Linux Containers (LXC) is a userspace interface for operating system-level virtualization features in the mainline Linux kernel, such as kernel namespaces and control groups (cgroups). These allow multiple distinct user space instances to be run on a single kernel.

learn more… | top users | synonyms

0
votes
1answer
17 views

Can I run NixOS in an LXC container?

Can I run NixOS in an LXC container? To run debian on top of debian, one would use LANG=C SUITE=jessie MIRROR=http://httpredir.debian.org/debian lxc-create -n debian8 -t debian What should one ...
1
vote
1answer
24 views

Docker container on Red Hat Linux server 5.9

Can I install Docker on Red Hat server 5.9 so I can take an image container from an installed software and move it to another server? Or should it be enough to update the Kernel up to version 3 so ...
1
vote
1answer
32 views

What is the network connection speed between two containers communicating via a virtual bridge running on the same host?

Does a virtual bridge (added to /etc/network/interfaces) limit the transfer speed of data from the memory of one lxc/docker container to another? For example does the memory throughput drop to that ...
1
vote
1answer
31 views

bridge-routing and martian packets

i am experimenting with routing a bit, and now i have a problem i cannot solve by myself eth0 | | ...
1
vote
0answers
41 views

Weird behaviour of unprivileged LXC container

Can someone please explain this weird behaviour to me: I have an unpriviliged LXC container with firefox inside. If firefox is running on the host outside of the container, /usr/bin/firefox inside ...
2
votes
0answers
42 views

I have trouble analysing the cause of this (firefox) segfault

When executed within a minimal (unprivileged) LXC container, firefox segfaults (other graphical applications work fine). I'am unable to find the exact cause of this segfault (which is most likely due ...
0
votes
0answers
10 views

Vagrant LXC mounts small /tmp partition

I've got a vagrant box running with an ubuntu based LXC container. I had to run a script that uses /tmp to store some files temporarily. The script kept failing, having looked at what's up, it turned ...
0
votes
0answers
21 views

lxc-how to make an lxc container available on the LAN?

I have tried a lot of methods mentioned on the internet,including the debian wiki, and a lot of other sources.But they all end up either not fully completing what i want to do, or taking out the host ...
0
votes
0answers
17 views

How to autostart an lxc container in a custom directory?

I want to keep my LXC containers outside of var (preferably in /srv). When my LXC container is in /var/lib/lxc, it autostarts by setting a flag in config, but when I lxc-init -P is/srv/dir`, it ...
4
votes
0answers
38 views

LXC: Any security difference between root and end-user owned unprivileged containers?

I intend to use LXC containers to isolate most of the network facing services. As per my understanding, I have mainly two ways to do this: Create unprivileged containers owned by root. In this ...
0
votes
0answers
32 views

Disk usage for a mounted drive shows up completely between the host and a container

When comparing the disk usage for a mounted harddrive the usage is completely different when compared between the host and the container. I am running Ubuntu 14.04 on the host and in the lxc ...
3
votes
0answers
74 views

How to bind an lxc container to a specific bridge?

I created a specific bridge br1 and would like to bind a specific container cont1 to that bridge. I have lxc and lxd installed, if that matters (I am not sure what the difference between them really ...
1
vote
0answers
32 views

How to start a service upon an lxc container start?

I would like to start OpenVPN automatically upon the launch of its lcx container. The container runs Ubuntu 14.04.4 LTS, service openvpn start is successful (when launched from the running container) ...
0
votes
0answers
26 views

Auto-assign free static IP address from a range to a container (veth)?

In the config-file of an individual LXC container, one can specify a static IP address so the inside of the container does not need to acquire an IP by DHCP. Is there a way to automatically assign ...
2
votes
1answer
94 views

Installing collectd hangs in debian jessie in LXD, I need help finding out why it stalls

I am trying to install collectd using apt-get install collectd in debian jessie. It always hangs at the same place, after setting up ca-certificates it will reach "Setting up collectd" and then ...
3
votes
0answers
84 views

Sharing unix sockets across unprivileged lxcontainers

I have two unprivileged containers and I'd like to share a unix socket between them. Each container has its own user on the host, complete with separate subuid and subguid mappings. I've tried ...
1
vote
0answers
50 views

Why does LXC-create returns error “sudo.conf should be 0”?

I try to create an unprivileged container and nothing works as expected. Here is my code : follows that tutorial #!/bin/bash sudo apt-get update sudo apt-get dist-upgrade sudo apt-get -y install ...
2
votes
0answers
24 views

How to map a UID to another UID (!= 0) inside a user namespace?

How can one map UID 1000 to another regular UID (not root/0) inside a user namespace? EDIT: For anyone interested, https://linuxcontainers.org/lxc/manpages/man5/lxc.container.conf.5.html lists an ...
1
vote
0answers
29 views

Why I can not update Linux core in dockers?

When I run apt-get update && apt-get upgrade in container, the core is not starting to update. Yes, I know, containers use the kernel of host machine and can not execute some ...
0
votes
1answer
143 views

LXC ip allocation using DHCP

I'm trying to set up DHCP for my lxcontainers without using lxc-net. The reason for this decision is that I'd like to place my containers in different networks, such that they are unable to talk to ...
1
vote
0answers
67 views

NFS permissions across multiple LXC VM's

I recently changed my home server setup from a basic Ubuntu Server installation running everything to a virtualised environment. I am currently running ProxMox type 1 hypervisor, with several VM's. ...
4
votes
1answer
34 views

LXC: Are downloaded templates verified?

Debian 8.3, LXC 1:1.0.6-6+deb8u2 When LXC downloads the base packages for a Debian container, are the packages verified? Verifying a Debian CD involves comparing signed checksum files against the ...
2
votes
0answers
42 views

SSH/web servers in Linux containers improve security?

Scenario: A 'gateway' machine functioning as a router and firewall, connecting a small LAN to the internet. The machine also runs a webserver (hosting a simple website) and an SSH server, providing ...
1
vote
1answer
46 views

How do I make changes to an lxc template?

I normally create containers with: lxc-create -n mycontainer -t debian However I want to bake a few items into that "debian" default template. New user with my ssh key, can sudo without a ...
2
votes
0answers
57 views

How to calculate LXC load average

How I can calculate or fetch LoadAverage from LXC container? (/proc/loadavg has load from physical server not from vm) Any ideas ?
14
votes
2answers
7k views

What is the difference between Docker, LXD, and LXC [closed]

What is the difference between Docker, LXD, and LXC. Do they offer the same services or different.
3
votes
2answers
98 views

Is it possible to mount a device in a process' namespace after unshare()

Say I have a process with an isolated MOUNT namespace pid 1200 the process called unshare() to isolate its namespace from the parent process. I then want to mount a device only accessible outside pid ...
1
vote
2answers
59 views

Which container implementation docker is using

Docker is based on Linux containers and control groups. But I would like to know which implementation of Linux containers , docker is using? Is it using the native/default (LXC execution environment ) ...
3
votes
1answer
70 views

Setup permanent bridge for dynamic network devices from lxc container?

TL:DR How can I make a bridge permanent (survive reboot) without adding a network device to the bridge config in /etc/network/interfaces? Hi, I just started playing around with lxc on ubuntu 14.04. ...
2
votes
2answers
52 views

Bash script to insert information after each line of block of data

I wish to write a script that would insert information from the /proc file system to a list of processes generated by top. It would be something like this: Here is the sample output that I get from ...
0
votes
0answers
45 views

Installing qemu-user-static and binfmt-support inside an LXC

I'd like to run armhf executables inside an amd64 LXC container. How to do that? update-binfmts --display shows no qemu interpreters.
1
vote
0answers
69 views

Implement network bridge as userspace program?

I am looking to do some packet filtering/address rewriting for packets which are coming from and going to a lxc container. After some basic research, I figured the best way to do this is to assign a ...
1
vote
1answer
333 views

Nginx virtual hosts for multiple LXC containers

I am having the following configuration: I have 5 LXC containers that are running nginx. On each container there are a couple of virtual hosts set up in nginx. That means for a container I have ...
2
votes
1answer
21 views

Firewall that allows to tag or comment rules for easy filtering

I am going to use iptables for port forwarding to listen on requests from my LAN on port 8080 and answer with container at port 80 , like this: iptables -t nat -A PREROUTING -p tcp -d 192.168.1.15 ...
2
votes
1answer
662 views

How to find out how much memory lxc container is allowed to consume?

I'm trying to make ansible set InnoDB buffer pool size to some percent of available memory. But ansible_memtotal_mb and free report how much memory the host has. How do I figure out how much memory is ...
1
vote
0answers
497 views

Trouble installing Unity8-LXC on Mint

(I originally posed this on askubuntu but was told it should be here instead.) I want to install unity8-lxc on Linux Mint so I can check out Unity8 without installing it. Mint 17.3 (Rafaela) of ...
1
vote
0answers
163 views

LXC mount CIFS => permision denied

I'm trying to mount a shared folder /disk from local network with cifs to folder test, but I get permission denied. I can ping 192.168.1.x. So what's the problem with LXC?
1
vote
0answers
130 views

Move lxc container to a different host

I'd like to know, if it is possible to move a lxc container from one lxc host to a different one. Here are the specs of the machines: Current LXC host: Gentoo: Linux 3.7.10-gentoo #1 SMP x86_64 ...
1
vote
1answer
131 views

What's the best way to create a seccomp whitelist for LXC

I try to setup a very restrictive seccomp whitelist for a busybox based LXC container. I started with the file /usr/share/doc/lxc/examples/seccomp-v1.conf from Ubuntu. It seems to contain most useful ...
1
vote
0answers
166 views

Possible to install 32-bit LXC container in 64-bit host with multilib support?

Is it possible to run a 32-bit LXC container (i.e. x86_32-based) on a 64-bit host (i.e. x86_64-based)? Does it work at all? What precautions may I have to take to make this work? My kernel would ...
1
vote
0answers
22 views

Is an unprivileged LXC where the host user itself is mapped to 0 less secure of one where one of its subids is mapped to 0, and why?

Instead of creating "common" LXC unprivileged containers where all the users are mapped to (unprivileged) subuid/gid of my host user, I'm considering a mapping where my host user itself will be mapped ...
0
votes
0answers
76 views

LXC GUI wont start

I'm trying to learn how to create LCX GUI containers. I've followed the guide at https://www.stgraber.org/2014/02/09/lxc-1-0-gui-in-containers/ and watched the YouTube clip ...
2
votes
0answers
54 views

What is “state-object” in cgroups

I am gathering some idea about lxc, kernel name spaces and cgroups. While reading man lxc-cgroup, i find : lxc-cgroup gets or sets the value of a state-object (e.g., 'cpuset.cpus') in the ...
4
votes
1answer
270 views

Permanent swapping with lots of free memory

We have a Linux server running Debian 4.0.5 (Kernel 4.0.0-2) with 32G RAM installed and 16G Swap configured. The system uses lxc containers for compartmentalisation, but that shouldn't matter here. ...
0
votes
1answer
256 views

Default gateway is not reachable

I have a vmware player on which i have installed CentOS 6.5. And on that CentOS 6.5 i have installed lxc and on that lxc i have installed centos 6.3. I am using NAT and bridger as a Network adaptor ...
0
votes
1answer
399 views

LXC Bridge not working on ubuntu 15.04

I'm trying to get lxc containers running with a bridged network connection so the container get ip addresses like the host does from a dhcp server. I red several tutorials, but I couldn't find one ...
1
vote
0answers
40 views

how to tell lxc to not use /usr/share/lxc/templates for making a linux container

This is a follow-up question to How to make a local template for a linux container and point to that Now, in that it seems that a user has to make some changes to /usr/share/lxc/templates in order ...
0
votes
0answers
122 views

`vagrant up` dies in wait_for_communicator.rb:16:in `block in call'

I followed these steps including common advice to enable NFS in my vagrant-lxc setup for mediawiki-vagrant, but I'm getting stuck in this loop which ends with the lines below as I run REDIR_LOG=1 ...
1
vote
0answers
123 views

Default lxc networking suddenly stops to work

I've recently installed lxc on ubuntu 14.04. Networking used to work (lxcbr0 being a NAT interface, DHCP configured using dnsmasq) but after a container restart, the networking does not work any more. ...
0
votes
1answer
44 views

Huge pages in use, but no allocator

I have a process running in an lxc and it allocates some huge pages. However when the lxc is killed off, the huge pages are still allocated, but no process has them... $ grep huge /proc/*/numa_maps ...