Re: [Lxc-users] Bind mounting a file to the container

2013-02-20 Thread Serge Hallyn
Quoting Csordás Csaba Ifj. (cscsor...@gmail.com): Hi, there is a suggestion at http://lxc.sourceforge.net/man/lxc.html: make accessible from the container the resolv.conf file belonging to the host. /etc/resolv.conf /home/root/debian/rootfs/etc/resolv.conf none bind 0 0 When using

Re: [Lxc-users] lxc configuration bug

2013-02-22 Thread Serge Hallyn
Quoting Papp Tamas (tom...@martos.bme.hu): On 02/20/2013 12:06 AM, Papp Tamas wrote: On 02/19/2013 11:53 PM, Serge Hallyn wrote: At this point, there will be a /var/lib/lxc/ltest/config which will list lxc.rootfs = /var/lib/lxc/ltest/rootfs. So these steps are not quite what you want

Re: [Lxc-users] Refreshing for 2013: LXC hiding container processes from Host/HN's 'ps'

2013-02-22 Thread Serge Hallyn
Quoting Guido Jäkel (g.jae...@dnb.de): Dear Ian, to support your request in a convenience way, i recently drop in a small patch for the lxc-ps helper command. Using the LXC-aware frontend for ps, you're able to filter the ps output down to a (set of) named container or all of them.

Re: [Lxc-users] lxc configuration bug

2013-02-22 Thread Serge Hallyn
Quoting Papp Tamas (tom...@martos.bme.hu): On 02/22/2013 03:22 PM, Serge Hallyn wrote: About what? What I described above should work. Yes, that's correct. It doesn't (at least for me) that's why it is a bug, I guess;) Note also that the staging branch now supports '-P|--lxcpath

Re: [Lxc-users] lxc configuration bug

2013-02-22 Thread Serge Hallyn
Oh, my recipe wasn't quite right - when you sudo sed -i 's@/var/lib/lxc@/data/lxc@' /var/lib/lxc/r2/config that also changes the path to r2's fstab. So either you have to tweak the sed command, or sudo mv /var/lib/lxc/r2/fstab /data/lxc/r2/ With that, it works for me. -serge

Re: [Lxc-users] lxcpath

2013-02-25 Thread Serge Hallyn
Quoting Papp Tamas (tom...@martos.bme.hu): hi Serge and Others, lxc version: 0.9.0.alpha3 lxcpath=/data/lxc tank/lxc/ltest on /tank/lxc/ltest type zfs (rw,noatime) # sh -x /usr/bin/lxc-create -n ltest -t ubuntu + . /usr/share/lxc/lxc.functions + globalconf=/etc/lxc/lxc.conf +

Re: [Lxc-users] [lxc-devel] remote to lxc terminal

2013-02-25 Thread Serge Hallyn
Quoting pegah (pegah...@yahoo.com): Dear friends I need to be able to run commands within lxc remotely via python programming ,do you have any idea on how to access the lxc terminal remotely  from other or base linux os which i installed lxc You could use lxc-attach if you are on a new

Re: [Lxc-users] tail -f (inotify) not working in container?

2013-02-27 Thread Serge Hallyn
Quoting Papp Tamas (tom...@martos.bme.hu): On 02/26/2013 07:36 PM, Dan Kegel wrote: Oddly, tail -f doesn't seem to be working properly inside my container. It displays ten lines, and then sits forever. ^C and running it again shows a more up to date ten lines, but then sits forever.

Re: [Lxc-users] Ubuntu 12.04 LTSEnablementStack: missing user namespace

2013-03-01 Thread Serge Hallyn
Quoting Christoph Mitasch (cmita...@thomas-krenn.com): Hello, I'm running a Ubuntu 12.04 system with LXC system containers. Ubuntu 12.04.2 offers a 3.5 kernel through the LTSEnablementStack. https://wiki.ubuntu.com/Kernel/LTSEnablementStack This 3.5 kernel does apparently NOT support

Re: [Lxc-users] lxcpath

2013-03-04 Thread Serge Hallyn
Quoting Stéphane Graber (stgra...@ubuntu.com): On 03/02/2013 06:45 PM, Papp Tamas wrote: On 02/25/2013 02:56 PM, Serge Hallyn wrote: Quoting Papp Tamas (tom...@martos.bme.hu): hi Serge and Others, lxc version: 0.9.0.alpha3 lxcpath=/data/lxc tank/lxc/ltest on /tank/lxc/ltest

Re: [Lxc-users] zfs support

2013-03-04 Thread Serge Hallyn
Quoting Papp Tamas (tom...@martos.bme.hu): On 03/04/2013 04:45 PM, Serge Hallyn wrote: Quoting Papp Tamas (tom...@martos.bme.hu): hi All, I'm about adding zfs support to lxc-create like lvm and btrfs has. elif [ $backingstore = btrfs ]; then mkdir $lxc_path/$lxc_name

Re: [Lxc-users] lxc-destroy fs

2013-03-07 Thread Serge Hallyn
Quoting Papp Tamas (tom...@martos.bme.hu): hi All, At the end of this script it wants to remove the fs in some cases. But something is wrong about it, as if it's other they are ignored. Sorry I don't understand - what is being ignored in which cases? # Deduce the type of rootfs # If LVM

Re: [Lxc-users] lxc-destroy fs

2013-03-07 Thread Serge Hallyn
Quoting Papp Tamas (tom...@martos.bme.hu): On 03/07/2013 04:54 PM, Serge Hallyn wrote: Quoting Papp Tamas (tom...@martos.bme.hu): hi All, At the end of this script it wants to remove the fs in some cases. But something is wrong about it, as if it's other they are ignored. Sorry I

Re: [Lxc-users] Containers slow to start after 1600

2013-03-11 Thread Serge Hallyn
Quoting Benoit Lourdelet (blour...@juniper.net): Hello, I am running LXC 0.8.0 kernel 3.7.9 and try to start more than 1000 small containers : around 10MB of RAM per containers. Starting around the first 1600 happens smoothy - I have a 32 virtual core machine - but then everything gets

Re: [Lxc-users] Containers slow to start after 1600

2013-03-12 Thread Serge Hallyn
Quoting Benoit Lourdelet (blour...@juniper.net): Hello Serge, I am running on a 256MB RAM host, with plenty of free memory. G? :) I issue echo t /proc/sysrq-trigger when containers was taking 30s to start , it gave the following. Nothing that caught my attention. Hm. Thanks. I

Re: [Lxc-users] Confusing behaviour using LXC container with systemd

2013-03-12 Thread Serge Hallyn
Quoting John (l...@jelmail.com): Hello, I've been trying to convert some containers to systemd. I have implemented a systemd container using lxc.autodev with lxc.hook.autodev to create additional devices and I can now start containers that run systemd internally. I am, however, experiencing

Re: [Lxc-users] Confusing behaviour using LXC container with systemd

2013-03-12 Thread Serge Hallyn
Quoting John (l...@jelmail.com): On 12/03/13 22:25, Serge Hallyn wrote: Quoting John (l...@jelmail.com): ... [root@boron ~]# mount none on /dev type tmpfs (rw,relatime,size=100k) devpts on /dev/console type devpts (rw,relatime,gid=5,mode=620,ptmxmode=000) devpts on /dev/tty1 type devpts (rw

Re: [Lxc-users] Confusing behaviour using LXC container with systemd

2013-03-13 Thread Serge Hallyn
Quoting John (l...@jelmail.com): On 12/03/13 23:21, Serge Hallyn wrote: Quoting John (l...@jelmail.com): On 12/03/13 22:25, Serge Hallyn wrote: Quoting John (l...@jelmail.com): ... [root@boron ~]# mount none on /dev type tmpfs (rw,relatime,size=100k) devpts on /dev/console type devpts (rw

Re: [Lxc-users] LXC support on Vagrant

2013-03-13 Thread Serge Hallyn
Quoting Dan Kegel (d...@kegel.com): Yeah, I saw that post. Was hoping for a bit more. But ok, Vagrant is a Ruby thingy vaguely like libvirt. Another peanut gallery question: There seem to be a number of userspace packages that drive the kernel's LXC features: - lxc itself - lxc python

Re: [Lxc-users] kernel bug?

2013-03-13 Thread Serge Hallyn
Quoting Gary Ballantyne (gary.ballant...@haulashore.com): Hi All I have an intermittent, but crippling, problem on a raring EC2 instance (also on quantal). Its a (raring) lvm-backed container --- I use cgroups directly (via /sys/fs) and iptables in the instance (not sure if that's

Re: [Lxc-users] kernel bug?

2013-03-14 Thread Serge Hallyn
Quoting Gary Ballantyne (gary.ballant...@haulashore.com): On 14/03/13 16:31, Serge Hallyn wrote: Looks to me like the problem is a conflict between memory cgroup and xen: Thanks Serge. This is the distro: http://cloud-images.ubuntu.com/releases/raring/alpha-2/ (ami-c842608d). And a stable

Re: [Lxc-users] LXC icon for Ubuntu's Juju

2013-03-15 Thread Serge Hallyn
Quoting Gary Poster (gary.pos...@canonical.com): Hi. We use LXC as our local virtualization environment in Juju (https://juju.ubuntu.com/). Our remote virtualization options include EC2, OpenStack, HP Cloud Services, and so on. Canonical's designers (one of whom is cc'd on this mail,

Re: [Lxc-users] Introducing dive project

2013-03-15 Thread Serge Hallyn
Quoting vi0oss (vi0...@gmail.com): When playing with unshare and LXC, I found that it is easy to start one program in a detached namespace, but starting more programs in the same namespace is not that easy. As far as I know, usually heavyweight See the util-linux git tree - I think nsenter

Re: [Lxc-users] Containers slow to start after 1600

2013-03-18 Thread Serge Hallyn
Quoting Benoit Lourdelet (blour...@juniper.net): Hello, Inline after BL Quoting Benoit Lourdelet (blour...@juniper.net): Hello Serge, I am running on a 256MB RAM host, with plenty of free memory. G? :) I issue echo t /proc/sysrq-trigger when containers was taking 30s to

Re: [Lxc-users] Containers slow to start after 1600

2013-03-19 Thread Serge Hallyn
Quoting Benoit Lourdelet (blour...@juniper.net): Hello Serge, I put together a small table, running your script for various values : Time are in seconds, Number of veth, time to create, time to delete: 500 18 26 1000 57 70 2000 193 250 3000 435 510 4000 752 824 5000

Re: [Lxc-users] Containers slow to start after 1600

2013-03-19 Thread Serge Hallyn
`; do nsexec -n -- /bin/sleep 1000 if [ $((i % 100)) -eq 0 ]; then echo $i | tee -a /tmp/timings3 date | tee -a /tmp/timings3 fi done (all scripts run under sudo, and nsexec can be found at https://code.launchpad.net/~serge-hallyn/+junk/nsexec)) So that isn't

Re: [Lxc-users] Fun kernel problem: garbled /var/log/kern.log, can't create hard link to particular file in /usr/bin

2013-03-20 Thread Serge Hallyn
Quoting Dan Kegel (d...@kegel.com): There I was, minding my own business, running stock lxc on ubuntu 12.04, when suddenly I couldn't install a perl update inside the container. Turned out to be it couldn't create a hard link to /usr/bin/s2p (though it could to /usr/bin/yes):

Re: [Lxc-users] Fun kernel problem: garbled /var/log/kern.log, can't create hard link to particular file in /usr/bin

2013-03-20 Thread Serge Hallyn
Quoting Dan Kegel (d...@kegel.com): On Wed, Mar 20, 2013 at 5:58 AM, Serge Hallyn serge.hal...@ubuntu.com wrote: this is an ephemeral container right? Yeah we've had issues with overlayfs - which may or may not be exacerbated by apparmor - in precise for a long time. They seem to go away

Re: [Lxc-users] Networking fails sporadically in containers on ubuntu server 12.10

2013-04-01 Thread Serge Hallyn
Quoting David Parks (davidpark...@yahoo.com): davidparks21@hostOS:~$ arp -a ? (10.1.0.4) at c6:63:bb:a7:d8:60 [ether] on br0 ? (10.1.0.2) at 52:54:00:12:35:02 [ether] on br0 ? (10.1.0.45) at 32:8c:fc:c1:7f:e5 [ether] on br0 Can you set the macaddr on your virtualbox nic to something

Re: [Lxc-users] Create container as clone of host

2013-04-02 Thread Serge Hallyn
Quoting Fajar A. Nugraha (l...@fajar.net): On Tue, Apr 2, 2013 at 10:48 AM, Cody Doucette douce...@bu.edu wrote: Hi all, I'm a student and pretty new to LXC. I'm having a little bit of difficulty and hoping someone could point me in the right direction. A project that I'm working

Re: [Lxc-users] zfs support

2013-04-03 Thread Serge Hallyn
Quoting Papp Tamas (tom...@martos.bme.hu): On 03/05/2013 02:46 PM, Serge Hallyn wrote: Quoting Scott Moser (smo...@ubuntu.com): On Tue, 5 Mar 2013, Papp Tamas wrote: On 03/05/2013 05:27 AM, Scott Moser wrote: I wrote the btrfs clone stuff, I just cloned the rootfs directory

Re: [Lxc-users] zfs support

2013-04-03 Thread Serge Hallyn
Quoting Papp Tamas (tom...@martos.bme.hu): On 04/03/2013 11:18 PM, Serge Hallyn wrote: I'm working right now on clone in the c api. The basics were simple enough, now to tackle the blockdev copy/snapshotting... Is zfs on the support list?:) Or just existing backingtores, like btrfs, lvm

Re: [Lxc-users] zfs support

2013-04-04 Thread Serge Hallyn
Quoting Papp Tamas (tom...@martos.bme.hu): On 04/04/2013 03:54 PM, Serge Hallyn wrote: If you want to go ahead and send a full patch against the current lxc-clone.in script, that should help me reproduce what you want in the api version. I have limited scripting skills, but I do my best

Re: [Lxc-users] [lxc-devel] LXC- ARM6 RaspberryPI Fedora core 14

2013-04-05 Thread Serge Hallyn
Quoting Bas Pape (basp...@gmail.com): Just a follow up question, I had a chat today with an ArchArm user in the IRC chat channel, and he said that it is impossible to run a x86 container on Lxc with an ARM host . Is this true ? Yes, it is. Linux containers (the concept, not just this

Re: [Lxc-users] eth0 not coming online in LXC environment

2013-04-05 Thread Serge Hallyn
Quoting David Parks (davidpark...@yahoo.com): The bridging all works, networking is fine, it's just when I start the container, rebooting reproduces the problem, then manually updating ifstate and rebooting resolves it. I'm not sure how to configure it so it configure eth0 on reboot as

Re: [Lxc-users] sudo add-apt-repository command in container

2013-04-05 Thread Serge Hallyn
Quoting brian mullan (bmullan.m...@gmail.com): Recently I had the need to use the add-apt-repository command in some containers. But when executing it: *sudo add-apt-repository ppa:some ppa/stable* * * *it fails* *sudo: add-apt-repository: command not found* so I made sure

Re: [Lxc-users] Fwd: LXC WebPanel

2013-04-05 Thread Serge Hallyn
Quoting Lee Hambley (lee.hamb...@gmail.com): Thanks for sharing, that looks cool - I wouldn't typically have looked for Python based solutions given my background in Ruby, but it's a neat, one-liner installation. If only it started itself in a container, somehow :-) I hope some tooling

Re: [Lxc-users] cgroup question

2013-04-10 Thread Serge Hallyn
Quoting Kevin Wilson (wkev...@gmail.com): Hello, lxc-users gurus, cgroup question: Is it permitted to run this cgroup sequence: mount -t tmpfs cgroup_root /cgroup1 mount -t tmpfs cgroup_root /cgroup2 And then try to create and mount subsystems to /cgroup1 and /cgroup2? or is

Re: [Lxc-users] eth0 not coming online in LXC environment

2013-04-10 Thread Serge Hallyn
Please send exact commands you used to create the contaienr, including the configuration file send to 'lxc-create -f file'. Quoting David Parks (davidpark...@yahoo.com): I just ran some more tests. We've got 3 servers with LXC on them, and all 3 servers encounter this same problem, when you

Re: [Lxc-users] Need simple configuration for embedded ARM LXC

2013-04-12 Thread Serge Hallyn
Quoting Somnath Mitra (somnath.mi...@xockets.com): Greetings, I have built lxc 0.9.0 running on Linux 3.6.0 on Xilinx ARM Cortex A9 dual core embedded board. For general utilities it has busybox/dropbear. I wish to run applications in containers. I used this configuration: /tmp # cat

Re: [Lxc-users] Very odd lxc behavior

2013-04-12 Thread Serge Hallyn
Quoting David Parks (davidpark...@yahoo.com): Today I saw this. I had started half the containers when I noticed the problem (not all of them as the output below suggests). I stopped them all (which generated some errors, seen at the end). After stopping them all everything went back to

Re: [Lxc-users] cgroup question

2013-04-12 Thread Serge Hallyn
Quoting Kevin Wilson (wkev...@gmail.com): Hello, Thanks a lot for your answer. I reproduced the problem: this is what I run: (after boot, in Ubuntu 12.10) mount -t tmpfscgroup_root/cgroup mkdir /cgroup/test1 mount -t cgroup -o cpuset,devices mytest/cgroup/test1 And I

Re: [Lxc-users] unmounting cgroup partition

2013-04-13 Thread Serge Hallyn
Quoting David Shwatrz (dshwa...@gmail.com): Hello, When I perform the next sequence it finishes ok: mkdir /cgroup/freezer mount -t cgroup -o freezer testf /cgroup/freezer/ umount /cgroup/freezer I had also added printk in the cgroup unmount handler , cgroup_kill_sb(), immediately in

Re: [Lxc-users] Need simple configuration for embedded ARM LXC

2013-04-21 Thread Serge Hallyn
Quoting Daniel Lezcano (daniel.lezc...@free.fr): On 04/20/2013 03:23 AM, Somnath Mitra wrote: Is there a workaround/resolution to this? I had filed a bug http://sourceforge.net/tracker/?func=detailaid=3610837group_id=163076atid=826303 Do you mind to test with a 0.8.0 ? Meanwhile

Re: [Lxc-users] Packet forwarding performance drop with 1000 containers

2013-04-22 Thread Serge Hallyn
Quoting Benoit Lourdelet (blour...@juniper.net): Hello, I am testing forwarding performance of 1000 containers running at the same time. I am running Linux 3.8.5 and lxc 0.8.0. Each container is a simple router : 2 IPv4 interfaces, The routing table is very small : 3/4 routes to

Re: [Lxc-users] LXC start doesn't work

2013-04-22 Thread Serge Hallyn
Quoting Mukanyiligira Didacienne (siyana...@gmail.com): Hello I have tried to create containres and this is the message I am getting when I type in the terminal the following command: $ sudo lxc-start -n left /bin/bash lxc-start: Device or resource busy - failed to remove previous cgroup

Re: [Lxc-users] Problem with core dumps generated from containers, apport

2013-04-22 Thread Serge Hallyn
My guess would be similar to this but slightly different. I'd guess that apport on the host sees the SEGV in kernel log. That will have the correct pid for the kernel to look up the task, however it will crosscheck /proc/$$/maps and such against userspace on the host, which will cause debug info

Re: [Lxc-users] The liblxc is not thread-safe, correct?

2013-04-23 Thread Serge Hallyn
Quoting Vallevand, Mark K (mark.vallev...@unisys.com): I'm using Ubuntu 12.04 LTS with its associated LXC 0.7.5. As far as I can tell, liblxc is not thread-safe. Is this correct? Correct. The API in 1.0 will be thread-safe.

Re: [Lxc-users] total RAM limit

2013-04-23 Thread Serge Hallyn
Quoting Frederic Crozat (fcro...@suse.com): Le lundi 04 février 2013 à 08:38 -0600, Serge Hallyn a écrit : Quoting Gary Ballantyne (gary.ballant...@haulashore.com): On Fri, 1 Feb 2013 10:24:13 -0600 Serge Hallyn serge.hal...@canonical.com wrote: Did you actually test

Re: [Lxc-users] Cleaning up veth when not destroying the usual way

2013-04-24 Thread Serge Hallyn
Quoting Robin Monjo (appldiget) (robin.mo...@applidget.com): Hello, I create my containers a particular way: - mount an existing container into the /containers/ folder - manually change the config for the new container - start the new container by specifying the path (-f option) Then, to

Re: [Lxc-users] total RAM limit

2013-04-24 Thread Serge Hallyn
Quoting Frederic Crozat (fcro...@suse.com): Le mardi 23 avril 2013 à 10:09 -0500, Serge Hallyn a écrit : Quoting Frederic Crozat (fcro...@suse.com): Thanks - clearly my patch needed some love :) Just a few comments below. hehe :) + + /* check if directory exists, and create

Re: [Lxc-users] total RAM limit

2013-04-24 Thread Serge Hallyn
Quoting Frederic Crozat (fcro...@suse.com): Le mercredi 24 avril 2013 à 08:55 -0500, Serge Hallyn a écrit : Quoting Frederic Crozat (fcro...@suse.com): Le mardi 23 avril 2013 à 10:09 -0500, Serge Hallyn a écrit : Quoting Frederic Crozat (fcro...@suse.com): Thanks - clearly my

Re: [Lxc-users] Cleaning up veth when not destroying the usual way

2013-04-24 Thread Serge Hallyn
Quoting Robin Monjo (appldiget) (robin.mo...@applidget.com): On Apr 24, 2013, at 3:53 PM, Serge Hallyn serge.hal...@ubuntu.com wrote: It would be far preferable to bind-mount /containers onto /var/lib/lxc and set the containers up there. If you're willing to do that and test

Re: [Lxc-users] Problem with core dumps generated from containers, apport

2013-04-25 Thread Serge Hallyn
Quoting Stéphane Graber (stgra...@ubuntu.com): On 04/25/2013 02:18 PM, Hans Feldt wrote: Thanks great! But what I don't (yet) understand is shouldn't the new %P behaviour be the default of %p instead? I mean a container PID never makes sense in host user space since there is a 1:n

Re: [Lxc-users] Packet forwarding performance drop with 1000 containers

2013-04-29 Thread Serge Hallyn
Quoting Benoit Lourdelet (blour...@juniper.net): Hello, Working with 1000 containers I had already modified gc_thresh* to fit my needs. By mistake I had set gc_interval to a too high value (past 2^32) , forcing linux to set gc_interval to the default value (30) with is not suitable in my

Re: [Lxc-users] Disable write access to /dev/rtc in templates

2013-04-30 Thread Serge Hallyn
Quoting Christoph Mitasch (cmita...@thomas-krenn.com): Hello, we recently discovered that a container was able to modify the hardware clock of a server. When checking the lxc configuration I found out that rwm access to /dev/rtc was granted. Unfortunately most lxc templates allow

Re: [Lxc-users] lxc-execute and isolation approaches

2013-05-06 Thread Serge Hallyn
Quoting Vladimir (m...@foomx.de): Hi everybody, I'm trying to get application containers running. Everything works so far, but there are still some aspects which are not clear to me. To explain what I'm trying to do here a little example: root@server:~ # lsb_release -d Description:

Re: [Lxc-users] lxc-execute and isolation approaches

2013-05-06 Thread Serge Hallyn
Quoting Vladimir (m...@foomx.de): On Sun, 5 May 2013 18:26:01 +0100 Ben Butler-Cole b...@bridesmere.com wrote: Hello Vladimir The files that the process can access should be it's own copy of a complete Linux filesystem, rather than the filesystem of the host. From the host you

Re: [Lxc-users] Can't connect to an LXC container after restart

2013-05-06 Thread Serge Hallyn
Quoting David Parks (davidpark...@yahoo.com): I was playing with a container today, we took the following actions: . Change from static to DHCP IP Exactly how? What is the guest distro+release? . Shut down container, add an fstab entry to LXCs fstab file What entry did you

Re: [Lxc-users] regarding lxc states available to lxc-monitor or lxc-wait usage

2013-05-08 Thread Serge Hallyn
Quoting brian mullan (bmullan.m...@gmail.com): I've been trying to find what all the container states are that lxc-monitor and lxc-wait can utilize? man pages don't indicate them I know that the following are available: - starting - running - stopping - stopped -

Re: [Lxc-users] regarding lxc states available to lxc-monitor or lxc-wait usage

2013-05-09 Thread Serge Hallyn
Quoting Vallevand, Mark K (mark.vallev...@unisys.com): I don't think signals to the container init process is the answer. You can run a single program in a container. When that program reaches a certain state, it could report that it is operational. I don't know what the correct way to

Re: [Lxc-users] regarding lxc states available to lxc-monitor or lxc-wait usage

2013-05-10 Thread Serge Hallyn
Quoting Vallevand, Mark K (mark.vallev...@unisys.com): Actually, I've had good success using Unix domain named sockets for communications between programs in containers and host. Perhaps they are in a shared name space. But, don't change it. :-) It works. Right. Abstract unix domain

Re: [Lxc-users] regarding lxc states available to lxc-monitor or lxc-wait usage

2013-05-13 Thread Serge Hallyn
Quoting Vallevand, Mark K (mark.vallev...@unisys.com): I'm not doing anything special with the container or the socket file. The container is based on the Ubuntu template and I'm running a single program in the container. The program will create its socket file according to its command

Re: [Lxc-users] Dynamically binding physical nic to container

2013-05-20 Thread Serge Hallyn
Quoting Ajith Adapa (ajith.ad...@gmail.com): Hi, Is it possible bind a physical NIC to a running container without stopping it ? Currently based on the configuration in config file interfaces are created inside a container Technically no they are created on the host and passed into the

Re: [Lxc-users] start fails with user namespaces /dev/pts/5

2013-05-22 Thread Serge Hallyn
It should just work with a 3.9.2 kernel. I'm using http://kernel.ubuntu.com/git?p=serge/quantal-userns.git;a=shortlog;h=refs/heads/saucy.20130502.userns1 which as you can see doesn't add features. Did you create the container with just 'sudo lxc-create -t ubuntu -n r1'? Is lxc.ttydir set to

Re: [Lxc-users] start fails with user namespaces /dev/pts/5

2013-05-23 Thread Serge Hallyn
Quoting Niklas Fuchs (nkfu...@yahoo.de): On Wed, May 22, 2013 at 03:36:41PM -0500, Serge Hallyn wrote: Did you create the container with just 'sudo lxc-create -t ubuntu -n r1'? Is lxc.ttydir set to lxc in the configuration file? sorry, i gave you wrong information. it was a debian template

Re: [Lxc-users] errors

2013-05-23 Thread Serge Hallyn
Quoting Tamas Papp (tom...@martos.bme.hu): On 05/23/2013 03:39 PM, Tamas Papp wrote: On 05/23/2013 03:35 PM, Stéphane Graber wrote: That looks like broken locking, though Serge would know for sure. You may want to try clearing /dev/shm/*lxc* and see if that fixes the problem (not usually

Re: [Lxc-users] errors

2013-05-23 Thread Serge Hallyn
Quoting Tamas Papp (tom...@martos.bme.hu): On 05/23/2013 07:34 PM, Serge Hallyn wrote: Quoting Tamas Papp (tom...@martos.bme.hu): On 05/23/2013 03:39 PM, Tamas Papp wrote: On 05/23/2013 03:35 PM, Stéphane Graber wrote: That looks like broken locking, though Serge would know for sure

Re: [Lxc-users] Use host syslog socket in container

2013-05-23 Thread Serge Hallyn
Quoting Vallevand, Mark K (mark.vallev...@unisys.com): Here is how I got syslog to work with a program running in a container. After creating a container, do something like this: echo syslog setup cat EOF /etc/rsyslog.d/99-lxc-1.conf \$AddUnixListenSocket

Re: [Lxc-users] Use host syslog socket in container

2013-05-23 Thread Serge Hallyn
Quoting Vallevand, Mark K (mark.vallev...@unisys.com): Will that work for a single file? I thought it was for directories. Yup, you can bind mount files. -- Try New Relic Now We'll Send You this Cool Shirt New Relic

Re: [Lxc-users] Use host syslog socket in container

2013-05-23 Thread Serge Hallyn
Quoting Vallevand, Mark K (mark.vallev...@unisys.com): Very good point. The syslog server always recreates the sockets when it starts. I think I'll stay with what I have working. Yeah that sounds best :) -- Try

Re: [Lxc-users] errors

2013-05-23 Thread Serge Hallyn
Quoting Tamas Papp (tom...@martos.bme.hu): On 05/23/2013 09:47 PM, Serge Hallyn wrote: The lxc lock had nothing to do with the segfaulting - and no, the new hanges will simply swap out use of named semaphore for a flock on an open fd (so that they get auto-cleaned if process is killed). Any

Re: [Lxc-users] Running Stand alone application through Application LXC

2013-05-24 Thread Serge Hallyn
Quoting Datta, Souvik (souvik.da...@harman.com): Hello, I am new to LXC and just started reading and experimenting on the same. I have understood the system level LXC but bit confused about the application level LXC. For example : I have a linux guest OS which allows users to download

Re: [Lxc-users] can't start a container with kernel 3.8.2

2013-05-28 Thread Serge Hallyn
Quoting ZHANG, Benlong (zhan...@act.buaa.edu.cn): Hi all, LXC works well with a 2.6.32-amd-64 kernel,however it can not be started in 3.8.2. lxc-checkconfig shows there are several configurations not satisfied, but these options in fact can not be found in 3.8.2 when make menuconfig.

Re: [Lxc-users] lxc-execute: failed to move 'eth2' to the container : Invalid argument

2013-05-28 Thread Serge Hallyn
Looking at git history, I think you need a kernel newer than 2.6.34 to be able to move phsyical devices. The reason is that tagged directories in sysfs were not introduced until then. -serge Quoting lhffjzh (lhff...@126.com): Hi Friends, I am investigate lxc now, and I hope to configure a

Re: [Lxc-users] btrfs snapshots in container?

2013-05-29 Thread Serge Hallyn
Quoting Ulli Horlacher (frams...@rus.uni-stuttgart.de): Is it possible to create btrfs snapshots inside a container? Or should one avoid at all the combination of btrfs and lxc? You should make sure btrfs is stable on your kernel, but btrfs works will with lxc. So long as /var/lib/lxc is a

Re: [Lxc-users] clarifications on user ns

2013-05-30 Thread Serge Hallyn
Quoting Niklas Fuchs (nkfu...@yahoo.de): hi, i played around with my debian image and user namespaces and have some questions: cgroup limits: they dont seem to apply to a container with user ns right? i set They should. lxc.cgroup.memory.limit_in_bytes = 2M but nothing gets killed, the

Re: [Lxc-users] Routing issues

2013-06-03 Thread Serge Hallyn
Quoting Rory Campbell-Lange (r...@campbell-lange.net): On 04/06/13, Papp Tamas (tom...@martos.bme.hu) wrote: What is the IP address of the container? The host is on aa.bb.cc.103 (a public net address) and the container is on aa.bb.cc.87. I can get from 87 to 103, but I can't ping the

Re: [Lxc-users] Routing issues

2013-06-04 Thread Serge Hallyn
Quoting Rory Campbell-Lange (r...@campbell-lange.net): On 04/06/13, Rory Campbell-Lange (r...@campbell-lange.net) wrote: On 03/06/13, Serge Hallyn (serge.hal...@ubuntu.com) wrote: Quoting Rory Campbell-Lange (r...@campbell-lange.net): On 04/06/13, Papp Tamas (tom...@martos.bme.hu) wrote

Re: [Lxc-users] ubuntu-lxc/daily, lxc-create lxcpath on nfs, Error locking partial file

2013-06-04 Thread Serge Hallyn
Quoting zoolook (nbensa+lxcus...@gmail.com): Hello, I'm testing a little cluster of lxc hosts where /var/lib/lxc (actually /srv/lxc) is on nfs (rootfs are on lvm over iscsi). Using ppa:ubuntu-lxc/daily, lxc-create fails with: sysadmin@lxc0:~$ sudo lxc-create -n test1 -P /srv/lxc -B lvm

Re: [Lxc-users] ubuntu-lxc/daily, lxc-create lxcpath on nfs, Error locking partial file

2013-06-04 Thread Serge Hallyn
Quoting zoolook (nbensa+lxcus...@gmail.com): Hello Serge, On Tue, Jun 4, 2013 at 1:08 PM, Serge Hallyn serge.hal...@ubuntu.com wrote: Quoting zoolook (nbensa+lxcus...@gmail.com): sysadmin@lxc0:~$ sudo lxc-create -n test1 -P /srv/lxc -B lvm --vgname vg_vmstorage --lvname lxc-test1-root

Re: [Lxc-users] lxc containers as backup 'replicas'

2013-06-05 Thread Serge Hallyn
Quoting Rory Campbell-Lange (r...@campbell-lange.net): Following the pretty successful tests** I've been making of using lxc containers I'd be grateful for some advice on using lxc containers as backp 'replicas' of running machines, to bring up in case the main host fails. **(I've been on

Re: [Lxc-users] lxcbr0 MAC addr issue

2013-06-05 Thread Serge Hallyn
Now my question, could not lxc (at boot) setup a fixed MAC addr for the host port? Yeah, given how bad this was for libvirt/qemu I'm surprised I've not seen this happen in lxc - but I haven't, and noone else has reported it. Since you mention lxcbr0, I assume you're using ubuntu? Until we

Re: [Lxc-users] lxcbr0 MAC addr issue

2013-06-05 Thread Serge Hallyn
Quoting Michael H. Warfield (m...@wittsend.com): On Wed, 2013-06-05 at 07:40 -0500, Serge Hallyn wrote: Now my question, could not lxc (at boot) setup a fixed MAC addr for the host port? Yeah, given how bad this was for libvirt/qemu I'm surprised I've not seen this happen in lxc

Re: [Lxc-users] lxcbr0 MAC addr issue

2013-06-05 Thread Serge Hallyn
Quoting Michael H. Warfield (m...@wittsend.com): Crap... Bumped the keyboard and this one got away from me prematurely. On Wed, 2013-06-05 at 11:23 -0400, Michael H. Warfield wrote: On Wed, 2013-06-05 at 15:17 +, Jäkel, Guido wrote: yes and it does this. The point is that lxcbr0

[Lxc-users] [PATCH] lxclock and lxccontainer: switch from flock to fcntl

2013-06-05 Thread Serge Hallyn
flock is not supported on nfs. fcntl is at least supported on newer (v3 and above) nfs. Signed-off-by: Serge Hallyn serge.hal...@ubuntu.com --- src/lxc/lxccontainer.c | 22 +- src/lxc/lxclock.c | 16 ++-- 2 files changed, 31 insertions(+), 7 deletions

Re: [Lxc-users] lxcbr0 MAC addr issue

2013-06-05 Thread Serge Hallyn
Quoting Michael H. Warfield (m...@wittsend.com): On Wed, 2013-06-05 at 11:26 -0500, Serge Hallyn wrote: Quoting Michael H. Warfield (m...@wittsend.com): Crap... Bumped the keyboard and this one got away from me prematurely. On Wed, 2013-06-05 at 11:23 -0400, Michael H. Warfield

Re: [Lxc-users] Routing issues

2013-06-05 Thread Serge Hallyn
Quoting Rory Campbell-Lange (r...@campbell-lange.net): On 04/06/13, Michael H. Warfield (m...@wittsend.com) wrote: I'd be grateful to know if anyone has some firewall (iptables) advice for allowing traffic to the container? I expect to run another firewall on the container itself.

Re: [Lxc-users] lxc scalability problem

2013-06-06 Thread Serge Hallyn
Quoting yaozhicheng (yaozhich...@emails.bjut.edu.cn): Hi all My OS get crashed when I start more then 20 containers. Seems like an selinux labeling related problem. If you boot without selinux enabled do you still have this problem? (I'm not suggesting that as a workaround - only to verify

Re: [Lxc-users] Sharing container rootfs

2013-06-09 Thread Serge Hallyn
Quoting Purcareata Bogdan-B43198 (b43...@freescale.com): Hello, I have a question regarding containers and their supporting rootfs. Is there an option for lxc-create that will use a default path (or other backing store) as rootfs? I understand that by specifying -B ... it will try to

Re: [Lxc-users] lxcbr0 MAC addr issue

2013-06-10 Thread Serge Hallyn
Quoting Hans Feldt (hans.fe...@ericsson.com): open a bug at https://bugs.launchpad.net/ubuntu/+source/lxc/+filebug as it should be trivially fixable in /etc/init/lxc-net.conf. OK will do. Cool, thanks, I'll track it there.

Re: [Lxc-users] lxc-create -B zfs

2013-06-10 Thread Serge Hallyn
Quoting Tamas Papp (tom...@martos.bme.hu): hi, # lxc-create -n pony -t ubuntu -B zfs --zfsroot=tank/lxc Hm. Mine is simply called 'lxc', and that works. So it sounds like I'm doing something wrong in parsing the zfsroot, but I can't offhand see in the code where. Could you run this through

Re: [Lxc-users] Sharing container rootfs

2013-06-10 Thread Serge Hallyn
Quoting Michael H. Warfield (m...@wittsend.com): On Fri, 2013-06-07 at 08:45 +, Purcareata Bogdan-B43198 wrote: ... I use to do something similar a lot under the old linux-vservers project (now defunct for several years - mailing list is now dead). They used a COW (Copy On Write) system

Re: [Lxc-users] Sharing container rootfs

2013-06-10 Thread Serge Hallyn
Quoting Michael H. Warfield (m...@wittsend.com): On Mon, 2013-06-10 at 08:48 -0500, Serge Hallyn wrote: Quoting Michael H. Warfield (m...@wittsend.com): On Fri, 2013-06-07 at 08:45 +, Purcareata Bogdan-B43198 wrote: ... I use to do something similar a lot under the old linux

Re: [Lxc-users] Rootfs as rw overlay on top of ro directory

2013-06-11 Thread Serge Hallyn
This is really cool, first off. I'd like to extend the built-in overlayfs backing store support a bit, but there will also be room for more powerful setups using mount hooks. I'd like to add your mount hook into the set of listed examples, if you don't mind. The pre-start and post-stop routines

Re: [Lxc-users] Containing a user-space application

2013-06-11 Thread Serge Hallyn
Quoting Barry Jaspan (barry.jas...@acquia.com): I am just getting started with LXC. I'm using Ubuntu 12.04 (Precise). After a week of reading and experimenting, I have the beginnings of a working prototype and a handful of questions. :) First, my use case. I'm running a number of

Re: [Lxc-users] Fwd: Time Namespace Support?

2013-06-12 Thread Serge Hallyn
Quoting Walter (walter.stanish+lxc-us...@gmail.com): Apparently there was once a patch regarding time namespaces @ https://lwn.net/Articles/179825/ but it has vanished. Not vanished, see http://lkml.org/lkml/2006/4/13 (search for 'time virt'), the intro is http://lkml.org/lkml/2006/4/13/172

Re: [Lxc-users] 转发: lxc scalability problem

2013-06-13 Thread Serge Hallyn
年6月8日 23:32 收件人: 'Serge Hallyn' 主题: 答复: [Lxc-users] lxc scalability problem Dear serge, Sorry for my delayed reply :) Problem Still persists with selinux disabled. Maybe it is not the memory problem because that my machine has 2TB memory and 8 x E7-8830 cpus. The OS in the containers

Re: [Lxc-users] hot add of network interfaces

2013-06-13 Thread Serge Hallyn
Quoting Stefan Majer (stefan.ma...@gmail.com): Hi, is it possible to add a additional network interface (either physical or vlan) to a running lxc container. I didnt find any pointers if this is possible. See lxc-device.

Re: [Lxc-users] lxc-create -B zfs

2013-06-17 Thread Serge Hallyn
Quoting Tamas Papp (tom...@martos.bme.hu): On 06/10/2013 03:41 PM, Serge Hallyn wrote: Quoting Tamas Papp (tom...@martos.bme.hu): hi, # lxc-create -n pony -t ubuntu -B zfs --zfsroot=tank/lxc Hm. Mine is simply called 'lxc', and that works. So it sounds like I'm doing something wrong

<    1   2   3   4   5   >