.com wrote: While on the subject, any reason for lxc-destroy now being destructive? Wait, isn't

Re: [Lxc-users] [systemd-devel] Unable to run systemd in an LXC / cgroup container.

2012-12-07 Thread Serge Hallyn
Quoting John (l...@jelmail.com): Quoting Michael H. Warfield (m...@wittsend.com): You have to add an option to the config file for your systemd containers. lxc.autodev = 1 I would like to understand a bit more about what this option does and learn the correct way of creating devices

Re: [Lxc-users] [systemd-devel] Unable to run systemd in an LXC / cgroup container.

2012-12-07 Thread Serge Hallyn
Quoting John (l...@jelmail.com): On 07/12/12 13:50, Serge Hallyn wrote: Quoting John (l...@jelmail.com): On 07/12/12 00:48, Serge Hallyn wrote: Quoting John (l...@jelmail.com): On 06/12/12 20:06, Dan Kegel wrote: On Thu, Dec 6, 2012 at 12:00 PM, John l...@jelmail.com wrote: While

Re: [Lxc-users] start order

2012-12-10 Thread Serge Hallyn
Quoting Michael H. Warfield (m...@wittsend.com): We do have the case with the current Ubuntu stuff, though, where it will start containers using config files that have not been run through lxc-create. Is this something we want to support??? Is it too great a Not really, imo. I don't see any

Re: [Lxc-users] start order

2012-12-10 Thread Serge Hallyn
Quoting Michael H. Warfield (m...@wittsend.com): On Mon, 2012-12-10 at 08:10 -0600, Serge Hallyn wrote: Quoting Michael H. Warfield (m...@wittsend.com): There has been very little discussion in the main project over how to manage autobooting containers (or maybe I've missed it). Maybe

Re: [Lxc-users] start order

2012-12-11 Thread Serge Hallyn
Quoting Jäkel, Guido (g.jae...@dnb.de): Hi all, here my 5ct on auto start and start order: Because i'm using a farm of LXC hosts where my containers may be spread over, i also need to persist the preferred host of a container. This is currently stored in a separate configuration file.

Re: [Lxc-users] unwanted (wrong?) lxc-execute mount behaviour

2012-12-11 Thread Serge Hallyn
Quoting Rob van der Hoeven (robvanderhoe...@ziggo.nl): Hi, I want to use lxc-execute to isolate programs from the users data. For this I created the following lxc configuration file: Name: /home/rob/lxctest/lxc02.conf Contents: lxc.utsname=lxc02

Re: [Lxc-users] unwanted (wrong?) lxc-execute mount behaviour

2012-12-12 Thread Serge Hallyn
Quoting Rob van der Hoeven (robvanderhoe...@ziggo.nl): I would really like an extra lxc.mount.cwd entry in the configuration file. Maybe this entry should be mandatory if the containers filesystem is different from the host filesystem because in this case the cwd By container fs is different

Re: [Lxc-users] unwanted (wrong?) lxc-execute mount behaviour

2012-12-12 Thread Serge Hallyn
Quoting Rob van der Hoeven (robvanderhoe...@ziggo.nl): On Wed, 2012-12-12 at 08:52 -0600, Serge Hallyn wrote: ... I will be very happy with a lxc.chdir option! (I like the name, its better than lxc.mount.cwd) Will probably use it in all my lxc-execute configurations... I'll add it to my todo

Re: [Lxc-users] shared memory between containers

2012-12-13 Thread Serge Hallyn
Quoting zheng_hua...@163.com (zheng_hua...@163.com): hi, i have two processes running in two containers, they are expected to communicate with shared memory IPC, but it turned out to be failed. is there any way to address this problem? Yes, have the containers share an ipc namespace. -serge

Re: [Lxc-users] IPC with shared memory?

2012-12-13 Thread Serge Hallyn
Quoting Binknight (zheng_hua...@163.com): hi, i have two processes running in two containers on the same hardware node, they are expected to communicate with shared memory IPC mechanism, but it turned out to be failed. It seems that the shared memory created in one container is not

Re: [Lxc-users] ovs-switch networking

2012-12-13 Thread Serge Hallyn
Quoting Kalyana sundaram (kalyan...@gmail.com): Could somebody let me know how to set up veth network on container using openv-switch. I read through few links on net which asked to run a script which has (http://people.canonical.com/~serge/user-data-lxc-ovs.sh) To make sure this is clear,

Re: [Lxc-users] lxc container shutdown or restart fails after upgrade to ubuntu 12.10

2012-12-13 Thread Serge Hallyn
Quoting brian mullan (bmullan.m...@gmail.com): *Now the real problem this causes is upon shutdown or restart of my HOST system (ubuntu 12.10) my pc gets stuck in a loop that keeps repeating:* *[1176.213467] unregistered_netdevice: Waiting for lo to become free. Usage Count = 2* Any advice

Re: [Lxc-users] [lxc Version 0.9.0.alpha2] build on Debian Wheezy IA32 problem

2012-12-20 Thread Serge Hallyn
Quoting LACROIX Jean Marc (jeanmarc.lacr...@free.fr): hi, With last commit from Daniel commit 56655134e462ceaf86b51838e4e825c2f3964922 Author: Daniel Lezcano daniel.lezc...@free.fr Date: Fri Dec 14 09:42:55 2012 +0100 Version 0.9.0.alpha2 I am trying to rebuild all lxc

Re: [Lxc-users] Unix domain socket/share_via_fs

2012-12-20 Thread Serge Hallyn
Quoting Sanjay (genacct...@gmail.com): Hi! I came across a patch that allows one to use unix domain socket across network name space (from Daniel back in April 2010). Link? I didn't see the patch in latest Kernels. Is there a better solution ? Thanks Sanjay

Re: [Lxc-users] Exposing arbitrary PCIe devices or bridges to a container

2013-01-04 Thread Serge Hallyn
Quoting William Tu (u9012...@gmail.com): Hi Folks, I'm new to the LXC and recently I'm wondering that is it possible to pass-through an arbitrary PCI device to a container? For example, I have an NTB (Non-transparent Bridge) device and I'd like to pass it to a container. Or is it

Re: [Lxc-users] Is it possible to configure a bridge inside an LXC guest ?

2013-01-07 Thread Serge Hallyn
Quoting John (l...@jelmail.com): Hi everyone, I haven't yet tried this yet but thought I'd ask first because it Why not? :) seems a bit crazy, but... Not at all. Is it possible to configure a container so that it has a bridge in it ? Yup. The container has a full l2 networking stack.

Re: [Lxc-users] lxc-ps lxc-netstat not working

2013-01-07 Thread Serge Hallyn
Quoting Shibashish (shi...@gmail.com): I am on CentOS 6.3 and got lxc working on it. But when I run lxc-ps or lxc-netstat, i get the following errors... lxc-ps: no cgroup mount point found lxc-netstat: no cgroup mount point found Relevant lines in lxc-ps.in... (I tried bot the options)

Re: [Lxc-users] sshd container problem

2013-01-08 Thread Serge Hallyn
Quoting John de la Garza (j...@jjdev.com): I am trying to create a sshd container. Any ideas on how to fix this? This is fixed upstream and in 13.04 (raring), but it looks like the fix is not yet in quantal. I'll file a bug for it, thanks. In the meantime, you can either grab raring, or build

Re: [Lxc-users] libvirt-lxc and fedora

2013-01-14 Thread Serge Hallyn
Quoting Cristian Falcas (cristi.fal...@gmail.com): Hello, Does anybody have any experience with running lxc using libvrt with a fedora host? In the guest (fedora or ubuntu) I try to create a tun node, but I'm getting Operation not permitted: [root@wikitiki vpn_itne]# mkdir /dev/net

Re: [Lxc-users] Ubuntu-cloud memtest86 apt-get upgrade error

2013-01-15 Thread Serge Hallyn
Quoting Florian Motlik (flomot...@gmail.com): Hey guys, just recently started getting /usr/sbin/grub-probe: error: failed to get canonical path of /dev/disk/by-uuid/104a8748-2978-4b87-afb7-e476aff3a957. dpkg: error processing memtest86+ (--configure): subprocess installed

Re: [Lxc-users] Execute untrusted code in a container

2013-01-16 Thread Serge Hallyn
Quoting Ciprian Dorin Craciun (ciprian.crac...@gmail.com): On Tue, Jan 15, 2013 at 11:46 PM, pablo platt pablo.pl...@gmail.com wrote: I want to execute user submitted code in Java, Python and other languages in a container. Something similar to http://ideone.com but much simpler. The code

Re: [Lxc-users] Physical interface not getting released after container shutdown

2013-01-22 Thread Serge Hallyn
Quoting Benoit Lourdelet (blour...@juniper.net): Hello, I am running LXC 0.8.0 on Ubuntu running Kernel 3.7.1. I have assigned physical interfaces to a container: lxc.network.type = phys lxc.network.flags = up lxc.network.link = eth4.2000 lxc.network.name = eth2 lxc.network.hwaddr =

Re: [Lxc-users] Ephemeral containers flaky?

2013-01-22 Thread Serge Hallyn
I'd edit your lxc-start-ephemeral script to run lxc-start with '-l info -o /tmp/ephemeral-debug', and see if anything helpful comes up in that file. Admittedly if the container's init is starting chances are there will be nothing helpful in the logfiles... It seems unlikely that incomplete

Re: [Lxc-users] Udev in containers

2013-01-24 Thread Serge Hallyn
Quoting Lars Kellogg-Stedman (l...@oddbit.com): Perhaps because eth0 exists before systemd and udev start? doing udevadm trigger --action=add would cause the uevent to be resent I thought of that, but running udevadm trigger ... does not appear to make systemd happy. Units that

Re: [Lxc-users] Container failed, can't remove cgroup

2013-01-28 Thread Serge Hallyn
Quoting Lars Kellogg-Stedman (l...@oddbit.com): I'm runing LXC 0.7.5 under Fedora 17 (3.7.3-101.fc17.x86_64). I've been banging my head against LXC for a bit today. My latest problem is that if a container fails to start, I run into this situation: # lxc-start -n node0 lxc-start:

Re: [Lxc-users] sandbox config file

2013-01-28 Thread Serge Hallyn
Quoting pablo platt (pablo.pl...@gmail.com): Hi, Is there an example for a config file needed to create a sandbox? I'm using ubuntu 12.04 (can use any other version if required). I need to execute untrusted code inside a sandbox with lxc-execute. libvirt-sandbox seems to be what I need

Re: [Lxc-users] Container failed, can't remove cgroup

2013-01-29 Thread Serge Hallyn
Quoting Lars Kellogg-Stedman (l...@oddbit.com): No idea about the systemd aspects, but the best way to get those cgroups to be autoremoved is using a release_agent. See Documentation/cgroups/cgroups.txt in the kernel source. Serge, Thanks for the pointer. That does seem like the

Re: [Lxc-users] total RAM limit

2013-02-04 Thread Serge Hallyn
Quoting Gary Ballantyne (gary.ballant...@haulashore.com): On Fri, 1 Feb 2013 10:24:13 -0600 Serge Hallyn serge.hal...@canonical.com wrote: Did you actually test with a memory hog program? I just noticed there appears to be a bug in that if I d=/sys/fs/cgroup/memory

Re: [Lxc-users] /proc/sys/net/bridge missing from containers

2013-02-06 Thread Serge Hallyn
Quoting Ivan Vilata i Balaguer (i...@selidor.net): Hi everyone, I'm using lxc 0.9.0 alpha 2 on a 3.7 kernel under Debian (experimental kernel), and I've noticed that some files and directories under `/proc/sys/net` simply don't appear in my container. Particularly `/proc/sys/net/bridge`

Re: [Lxc-users] procfs and unnamed pipes

2013-02-06 Thread Serge Hallyn
Quoting Timofey.Kirillov (distorh...@gmail.com): Hi, I have a question about using unnamed pipes with procfs. Suppose a chrooted environment with proc mounted as procfs. I am trying to use bash process substitution feature and get this: $ cat (echo hello) cat: /dev/fd/63: No such file

Re: [Lxc-users] lxc-centos on Ubuntu 12.04

2013-02-08 Thread Serge Hallyn
Quoting Kim C. Callis (kim.cal...@gmail.com): Ok, I am good and lost... I thought it would be as simple as adding your script to /usr/share/lxc/templates and then doing: *$ sudo lxc-create -n centosbox -t centos -- - user* * * No config file specified, using the default config

Re: [Lxc-users] lxc-destroy erase rootfs

2013-02-08 Thread Serge Hallyn
Quoting John (l...@jelmail.com): I raised this issue back on 6th/7th December. It was a side-issue in a discussion entitled unable to run systemd in an LXC container. I have always performed a destroy/create cycle to apply changes written to /etc/lxc/mycontainer.conf. I was asked why I didn't

Re: [Lxc-users] lxc-destroy erase rootfs

2013-02-10 Thread Serge Hallyn
12:41 AM, Serge Hallyn wrote: Or just suggest a way to modify containers configuration. Sorry, can you elaborate? You can modify configuration using the API (in C, python, or, iiuc, lua). You can edit the configuration file by hand... If there is more you'd

Re: [Lxc-users] How to create a 32-bit container?

2013-02-11 Thread Serge Hallyn
I don't see any reason why you shouldn't pretty easily be able to implement it. Look at the other templates to see how they do it. Quoting Kim C. Callis (kim.cal...@gmail.com): The problem seems to be in the template for the centos. As it stands it doesn't allow for me to change the build

Re: [Lxc-users] Nested container networking problem

2013-02-11 Thread Serge Hallyn
Quoting Randy Wilson (randyedwil...@gmail.com): Hi, Here's a brief summary of the issue, as this is quite a lengthy post: * Ubuntu 12.04 host with eth0 bridged with br0 and lxcbr0 not used * Ubuntu 12.04 container configured with macvlan, lxc-container-with-nesting AppArmor profile

Re: [Lxc-users] Unix domain socket/share_via_fs

2013-02-12 Thread Serge Hallyn
Quoting sanjay (genacct...@gmail.com): Closing thread: Alternate patch from http://lists.linux-foundation.org/pipermail/containers/2010-June/024725.html is already upstreamed to make UDS work across namespaces. Thanks, To be clear, only sharing of file backed unix domain sockets is allowed

Re: [Lxc-users] lxc configuration bug (was: Re: lxc-destroy erase rootfs)

2013-02-19 Thread Serge Hallyn
Quoting Papp Tamas (tom...@martos.bme.hu): On 02/11/2013 04:11 AM, Serge Hallyn wrote: Agreed, please do get us precise reproduction steps so we can look into it and fix it. I'm sorry about the delay. I tested is again and I'm quite surprised, that you're right. If it's

Re: [Lxc-users] Refreshing for 2013: LXC hiding container processes from Host/HN's 'ps'

2013-02-20 Thread Serge Hallyn
No. However, you should be able to hack it up pretty easily in userspace by comparing /proc/$$/ns/pid. It requires privilege, but a very simple, easy-to-verify helper which simply takes one argument and returns 0 if /proc/$1/ns/pid is the same as /proc/self/ns/pid should be trustable with

<    1   2   3   4   5   >