Linux Containers (LXC) is a userspace interface for operating system-level virtualization features in the mainline Linux kernel, such as kernel namespaces and control groups (cgroups). These allow multiple distinct user space instances to be run on a single kernel.

learn more… | top users | synonyms

0
votes
1answer
659 views

SSH to Linux Container from Other Machine

I am trying to learn about Linux Containers and this is my first encounter with servers, ssh and many other things that I do not know the terms yet. I create five different containers and authorized ...
3
votes
3answers
992 views

Moving LXC container's backing storage

I have a bunch of LXC containers running on a machine. All of them have their rootfs in the default location /var/lib/lxc/*/rootfs. This directory lives on a rather small partition on the host. I have ...
6
votes
3answers
3k views

How to create user cgroups with systemd

I use unprivileged lxc containers in Arch Linux. Here are the basic system infos: [chb@conventiont ~]$ uname -a Linux conventiont 3.17.4-Chb #1 SMP PREEMPT Fri Nov 28 12:39:54 UTC 2014 x86_64 ...
0
votes
0answers
17 views

LXC ip allocation using DHCP

I'm trying to set up DHCP for my lxcontainers without using lxc-net. The reason for this decision is that I'd like to place my containers in different networks, such that they are unable to talk to ...
1
vote
0answers
15 views

NFS permissions across multiple LXC VM's

I recently changed my home server setup from a basic Ubuntu Server installation running everything to a virtualised environment. I am currently running ProxMox type 1 hypervisor, with several VM's. ...
1
vote
1answer
15 views

How do I make changes to an lxc template?

I normally create containers with: lxc-create -n mycontainer -t debian However I want to bake a few items into that "debian" default template. New user with my ssh key, can sudo without a ...
4
votes
1answer
17 views

LXC: Are downloaded templates verified?

Debian 8.3, LXC 1:1.0.6-6+deb8u2 When LXC downloads the base packages for a Debian container, are the packages verified? Verifying a Debian CD involves comparing signed checksum files against the ...
1
vote
0answers
24 views

SSH/web servers in Linux containers improve security?

Scenario: A 'gateway' machine functioning as a router and firewall, connecting a small LAN to the internet. The machine also runs a webserver (hosting a simple website) and an SSH server, providing ...
2
votes
2answers
384 views

Container lockdown

I was reading about LXC vs OpenVZ and was wondering if this issue has already been solved in more recent updates: OpenVZ has done quite a good job at this, but LXC still has issues here. Even ...
2
votes
0answers
22 views

How to calculate LXC load average

How I can calculate or fetch LoadAverage from LXC container? (/proc/loadavg has load from physical server not from vm) Any ideas ?
1
vote
2answers
130 views

What is the difference between Docker, LXD, and LXC [closed]

What is the difference between Docker, LXD, and LXC. Do they offer the same services or different.
3
votes
1answer
3k views

How to assign an additional IP/hostname to a chrooted environment?

While I can simply have e.g. sshd in a chroot environment ("chrootenv") listen to a different port than its parent ("parentenv"), it would be more convenient to have that environment have an ...
5
votes
1answer
3k views

docker - how to run x desktop in a container?

I'm trying to set up my Linux machine to run multiple guest OSes, one of those being a Windows VM, and another a Linux container. The goal here is to prevent me from messing up the host system, while ...
3
votes
2answers
47 views

Is it possible to mount a device in a process' namespace after unshare()

Say I have a process with an isolated MOUNT namespace pid 1200 the process called unshare() to isolate its namespace from the parent process. I then want to mount a device only accessible outside pid ...
1
vote
2answers
38 views

Which container implementation docker is using

Docker is based on Linux containers and control groups. But I would like to know which implementation of Linux containers , docker is using? Is it using the native/default (LXC execution environment ) ...
3
votes
1answer
19 views

Setup permanent bridge for dynamic network devices from lxc container?

TL:DR How can I make a bridge permanent (survive reboot) without adding a network device to the bridge config in /etc/network/interfaces? Hi, I just started playing around with lxc on ubuntu 14.04. ...
5
votes
4answers
1k views

Can LXC be used to jail instances of an installed browser?

Is it possible to use LXC on a desktop system to confine browsers and other pieces of software that have in the past been shown to be prone to certain kinds of exploits. So what I want to achieve is ...
27
votes
1answer
18k views

Linux LXC vs FreeBSD jail

Are there any notable differences between LXC (Linux containers) and FreeBSD's jails in terms of security, stability & performance? On first look, both approaches look very similar.
2
votes
2answers
46 views

Bash script to insert information after each line of block of data

I wish to write a script that would insert information from the /proc file system to a list of processes generated by top. It would be something like this: Here is the sample output that I get from ...
0
votes
0answers
19 views

Installing qemu-user-static and binfmt-support inside an LXC

I'd like to run armhf executables inside an amd64 LXC container. How to do that? update-binfmts --display shows no qemu interpreters.
1
vote
0answers
60 views

Implement network bridge as userspace program?

I am looking to do some packet filtering/address rewriting for packets which are coming from and going to a lxc container. After some basic research, I figured the best way to do this is to assign a ...
16
votes
5answers
15k views

LXC: How do I mount a folder from the host to the container?

I'm trying to mount a folder on the host to an LXC container. The host has a folder /mnt/ssd/solr_data created (this is currently on the root filesystem, but later I'll mount an SSD drive there, so ...
1
vote
1answer
82 views

Nginx virtual hosts for multiple LXC containers

I am having the following configuration: I have 5 LXC containers that are running nginx. On each container there are a couple of virtual hosts set up in nginx. That means for a container I have ...
5
votes
2answers
877 views

SquashFS image as rootfs in LXC

Is it possible to use a SquashFS filesystem as an LXC rootfs? I can mount an ext3 image as a rootfs just by setting lxc.rootfs to the filename, but if it's any other type of image, lxc-start just says ...
2
votes
1answer
13 views

Firewall that allows to tag or comment rules for easy filtering

I am going to use iptables for port forwarding to listen on requests from my LAN on port 8080 and answer with container at port 80 , like this: iptables -t nat -A PREROUTING -p tcp -d 192.168.1.15 ...
2
votes
1answer
152 views

How to find out how much memory lxc container is allowed to consume?

I'm trying to make ansible set InnoDB buffer pool size to some percent of available memory. But ansible_memtotal_mb and free report how much memory the host has. How do I figure out how much memory is ...
0
votes
0answers
233 views

Trouble installing Unity8-LXC on Mint

(I originally posed this on askubuntu but was told it should be here instead.) I want to install unity8-lxc on Linux Mint so I can check out Unity8 without installing it. Mint 17.3 (Rafaela) of ...
1
vote
0answers
77 views

LXC mount CIFS => permision denied

I'm trying to mount a shared folder /disk from local network with cifs to folder test, but I get permission denied. I can ping 192.168.1.x. So what's the problem with LXC?
1
vote
0answers
82 views

Move lxc container to a different host

I'd like to know, if it is possible to move a lxc container from one lxc host to a different one. Here are the specs of the machines: Current LXC host: Gentoo: Linux 3.7.10-gentoo #1 SMP x86_64 ...
1
vote
1answer
60 views

What's the best way to create a seccomp whitelist for LXC

I try to setup a very restrictive seccomp whitelist for a busybox based LXC container. I started with the file /usr/share/doc/lxc/examples/seccomp-v1.conf from Ubuntu. It seems to contain most useful ...
0
votes
1answer
24 views

How can I list all connections to my host, including those to LXC guests?

I tried both netstat and lsof, but it appears it's not possible to see the connections to my LXC guests. Is there a way to achieve this ... for all guests at once? Essentially what throws me off ...
0
votes
0answers
78 views

Possible to install 32-bit LXC container in 64-bit host with multilib support?

Is it possible to run a 32-bit LXC container (i.e. x86_32-based) on a 64-bit host (i.e. x86_64-based)? Does it work at all? What precautions may I have to take to make this work? My kernel would ...
1
vote
0answers
18 views

Is an unprivileged LXC where the host user itself is mapped to 0 less secure of one where one of its subids is mapped to 0, and why?

Instead of creating "common" LXC unprivileged containers where all the users are mapped to (unprivileged) subuid/gid of my host user, I'm considering a mapping where my host user itself will be mapped ...
0
votes
0answers
54 views

LXC GUI wont start

I'm trying to learn how to create LCX GUI containers. I've followed the guide at https://www.stgraber.org/2014/02/09/lxc-1-0-gui-in-containers/ and watched the YouTube clip ...
5
votes
2answers
3k views

Building unprivileged (userns) LXC container from scratch, by migrating a privileged container to be unprivileged

How can I build a privileged LXC (1.0.3) container (that part I know) and then migrate it successfully to be run unprivileged? That is, I'd like to debootstrap it myself or adjust the lxc-ubuntu ...
4
votes
1answer
158 views

Permanent swapping with lots of free memory

We have a Linux server running Debian 4.0.5 (Kernel 4.0.0-2) with 32G RAM installed and 16G Swap configured. The system uses lxc containers for compartmentalisation, but that shouldn't matter here. ...
0
votes
1answer
144 views

Default gateway is not reachable

I have a vmware player on which i have installed CentOS 6.5. And on that CentOS 6.5 i have installed lxc and on that lxc i have installed centos 6.3. I am using NAT and bridger as a Network adaptor ...
2
votes
0answers
26 views

What is “state-object” in cgroups

I am gathering some idea about lxc, kernel name spaces and cgroups. While reading man lxc-cgroup, i find : lxc-cgroup gets or sets the value of a state-object (e.g., 'cpuset.cpus') in the ...
0
votes
1answer
226 views

How can I reuse the Ansible inventory for local tasks?

I'm trying to make use of Ansible for configuration management and centralized administration. All the machines I'm interested about are actually containers on the host which is going to run Ansible. ...
0
votes
1answer
270 views

LXC Bridge not working on ubuntu 15.04

I'm trying to get lxc containers running with a bridged network connection so the container get ip addresses like the host does from a dhcp server. I red several tutorials, but I couldn't find one ...
1
vote
0answers
36 views

how to tell lxc to not use /usr/share/lxc/templates for making a linux container

This is a follow-up question to How to make a local template for a linux container and point to that Now, in that it seems that a user has to make some changes to /usr/share/lxc/templates in order ...
0
votes
0answers
72 views

`vagrant up` dies in wait_for_communicator.rb:16:in `block in call'

I followed these steps including common advice to enable NFS in my vagrant-lxc setup for mediawiki-vagrant, but I'm getting stuck in this loop which ends with the lines below as I run REDIR_LOG=1 ...
1
vote
0answers
87 views

Default lxc networking suddenly stops to work

I've recently installed lxc on ubuntu 14.04. Networking used to work (lxcbr0 being a NAT interface, DHCP configured using dnsmasq) but after a container restart, the networking does not work any more. ...
1
vote
1answer
298 views

MIT Shared Memory Extension or MIT-SHM over ssh

I successfully created a privileged lxc archlinux container on an archlinux host with lxc. I set up a static ip via dnsmasq and ssh into it and I use xauth to forward X11. I then call programs like ...
0
votes
1answer
26 views

Huge pages in use, but no allocator

I have a process running in an lxc and it allocates some huge pages. However when the lxc is killed off, the huge pages are still allocated, but no process has them... $ grep huge /proc/*/numa_maps ...
6
votes
1answer
1k views

Noninteractive script running over ssh is interrupted as apt-get finishes

When I run the following non interactive script on Ubuntu Server 13.04 it's interrupted when lxc-docker package finishes installation. Script : ssh -o StrictHostKeychecking=no -t -t -i $CERT ...
14
votes
2answers
1k views

Command to run a child process “offline” (no external network) on Linux

I have a program I would like to test in offline mode without taking down my actual network. This program would still need to connect to local sockets, including unix domain sockets and loopback. It ...
7
votes
1answer
3k views

userns container fails to start, how to track down the reason?

When creating a userns (unprivileged) LXC container on Ubuntu 14.04 with the following command line: lxc-create -n test1 -t download -- -d $(lsb_release -si|tr 'A-Z' 'a-z') -r $(lsb_release -sc) -a ...
2
votes
1answer
781 views

Installing MongoDB in Ubuntu LXC Container. Fails with 'invoke-rc.d: initscript mongod, action “start” failed.'

I can't manage to install mongodb in a Ubuntu LXC container. I've set-up the Ubuntu 14.10 host by following these instructions: https://linuxcontainers.org/lxc/getting-started/ lxc-create --version ...
2
votes
0answers
82 views

Moving a whole server into docker instance (or LXC)

It seems to work, to move an existing install into a virtual machine. Is it possible to move a whole Debian server into a docker instance inside the same machine? I would like to get a docker that I ...