Linux Containers (LXC) is a userspace interface for operating system-level virtualization features in the mainline Linux kernel, such as kernel namespaces and control groups (cgroups). These allow multiple distinct user space instances to be run on a single kernel.

learn more… | top users | synonyms

0
votes
2answers
217 views

ARM LXC Container template

I've been trying to run LXC on an ARM architecture (arm6l - Raspberry Pi) but with no luck. After some research, I found that maybe trying to run a x86 template on my ARM was causing the problem (bash ...
1
vote
0answers
103 views

Containers running on ARM

I've been doing some research and decided to implement OpenVZ since it allows each container to be isolated from other containers, unlike LXC. However, OpenVZ is still not supported for ARM ...
0
votes
1answer
204 views

Container lockdown

I was reading about LXC vs OpenVZ and was wondering if this issue has already been solved in more recent updates: OpenVZ has done quite a good job at this, but LXC still has issues here. Even ...
2
votes
1answer
1k views

Bridged network with different subnets

I want to virtualize my webserver with lxc/virsh for this reason, I want to pass a IP to the lxc container. But my IPs are from different subnets, what I tried (but not successfully): Virsh network: ...
8
votes
2answers
2k views

Executing a command inside a running LXC

I want to execute a command inside an existing lxc without going through the regular Linux init. lxc-execute command is for that I guess but I get the following error when I run this command on my ...
2
votes
1answer
1k views

How to assign an additional IP/hostname to a chrooted environment?

While I can simply have e.g. sshd in a chroot environment ("chrootenv") listen to a different port than its parent ("parentenv"), it would be more convenient to have that environment have an ...
2
votes
1answer
228 views

Manage LXC containers from host in puppet

Is there any puppet modules for manage nodes in LXC containers from local host? E.g.: I have host with 50 LXC containers and I want to manage all those containers from host directly, not from another ...
13
votes
1answer
752 views

Command to run a child process “offline” (no external network) on Linux

I have a program I would like to test in offline mode without taking down my actual network. This program would still need to connect to local sockets, including unix domain sockets and loopback. It ...
8
votes
2answers
885 views

LXC containers as a sandbox environment

I am currently starting a project evaluating untrusted programs (student assignments) in a secure sandbox environment. Main idea is to create a web app for GlassFish and Java wrapper around lxc-utils ...
4
votes
1answer
2k views

LXC migrate between hosts

I had setup a testsystem with LXC and installed a webserver etc. that all was not the problem. But now I want to swich to another host system also I compressed /var/lib/lxc/webserver and copied it to ...
5
votes
3answers
802 views

Can LXC be used to jail instances of an installed browser?

Is it possible to use LXC on a desktop system to confine browsers and other pieces of software that have in the past been shown to be prone to certain kinds of exploits. So what I want to achieve is ...
4
votes
1answer
701 views

Which one is lighter security- and CPU-wise: LXC versus UML

I'm trying to decide between "jailing" certain applications and I know the trade-offs of KVM versus LXC and how I can use them both. Lately I came across UML (User-Mode Linux) again and was wondering ...
0
votes
0answers
49 views

Lxc giving error at the time of shutdown

I had installed lxc on my debian wheezy. Now during shutdown it give error /var/lib/lxc/*/status : no such file or directory. it show this line for 50-60 times then got shutdown. why am i getting this ...
2
votes
0answers
57 views

LXC: Have rootfs mounted without nosuid

I have the container's rootfs in a volume mounted with the nosuid option. When I start the container, its / mounted is then also mounted nosuid, which breaks programs such as sudo. How can I avoid ...
3
votes
1answer
3k views

How to setup Git server on Linux Container in Debian

I have a LXC container on my Debian system. I want to setup a public Git server on it so that it's accessible to other people. How can I do this? UPDATE #1 Link to apache2.conf: ...
1
vote
0answers
121 views

benchmarking ftp in 3 methods of virtualization

My Bachelor Final Project is about benchmarking visualization methods with ftp, web and mysql services: installing Debian on xen (para-visualization) kvm and lxc with equal resources config (equal ...
1
vote
2answers
362 views

lxc: running virtualbox inside a container

I've install virtualbox inside an lxc container. However when I try to start a VM I get the message: kernel driver not accessible (rc=1909) ....permission problem with /dev/vboxdrv. This obviously ...
5
votes
1answer
815 views

Noninteractive script running over ssh is interrupted as apt-get finishes

When I run the following non interactive script on Ubuntu Server 13.04 it's interrupted when lxc-docker package finishes installation. Script : ssh -o StrictHostKeychecking=no -t -t -i $CERT ...
2
votes
0answers
74 views

LXC apparmor profile limits executing scripts in /run/*

LXC is blocking a trusted container from running scripts in /run/*, how do I configure LXC to allow scripts to run here?
2
votes
2answers
272 views

Can I have a bridged interface without an IP?

I have 2 NICs: eth0 & eth1 on a host OS which runs some VMs (LXC) under it. The hosts eth0 is connected to a private network and configured as the primary interface. The hosts eth1 is connected ...
1
vote
0answers
154 views

vi hangs when run in /dev/console under LXC

I'm running an Arch Linux container from within lxc. The lxc-start command connects to the internal /dev/console, on which I have agetty running using the following command: /sbin/agetty --noclear -a ...
4
votes
0answers
135 views

To what extent does LXC manage configuring the network interface in a container?

In the LXC config file we can specify an IP address for a container: lxc.network.type=veth lxc.network.link=br0 lxc.network.ipv4 = 10.1.0.35/16 lxc.network.flags=up lxc.network.hwaddr= ...
1
vote
0answers
180 views

Network in LXC not forwading through a bridge

I've got an LXC container, on the host I've got a bridge between the LXC container and eth0. The LXC container can ping it's Host 10.1.0.5, but can't ping the gateway of 10.1.0.2. The host is able to ...
1
vote
0answers
1k views

Using a bridge, an LXC container can't ping router, but the host OS can

I've got a virtual machine running under virtualbox, and in that virtual machine I've got an LXC container I'm trying to bridge to virtualbox's NAT interface: ------------- ----------- ...
2
votes
2answers
3k views

Extra bridge interfaces get added automatically

I have a bridge set up between eth0 and br0, the bridge works fine, but sometimes, for unknown reasons and circumstances, I keep getting these off vethXXXXXX interfaces added to the bridge. When this ...
2
votes
2answers
526 views

cgroups: blkio.weight doesn't seem to have the expected effect

I've got 2 LXC containers with these cgroup settings: lxc.cgroup.blkio.weight = 200 lxc.cgroup.cpu.shares = 200 and lxc.cgroup.blkio.weight = 800 lxc.cgroup.cpu.shares = 800 I have verified in ...
0
votes
1answer
239 views

LXC: How can I mount a drive/directory without restarting the container?

If I configure LXC's fstab and restart, there's no problem with the mount, but do I have to restart?
11
votes
2answers
7k views

LXC: How do I mount a folder from the host to the container?

I'm trying to mount a folder on the host to an LXC container. The host has a folder /mnt/ssd/solr_data created (this is currently on the root filesystem, but later I'll mount an SSD drive there, so ...
3
votes
2answers
106 views

Reference documentation for cgroups (control groups) settings

I'm looking for some reference documentation to explain what each of the settings are, for each control group. For example, there's cpuset.cpus, I think setting this to 0 means use all CPUs, setting ...
1
vote
0answers
379 views

lxc networking quesion

I have a similar requirement to the OP of this thread. I want the following configuration: -Physical host (PhyHost) reachable from the network at IP 10.1.101.89 -LXC container (LxcHost) ...
1
vote
0answers
73 views

lxc-unfreeze does not resume the guest if the host is rebooted

Does a guest that has been frozen with lxc-freeze survive a reboot of the host? I.e. after rebooting the host, can the guest be unfrozen with lxc-unfreeze?
5
votes
1answer
539 views

SquashFS image as rootfs in LXC

Is it possible to use a SquashFS filesystem as an LXC rootfs? I can mount an ext3 image as a rootfs just by setting lxc.rootfs to the filename, but if it's any other type of image, lxc-start just says ...
10
votes
3answers
13k views

How to configure external IP addresses for LXC guests?

I'm exploring the LXC features in Ubuntu 12.04 and I really want to set up a network like this: client1: 192.168.56.101/24 lxc-host: 192.168.56.102/24 guest1 192.168.56.201/24 guest2 ...
8
votes
2answers
3k views

Fast X for LXC guest on localhost?

How can I run X apps inside an LXC container efficiently? ssh -Y guest is too slow - there is no graphics acceleration with ssh -Y - everything has to travel over the virtual network with the ...
5
votes
1answer
2k views

How do I disable udevd in systemd?

I'm trying to boot a Fedora Rawhide LXC container from a Fedora 16 host, and it's not working - systemd just keeps dropping into emergency mode. Because udevd doesn't work in LXC containers, I thought ...
4
votes
2answers
660 views

How can I use Skype with lxc?

Under Scientific-linux? https://en.wikipedia.org/wiki/LXC I just want to separate Skype, because I don't trust it. We are using it only to call/chat with people, no file transfers!