Re: [Lxc-users] lxc-clone -s -B lvm, deletes original lv if no space left!

2013-06-18 Thread Serge Hallyn
Quoting zoolook (nbensa+lxcus...@gmail.com): Hello Serge, On Mon, Jun 17, 2013 at 4:43 PM, Serge Hallyn serge.hal...@ubuntu.com wrote: Haven't tested, but the following should fix it: Unfortunately, your patch didn't fix it. I put a fprintf in lxcapi_destroy: if (r

Re: [Lxc-users] lxc-clone -s -B lvm, deletes original lv if no space left!

2013-06-18 Thread Serge Hallyn
Quoting zoolook (nbensa+lxcus...@gmail.com): On Tue, Jun 18, 2013 at 1:09 PM, Serge Hallyn serge.hal...@ubuntu.com wrote: Though, I'm currently trying to reproduce with the lxc in ubuntu-lxc saucy ppa, and failing. It's not deleting the original lv for me. I just see: Maybe the fact

Re: [Lxc-users] lxc-clone -s -B lvm, deletes original lv if no space left!

2013-06-21 Thread Serge Hallyn
Quoting zoolook (nbensa+lxcus...@gmail.com): Hi Serge, On Tue, Jun 18, 2013 at 5:57 PM, zoolook nbensa+lxcus...@gmail.com wrote: On Tue, Jun 18, 2013 at 5:39 PM, Serge Hallyn serge.hal...@ubuntu.com wrote: Exactly what code (git commit id or distro+pkg) are you using? Installed

Re: [Lxc-users] Container shutdown remounts the lxc partition read-only... again

2013-06-21 Thread Serge Hallyn
Quoting Leonid Isaev (lis...@umail.iu.edu): Hi, I have recently installed vanilla lxc-0.9.0 under archlinux and encountered the old fs is remounted ro issue which is supposed to be fixed since https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/942325 ... The (also archlinux)

Re: [Lxc-users] lxc-clone -s -B lvm, deletes original lv if no space left!

2013-06-21 Thread Serge Hallyn
Quoting Serge Hallyn (serge.hal...@ubuntu.com): Quoting zoolook (nbensa+lxcus...@gmail.com): Hi Serge, On Tue, Jun 18, 2013 at 5:57 PM, zoolook nbensa+lxcus...@gmail.com wrote: On Tue, Jun 18, 2013 at 5:39 PM, Serge Hallyn serge.hal...@ubuntu.com wrote: Exactly what code (git

Re: [Lxc-users] lxc-clone -s -B lvm, deletes original lv if no space left!

2013-06-21 Thread Serge Hallyn
Quoting Serge Hallyn (serge.hal...@ubuntu.com): Quoting Serge Hallyn (serge.hal...@ubuntu.com): Quoting zoolook (nbensa+lxcus...@gmail.com): Hi Serge, On Tue, Jun 18, 2013 at 5:57 PM, zoolook nbensa+lxcus...@gmail.com wrote: On Tue, Jun 18, 2013 at 5:39 PM, Serge Hallyn

Re: [Lxc-users] Facing issue in Sharing host device node with container

2013-06-24 Thread Serge Hallyn
Quoting Datta, Souvik (souvik.da...@harman.com): Hi, I have created a ubuntu - precise container inside of Ubuntu host (precise). I am trying to share a plugged in USB MSD device between host and container. In order to do so, I did a bind mount of the host device node to a fake node in

Re: [Lxc-users] mount bind a host device node with Android Container device node

2013-06-26 Thread Serge Hallyn
Quoting Datta, Souvik (souvik.da...@harman.com): Hello, I am trying to bind mount the host device node (/dev/fb0) to a android container device node (/dev/fb0). But the device node in android container does not have the device node. Can some one place let me know , how to create the device

Re: [Lxc-users] Container shutdown remounts the lxc partition read-only... again

2013-06-27 Thread Serge Hallyn
Quoting Leonid Isaev (lis...@umail.iu.edu): On Fri, 21 Jun 2013 09:27:44 -0500 Serge Hallyn serge.hal...@ubuntu.com wrote: Quoting Leonid Isaev (lis...@umail.iu.edu): Hi, I have recently installed vanilla lxc-0.9.0 under archlinux and encountered the old fs is remounted ro

Re: [Lxc-users] Permission problem with /dev/net/tun (despite echoes to cgroup)

2013-07-01 Thread Serge Hallyn
Quoting Thomas Karcher (thkarc...@gmx.de): -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi folks, the symptom my libvirt LXC container suffers from is: Note this mailing list is for lxc (lxc.sf.net, https://github.com/lxc/lxc), which is a different userspace implementation of containers

Re: [Lxc-users] Determine which veth interface belongs to which container

2013-07-01 Thread Serge Hallyn
You can probably correlate it using /sys/class/net/$veth/iflink, which should have consecutive values for link and peer. Quoting Yury Vidineev (ade...@yandex.ru): Thank you for the answer! It's almost exactly what I need. But is it possible to know name of interfaces without containers

Re: [Lxc-users] Determine which veth interface belongs to which container

2013-07-01 Thread Serge Hallyn
-n 5 14 59 62 70 81 84 87 90 On Monday, July 01, 2013 10:26:44 AM Serge Hallyn wrote: You can probably correlate it using /sys/class/net/$veth/iflink, which should have consecutive values for link and peer. Quoting Yury Vidineev (ade...@yandex.ru): Thank you for the answer

Re: [Lxc-users] Regarding Checkpoint and Restore support in LXC

2013-07-03 Thread Serge Hallyn
Quoting Datta, Souvik (souvik.da...@harman.com): Hello, I was reading about the Checkpoint and Restore support in LXC but I am bit confused with the current state of the implementation of the same. At present, I am using version 0.7.5 and in that version , I can see utilities like

Re: [Lxc-users] Unable to create lxc CT on fedora 19

2013-07-09 Thread Serge Hallyn
Quoting Purcareata Bogdan-B43198 (b43...@freescale.com): On a side note, I had a pretty easy time installing a Gentoo container using the script at [4], on the same Debian host. This is not completely managed by lxc-tools, but still uses lxc-start. Maybe there can be a discussion between the

Re: [Lxc-users] lxc-clone -B lvm -L, bug?

2013-07-10 Thread Serge Hallyn
Quoting zoolook (nbensa+lxcus...@gmail.com): LXC version: 0.9.0.0~staging~20130708-2041-0ubuntu1~ppa1~raring1 Hello, there's an inconsistency between lxc-create --fssize and lxc-clone -L. lxc-create --fssize accepts size in GB. For example, --fssize 2G mease 2GB (or 2GiB, my brain

Re: [Lxc-users] Using common rootfs for multiple containers

2013-07-10 Thread Serge Hallyn
Quoting Niklas Fuchs (nkfu...@yahoo.de): This sound really great. I was wondering if anyone uses user namespaces and shared rootfs? I got the roblem the skeleton of the ro-root on the host has uid 0 for the root files, but the guest maps them to nobody, so i cant use shared rootfs and user

Re: [Lxc-users] regarding unreclaimable memory

2013-07-10 Thread Serge Hallyn
Quoting Kalyana sundaram (kalyan...@gmail.com): Hey I have a host machine and 4 lxc containers. All running centos 6.3 Containers use macvlan to connect to internet I face improper memory usage. free mem is way less than rss+cache Sunreclaim keeps on increasing until reboot due to out of

Re: [Lxc-users] [PATCH] lxc_clone.c (was: lxc-clone -B lvm -L, bug?)

2013-07-11 Thread Serge Hallyn
Quoting zoolook (nbensa+lxcus...@gmail.com): Hello Serge, On Wed, Jul 10, 2013 at 12:09 PM, zoolook nbensa+lxcus...@gmail.com wrote: lxc-clone -L accepts size _only_ in B. In other words, ignores G. Yup. You can see the local functions for parsing the fssize in lxc_clone.c and

Re: [Lxc-users] LXC Checkpointing/Migration

2013-07-11 Thread Serge Hallyn
Quoting Nipun Arora (nipun2...@gmail.com): Hi, Thanks for your kind response, I will look into this... However, the functionality, that I am looking for is similar to a process clone, i.e. if a Process A is running -(clone) - Process A + Process B(copy of process A) In a similar

Re: [Lxc-users] [PATCH 1/1] lxc_clone.c: Allow size subfixes for -L parameter

2013-07-12 Thread Serge Hallyn
Quoting zoolook (nbensa+lxcus...@gmail.com): lxc-clone ignores size subfixes (K, M, G) when using -L parameter. The following is a quick patch to allow, for example, lxc-clone -L 10G. Signed-off-by: Norberto Bensa nbe...@gmail.com Acked-by: Serge E. Hallyn serge.hal...@ubuntu.com Applied,

Re: [Lxc-users] clones of clones are failing to start

2013-07-18 Thread Serge Hallyn
Quoting Jay Taylor (j...@jaytaylor.com): Yes, the actual name was admin. Yikes. Is there a list of don't do's anywhere? The documentation I periodically update is at https://help.ubuntu.com/13.04/serverguide/lxc.html but this isn't mentioned there. I'd like to see about making it more

Re: [Lxc-users] clones of clones are failing to start

2013-07-18 Thread Serge Hallyn
Quoting Jäkel, Guido (g.jae...@dnb.de): Dear Serge, to assist to avoid such problems i would propose to introduce macro expansion (of the own tags but also by incorporating the environment variables) into the configuration argument parser and to provide some useful basics like the

Re: [Lxc-users] Hi all please treat nicely as mother says I am special

2013-07-26 Thread Serge Hallyn
Quoting Bretton Woods (woods.bret...@yahoo.co.uk): Noob LXC user who thinks LXC rocks but is undersold. What about Planet-LXC it should be done but then again before I go on Something I only knew about from a look at the Archive An lxc planet would be neat, and I'd happily put my blog on

Re: [Lxc-users] clones of clones are failing to start

2013-08-02 Thread Serge Hallyn
Quoting Jäkel, Guido (g.jae...@dnb.de): Hi Serge, to assist to avoid such problems i would propose to introduce macro expansion (of the own tags but also by incorporating the environment variables) into the configuration argument parser and to provide some useful basics like the

Re: [Lxc-users] lxc-ls --fancy is lying

2013-08-02 Thread Serge Hallyn
Quoting Tamas Papp (tom...@martos.bme.hu): hi All, I've seen a couple of times in the past like this: # lxc-ls --fancy --stopped --fancy-format name,state NAME STATE finance STOPPED hammer STOPPED ijc-cipool STOPPED jay STOPPED

Re: [Lxc-users] Setting up server in lxc container for dummies

2013-08-02 Thread Serge Hallyn
Quoting Dan Kegel (d...@kegel.com): Hi, I've been happily using ubuntu's stock lxc (originally in 12.04, now in 13.04), and finally have an occasion to run a server inside a container. I'd like it to be visible from the outside. There are plenty of web pages about this, but they seem to

Re: [Lxc-users] lxc-start: Error creating cgroups

2013-08-07 Thread Serge Hallyn
Quoting Ethier, Michael (meth...@cgr.harvard.edu): Hi, I am trying to start a lxc container I have setup on a test Centos 6.4 box. I downloaded and built lxc-0.9.0 and installed it into /opt/lxc-0.9.0. I believe I have it setup properly and my test lxc host is called host1. When I try to

Re: [Lxc-users] Running the latest LXC version

2013-08-07 Thread Serge Hallyn
Quoting Tamas Papp (tom...@martos.bme.hu): On 08/08/2013 12:39 AM, Kevin LaTona wrote: I am still getting up to speed with Ubuntu and I went looking to see how I could install the latest version of LXC on Ubuntu 12.04 and can't find anything that shows how to do this. Is anyone

Re: [Lxc-users] Containers are all getting same IP address

2013-08-09 Thread Serge Hallyn
Quoting Jay Taylor (j...@jaytaylor.com): lxc.network.hwaddr = 00:16:3e:07:7b:8f Can you show the result of 'grep lxc.network.hwaddr /var/lib/lxc/*/config'? Which version of lxc are you using again? -- Get 100%

Re: [Lxc-users] Containers are all getting same IP address

2013-08-09 Thread Serge Hallyn
Sorry, I can't figure out what's going wrong. You have unique macaddrs for each container, so the dnsmasq-lxc should be handing out unique ip addresses. What does /etc/network/interfaces in one of the containers look like? ubuntu@ip-10-34-249-56:~$ lxc-version lxc version: 0.9.0 what about

Re: [Lxc-users] Containers are all getting same IP address

2013-08-10 Thread Serge Hallyn
Quoting Tony Su (ton...@su-networking.com): FYI I avoid the whole issue assigning different IP addresses by creating my br devices using libvirt (vm manager). He's running lxc under ubuntu, so he already has a lxcbr0 bridge with dnsmasq running just as you get with libvirt. That's why what

Re: [Lxc-users] Containers are all getting same IP address

2013-08-12 Thread Serge Hallyn
Quoting Jay Taylor (j...@jaytaylor.com): After further investigation yesterday, I am not convinced it is an IP-address issue. The affected host machines are unable to start any existing or newly created containers. The incident that triggered the issue was cloning 1 container into 10 new

Re: [Lxc-users] Running sudo shutdown -h now in container causes host to freeze/crash

2013-08-14 Thread Serge Hallyn
Quoting brian mullan (bmullan.m...@gmail.com): AAlso... just tried this, completely removed LXC and reinstalled it. $ sudo apt-get purge lxc $ sudo apt-get install lxc then created a container $ sudo lxc-create -t ubuntu -n my_cn1 $ sudo lxc-start -n my_cn1 after logging into

Re: [Lxc-users] Containers are all getting same IP address

2013-08-14 Thread Serge Hallyn
Quoting Jay Taylor (j...@jaytaylor.com): After further investigation yesterday, I am not convinced it is an IP-address issue. The affected host machines are unable to start any existing or newly created containers. The incident that triggered the issue was cloning 1 container into 10 new

Re: [Lxc-users] Containers are all getting same IP address

2013-08-14 Thread Serge Hallyn
Quoting Serge Hallyn (serge.hal...@ubuntu.com): Quoting Jay Taylor (j...@jaytaylor.com): After further investigation yesterday, I am not convinced it is an IP-address issue. The affected host machines are unable to start any existing or newly created containers. The incident

Re: [Lxc-users] Containers are all getting same IP address

2013-08-14 Thread Serge Hallyn
Quoting Jay Taylor (j...@jaytaylor.com): Hi Serge, I added zfs support to the application and systems creating/hosting the containers, and I have subsequently been unable to reproduce any issues. Thanks for the script, I'll play with that in a bit. But to be clear: you're saying you can

Re: [Lxc-users] Running LXC on ZFS, never comes back online after reboot

2013-08-27 Thread Serge Hallyn
Quoting Jay Taylor (j...@jaytaylor.com): Greetings LXC folks, With LXC and ZFS on AWS, after I've created 1 or more containers, the machine will never come back up after a reboot. One fix I've found for this is to always explicity run `sudo zpool export tank` before every system restart,

Re: [Lxc-users] Running LXC on ZFS, never comes back online after reboot

2013-08-28 Thread Serge Hallyn
Quoting Jay Taylor (j...@jaytaylor.com): Serge, As a followup on this issue, I've ported the application to use zfs-fuse instead of the PPA version, and overall things are working well. The only new problem I've encountered is that when destroying a container, I frequently get dataset is

Re: [Lxc-users] Does lxc-stop shut down services gracefully?

2013-08-30 Thread Serge Hallyn
Quoting Johannes Graumann (johannes_graum...@web.de): Hi, Is using lxc-stop -n CONTAINER on a host equivalent to running shutdown within the container, meaning services are put to rest gracefully etc? I'm in the process of scripting backup infrastructure for containers running DBs

Re: [Lxc-users] Does lxc-stop shut down services gracefully?

2013-08-30 Thread Serge Hallyn
Quoting Johannes Graumann (johannes_graum...@web.de): Serge Hallyn wrote: Quoting Johannes Graumann (johannes_graum...@web.de): Hi, Is using lxc-stop -n CONTAINER on a host equivalent to running shutdown within the container, meaning services are put to rest gracefully etc

Re: [Lxc-users] lxc Japanese man pages

2013-09-04 Thread Serge Hallyn
Thanks very much for doing this work. Unfortunately your tree is not such that I can just merge it. Is the doc-ja directory the only one I should need? If not, can you start with a fresh clone of git://github.com/lxc/lxc staging branch and in one commit copy the needed changes over? I'll take a

Re: [Lxc-users] Tap interface not deleted?

2013-09-11 Thread Serge Hallyn
Quoting Fajar A. Nugraha (l...@fajar.net): I have a strange issue, in that if I stop a container (i.e. poweroff from within a container) the tap interface is not deleted. I have to delete it What tap interface? macvlan and veth devices go away when the container is destroyed. But I'm not

Re: [Lxc-users] veth interface not deleted?

2013-09-12 Thread Serge Hallyn
Quoting Fajar A. Nugraha (l...@fajar.net): Any ideas how to troubleshoot this? Is this something related to kernel version? If the container fails to start at all, then lxc will manually delete the veth. However if we get as far as lxc passing one end of the veth tunnel into the container,

Re: [Lxc-users] veth interface not deleted?

2013-09-13 Thread Serge Hallyn
Quoting Fajar A. Nugraha (l...@fajar.net): On Thu, Sep 12, 2013 at 9:46 PM, Serge Hallyn serge.hal...@ubuntu.com wrote: Quoting Fajar A. Nugraha (l...@fajar.net): Any ideas how to troubleshoot this? Is this something related to kernel version? If the container fails to start at all

Re: [Lxc-users] [lxc-devel] Working LXC templates?

2013-09-16 Thread Serge Hallyn
Quoting Michael H. Warfield (m...@wittsend.com): So, all of this has led Serge to list me on the roster for the LinuxPlumbers conference as the LXC systemd expert. I'll get even with him later next week for that one... Lol! Buy you a beer thu night? :) -serge

Re: [Lxc-users] debian and cgroup behaviour

2013-09-17 Thread Serge Hallyn
Quoting Andreas Laut (andreas.l...@spark5.de): Dear list. I've got the following error message with Debian squeeze (Kernel 2.6.32.5) and lxc 0.8: lxc-start: No such file or directory - failed to rename cgroup /sys/fs/cgroup//lxc/18381-/sys/fs/cgroup//lxc/vs-db lxc 0.7xx creates a

Re: [Lxc-users] Read-only container /proc

2013-09-18 Thread Serge Hallyn
Quoting Andre Nathan (an...@digirati.com.br): Hi Serge On 09/18/2013 01:55 PM, Serge Hallyn wrote: An unfortunate known bug - try the package in raring-proposed. (You'll need lxc-start to be running unconfined as well, but if that worked for you in precise I assume you already have

Re: [Lxc-users] veth interface not deleted?

2013-09-19 Thread Serge Hallyn
Quoting Fajar A. Nugraha (l...@fajar.net): On Fri, Sep 13, 2013 at 10:16 PM, Fajar A. Nugraha l...@fajar.net wrote: On Fri, Sep 13, 2013 at 7:43 PM, Serge Hallyn serge.hal...@ubuntu.comwrote: I'm wondering whether it could just be that there is a socket waiting for a tcp timeout

Re: [Lxc-users] [lxc-devel] Working LXC templates? EUREAKA! I think I've got it!

2013-09-20 Thread Serge Hallyn
Hey Michael, tried this out on a saucy vm, and it looked good until it died with receiving incremental file list fedora-release-19-2.noarch.rpm sent 47 bytes received 33329 bytes 9536.00 bytes/sec total size is 32472 speedup is 0.97 warning: fedora-release-19-2.noarch.rpm: Header V3

Re: [Lxc-users] Horrors using Debian Wheezy

2013-09-20 Thread Serge Hallyn
Sorry I don't have the older emails in this thread, but the preferred syntax is to use a path relative to your container rootfs, i.e. 'run/shm', i.e. lxc.mount.entry = tmpfs run/shm tmpfs defaults 0 0 If that is not working then there's a bug. -serge Quoting Randall Smith (rand...@tnr.cc):

Re: [Lxc-users] Contents of container deleted during maintenance -- What went wrong??

2013-09-23 Thread Serge Hallyn
Quoting James Crofts (jcro...@pobox.com): I'm an experienced Debian and GNU/Linux user. Last night I was trying to get my torrent container working after the upgrade to Debian Wheezy. The contents of /lxc/torrent, which contained the directory hierarchy of the torrent container with the help

Re: [Lxc-users] Permissions on devpts in container

2013-09-23 Thread Serge Hallyn
Quoting John (l...@jelmail.com): Hello list, I have noticed a difference in behaviour on a new host that I have just installed which uses LXC 0.9.0. The differences are noted when compared with another host that has LXC 0.9.0-alpha3 on it. Inside a container under LXC 0.9.0, the devpts

Re: [Lxc-users] veth interface not deleted?

2013-09-26 Thread Serge Hallyn
Quoting Jäkel, Guido (g.jae...@dnb.de): Quoting Jäkel, Guido (g.jae...@dnb.de): Hi, I want to contribute an observation while playing around with my empty plain vanilla container template: The test cycle is to start it, open an ssh terminal session to it, leave it idle and regular shut

Re: [Lxc-users] veth interface not deleted?

2013-09-30 Thread Serge Hallyn
Quoting Fajar A. Nugraha (l...@fajar.net): On Mon, Sep 30, 2013 at 11:29 PM, Serge Hallyn serge.hal...@ubuntu.comwrote: Quoting Serge Hallyn (serge.hal...@ubuntu.com): Quoting Jäkel, Guido (g.jae...@dnb.de): By the other hand if I prevent inside the container by configuration

Re: [Lxc-users] Restoring a process fails under lxc 1.0.0.alpha1

2013-10-04 Thread Serge Hallyn
Quoting Frederico Araujo (arau...@gmail.com): Hi, I've been using checkpoint/restore (CRIU 0.7) under lxc containers on Ubuntu Saucy for a while and everything was running smoothly until I updated my lxc from version 0.9 to the new release (1.0.0.alpha1). After the update, restoring even a

Re: [Lxc-users] lxc-instance fail

2013-10-07 Thread Serge Hallyn
Quoting Tamas Papp (tom...@martos.bme.hu): On 10/04/2013 04:11 PM, Tamas Papp wrote: hi, Starting a container from cli by lxc-start works fine, lxc-info shows the right state. Using upstart: start lxc-instance NAME=archiva-test CONFIG=/tank/lxc/archiva-test/config #

Re: [Lxc-users] lxc-instance fail

2013-10-07 Thread Serge Hallyn
Quoting Tamas Papp (tom...@martos.bme.hu): On 10/07/2013 07:09 PM, Serge Hallyn wrote: An easy way to reproduce this without zfs is: sudo lxc-create -t ubuntu -n r0 sudo cp /var/lib/lxc/r0/config /tmp sudo lxc-start -n r0 -f /tmp/config -d sudo lxc-info -n r0

Re: [Lxc-users] [Dmtcp-forum] Running DMTCP inside a LXC container

2013-10-09 Thread Serge Hallyn
Quoting Alexandre Gravier (al.grav...@gmail.com): Hi Kapil, Thank you for your insights. You are spot on. The /proc/PID/maps of the processes I try to serialise with DMTCP contain the exact list of incorrect filepaths that DMTCP spits out. I can't reproduce that. /proc/self/maps inside a

Re: [Lxc-users] cgroups permission problem

2013-10-10 Thread Serge Hallyn
Quoting John (j...@neutrondawn.com): Greetings LXC, im having problems getting my container operational on centos. cgconfig and cgred are both running. the error is as follows during startup attempts: lxc-start 1381364626.764 DEBUGlxc_cgroup - cgroup_path_get: called for subsys

Re: [Lxc-users] cgroups permission problem

2013-10-10 Thread Serge Hallyn
initialized earlier. /x/y/z/ is not allowed to use cpus which are not authorized for use by /x/y. On 2013-10-10 09:24, Serge Hallyn wrote: Quoting John (j...@neutrondawn.com): Greetings LXC, im having problems getting my container operational on centos. cgconfig and cgred are both running. the error

Re: [Lxc-users] cgroups permission problem

2013-10-10 Thread Serge Hallyn
Quoting John (j...@neutrondawn.com): Guido, Alas, this appears to be the problem. /cgroups/cgroup.clone_children does not exist. Thanks for the assistance, ill likely begin testing with a new kernel. A workaround for this problem in RHEL/Centos that sidesteps the kernel recompile

Re: [Lxc-users] LXC and iSCSI mounting for the container

2013-10-14 Thread Serge Hallyn
Quoting Bill Anderson (bill.ander...@rackspace.com): First things first: * Wheezy * Open-icsi 2.0.873-3 * Lxc 0.8.0~rc1-8+deb7u1 I have containers deploying to LVM just fine, and I have iSCSI working just fine on the host. I am using a bridged network config and the systems in

Re: [Lxc-users] bind (re)mount possible?

2013-10-25 Thread Serge Hallyn
Quoting Ulli Horlacher (frams...@rus.uni-stuttgart.de): On Thu 2013-10-24 (15:11), Serge Hallyn wrote: If your kernel is new enough (check whether /proc/self/ns/mnt exists) you could lxc-attach into the container with the -e flag to keep elevated privileges, and do the remount. Ubuntu

Re: [Lxc-users] container affecting host - lxc-1.0.0alpha1 on ubuntu 13.10

2013-10-28 Thread Serge Hallyn
Quoting Marc Paradise (m...@opscode.com): On Fri, Oct 25, 2013 at 10:30 AM, Serge Hallyn serge.hal...@ubuntu.comwrote: Can you please do an lxc-start with '-l info -o outfile' options and attach the outfile? Also show the /proc/self/mounts and /proc/self/mountinfo contents from both

Re: [Lxc-users] veth interface not deleted?

2013-11-06 Thread Serge Hallyn
Quoting Fajar A. Nugraha (l...@fajar.net): On Tue, Oct 1, 2013 at 4:46 AM, Serge Hallyn serge.hal...@ubuntu.comwrote: Quoting Fajar A. Nugraha (l...@fajar.net): Would injecting tcp rst really be necessary? In my test, doing ip link del on the host side of the interface ALWAYS succeed

Re: [Lxc-users] Static IP in containers

2013-11-07 Thread Serge Hallyn
Quoting Robin Monjo (robin.mo...@applidget.com): Hello, I'm using LXC 0.7.5 on ubuntu 12.04 with the default settings (lxbr0, dnsmasq …). To have a static IP in my containers I used to add a line in the conf file, i.e: lxc.network.ipv4 = 10.0.3.4/24 Unfortunately, this don't really

Re: [Lxc-users] Static IP in containers

2013-11-07 Thread Serge Hallyn
Quoting Robin Monjo (robin.mo...@applidget.com): Thank you, it does set the correct IP but I can't reach internet now. Any idea ? you'll need to set a route and resolv.conf, which lxc doesn't do. You should be able to do that with a lxc.script.up script, though, so cat

Re: [Lxc-users] fail to connect to a af_unix socket created within LXC

2013-11-08 Thread Serge Hallyn
Quoting mohammed dahdouh (meo...@gmail.com): Hi all, I have a problem with running connecting to a unix domain socket created within a LXC container. The call to connect() fails with ECONNREFUSED (connection refused). Doing the inverse is working (af_unix socket created in the host and the

Re: [Lxc-users] How much LXC is secure?

2013-11-11 Thread Serge Hallyn
Quoting Adam Ryczkowski (adam.ryczkow...@statystyka.net): On 11.11.2013 13:43, Daniel P. Berrange wrote: On Mon, Nov 11, 2013 at 01:19:25PM +0100, Adam Ryczkowski wrote: Last year I've read many times, that LXC have some outstanding security issues, and are the encapsulation is not tight

Re: [Lxc-users] Fwd: LXC and sound in container -

2013-11-11 Thread Serge Hallyn
Quoting brian mullan (bmullan.m...@gmail.com): As soon as I do, I will in a few days try to document what I've done so others interested in the same don't have to go through the same research. Thanks, I look forward to seeing it. The current

Re: [Lxc-users] How much LXC is secure?

2013-11-11 Thread Serge Hallyn
Quoting Tamas Papp (tom...@martos.bme.hu): On 11/11/2013 10:23 PM, Serge Hallyn wrote: You can get the support either from ppa:ubuntu-lxc/kernel, or by installing the trusty kernel. The trusty kernel has had some issues until last week (including upstream bugs), but I think it should

Re: [Lxc-users] Fwd: Lxc-users Digest, Vol 47, Issue 9

2013-11-12 Thread Serge Hallyn
Quoting brian mullan (bmullan.m...@gmail.com): There are many good writeups about using Open vSwitch with Linux.. this is just one a quick google search turned up. http://kaivanov.blogspot.com/2013/04/connecting-kvm-or-lxc-to-open-vswitch.html fwiw i also have written about it at

Re: [Lxc-users] User Namespace Support in LXC

2013-11-13 Thread Serge Hallyn
Quoting Fajar A. Nugraha (l...@fajar.net): On Wed, Nov 13, 2013 at 11:23 PM, Serge Hallyn serge.hal...@ubuntu.comwrote: Quoting Fajar A. Nugraha (l...@fajar.net): On Wed, Nov 13, 2013 at 5:11 PM, Daniel P. Berrange berra...@redhat.com wrote: For a start I think you should update

Re: [Lxc-users] stdin: is not a tty

2013-11-13 Thread Serge Hallyn
Quoting Arie Skliarouk (sklia...@gmail.com): Hi, I am trying to launch an ubuntu 12.04 vserver on top of LXC 1.0 (ubuntu 13.10). Console access works, but ssh does not with the errors *X11 forwarding request failed on channel 0* *PTY allocation request failed on channel 0* *[content ot

Re: [Lxc-users] Fwd: LXC and sound in container -

2013-11-14 Thread Serge Hallyn
Quoting Stéphane Graber (stephane.gra...@canonical.com): On Thu, Nov 14, 2013 at 11:57:04AM -0600, Serge Hallyn wrote: Quoting brian mullan (bmullan.m...@gmail.com): I'm not sure the lxc-user alias will take an file attachment or not. If not I'll try something else. I tried

Re: [Lxc-users] Bonding inside LXC container

2013-11-18 Thread Serge Hallyn
Quoting wang yao (yaowang2...@gmail.com): Hi Jake, First of all, thank you for your reply and I am very sorry for such a late response. Just as you said, I had ever tried the bonding style like this: eth0--+--bound0--[veth]--eth0 eth1--/ But when I used mode=6(alb)

Re: [Lxc-users] Specify device access without using major number

2013-11-18 Thread Serge Hallyn
Quoting Walt Chow (waltc...@hotmail.com): Hi, I would like to put a process into a container whenever the system boots up, and this container would limit what device the process can access. The commonway to limit device access in the container configuration file is to use the major

Re: [Lxc-users] LXC containers and remote desktop

2013-11-20 Thread Serge Hallyn
Quoting brian mullan (bmullan.m...@gmail.com): I'd recently uploaded a document on how I configured pulseaudio sound to work in an LXC container. I also posted the information to a WordPress blog I keep. To accompany the info on enabling PulseAudio sound in LXC I also just posted to the

Re: [Lxc-users] lxc-create -B zfs

2013-11-20 Thread Serge Hallyn
Quoting Tamas Papp (tom...@martos.bme.hu): On 10/01/2013 07:14 AM, Serge Hallyn wrote: Right now if we say lxc-create -t ubuntu -n u1 -B zfs that means make the rootfs be type zfs. Where/how should it be specified that $lxcpath/$lxcname should be a new zfs, not $lxcpath

Re: [Lxc-users] Do we have a plan to make the checkpoint/restart feature.

2013-11-21 Thread Serge Hallyn
Quoting Tamas Papp (tom...@martos.bme.hu): On 11/21/2013 04:30 AM, Serge Hallyn wrote: Quoting Mars Gu (gukai...@163.com): hi aii, I want to put the container into 'Cloud'. So the checkpoint feature in necessory for HA and LB. do we have a plan to make it in version 1.0 or later

Re: [Lxc-users] Do we have a plan to make the checkpoint/restart feature.

2013-12-04 Thread Serge Hallyn
Quoting Nipun Arora (ni...@cs.columbia.edu): Hi, I've been tryint criu for checkpointing and restart. One of the issues is that criu does not support external console. I tried setting lxc.console = none, and lxc.tty = 0... but seem to get no progress when I run the following command..

Re: [Lxc-users] [CRIU] Do we have a plan to make the checkpoint/restart feature.

2013-12-06 Thread Serge Hallyn
Quoting Pavel Emelyanov (xe...@parallels.com): On 12/04/2013 10:12 PM, Serge Hallyn wrote: Quoting Nipun Arora (ni...@cs.columbia.edu): Hi, I've been tryint criu for checkpointing and restart. One of the issues is that criu does not support external console. I tried setting

<    1   2   3   4   5