Questions tagged [container]
The container tag has no usage guidance.
0
votes
1answer
38 views
Ejabberd Victim of Systemd Security Enhancements?
I can't get ejabberd to start on a Ubuntu 18.01 Server that's installed inside a Proxmox linux container.
During install I get this error:
I read a bug report that suggests that the problem has to ...
0
votes
1answer
63 views
Is there something which a container can't be used for while a Linux virtual machine can?
When would you choose to use a Linux virtual machine instead of a docker container?
Is there something which a docker container can't be used for while a Linux virtual machine can?
Is it correct ...
-5
votes
1answer
49 views
What is “a light-weight namespace container” created by systemd-spawn?
man systemd-nspawn says
systemd-nspawn may be used to run a command or OS in a light-weight namespace container.
In many ways it is similar to chroot(1), but more powerful since it fully ...
-3
votes
1answer
70 views
What is a docker container from Linux's point of view? [closed]
A docker container is a concept understood by docker daemon.
What is a docker container from Linux's point of view?
You can stop, kill and destroy a container. Is a container itself a
process?
Is a ...
0
votes
0answers
21 views
Container: lxc-execute fails to start with libcap read error
When using lxc 2.0.6 version to start unpriviliged container with lxc-execute in embedded linux.Container is failed to start.
We have enabled lxc.cap.keep in lxc configuration.
init.lxc.static is ...
0
votes
1answer
37 views
Docker ubunbu container , can't edit the source.list, no editor present
Just installed a docker Ubuntu container.
All the repositories in the sources list are commented (#) and so I neither can update nor install anything via APT.
There is no editor like nano ,vim etc. ...
0
votes
0answers
12 views
Can /sys be sanitized for use with linux namespaces (i.e. via systemd-nspawn)?
The tool systemd-nspawn is descriped as allowing this:
systemd-nspawn - Spawn a command or OS in a light-weight container
systemd-nspawn may be used to run a command or OS in a light-weight
...
4
votes
1answer
61 views
How do I find all interfaces that have been configured in Linux, including those of containers?
I know that you can display interfaces by doing ip a show. That only displays the interfaces that the host can see, but virtual interfaces configured by containers don't appear in this list. I've ...
0
votes
0answers
49 views
how to ssh into a lxc-container
I need a user that connects to my host with ssh, which is forwarded into a lxc-container.
My solution is:
Match User monitoring
ChrootDirectory /data/foreign_projects/monitoring
ForceCommand lxc-...
0
votes
0answers
44 views
Docker: use app - Skype from container instead of host
I want to maintain host machine that installed docker with minimal packages as possible - I'm using archlinux that is rolling-based system, currently I have 142 packages.
But when I'm at work, I ...
1
vote
0answers
16 views
How to ensure a container is started after another?
I use systemd-nspawn to run containers. There are mostly independent, except for two which should be started one after the other.
Is there a way to ensure this? Something similar to After= for ...
0
votes
0answers
28 views
Difference between SUID and user namespace
I was reading up on rootless containers which have the possibility to have unprivileged non-root containers where the parent process or tool that starts the application container itself runs as "non-...
0
votes
0answers
41 views
How come this service is not running? Why is it exiting? (Docker CentOS container)
I am trying to install Tenable Security Center in a CentOS container upon a base install of Debian.
Inside my container, the following returns when inspecting SecurityCenter service (suppose to ...
0
votes
1answer
214 views
How can I run the sudo command in Python code under CentOS in Docker
I am trying to access the docker image labels from Python as follows
hostname = socket.gethostname()
cmd = "sudo curl --unix-socket /var/run/docker.sock http:/containers/" + hostname + "/json"
output ...
1
vote
1answer
100 views
How to replace binary file in /bin inside a Linux container
I want to make some weird container, one of my tasks were to replace the uname binary.
I coded it:
#include <stdio.h>
int main() {
printf("This is a fake uname\n");
return 0;
}
...
3
votes
1answer
27 views
Should I set the time in a container?
I have a few containers (systemd-nspawn based) and I am wondering whether I should set up the time (via systemd-timesyncd) or is it maintained by the host?
1
vote
1answer
43 views
What containerization methods are actively being worked on for FreeBSD?
What is the state of containerization on FreeBSD as of FreeBSD 12? I've read about a few paths forward so far:
Jails -- mature, but not a container mechanism ...
Jetpack -- There is repository ...
-1
votes
1answer
272 views
Differences between Container Linux, Red Hat CoreOS and Fedora CoreOS?
TL;DR
Is "Container Linux", "Red Hat CoreOS" and "Fedora CoreOS" basically the same? What are the differences in between?
TS; DR
I understood that "CoreOS" was renamed to "Container Linux by CoreOS"...
1
vote
2answers
49 views
Layered or Virtual filesystem on Linux
I basically would like to do something like this: Let's imagine a utility called layer.
# sudo layer somefile apt install gcc
layer would launch apt in some sort of container. Apt would think it ...
0
votes
0answers
25 views
What is the “Securebits:” in capsh --print
I ran capsh --print inside a container and saw this:
Securebits: 00/0x0/1'b0
secure-noroot: no (unlocked)
secure-no-suid-fixup: no (unlocked)
secure-keep-caps: no (unlocked)
What is Securebit ...
3
votes
1answer
160 views
ssh routing between multiple linux system containers transparently
I have system where I run multiple containers. Each container is a linux system with a specific purpose and every container has a ssh server enabled. I want to make an entity that manage new ssh ...
0
votes
2answers
79 views
Does firejail rely on the application crashing out and why can't we use named pipes to .Xauthority?
The purpose of jailing an Xorg application is to prevent it from accessing @/tmp/X11/X0 and /tmp/X11/X0 and then re-using its MIT-MAGIC-COOKIE to steal from other apps that are connected to the X ...
0
votes
1answer
37 views
Python application which is running inside a docker container is not showing up
I have created a python application using flask module and tested it locally and it is working fine. So i have tried to deploy it using a ubuntu docker container, but now the application is not ...
0
votes
1answer
99 views
How to Keep Network Namespace after reboot
I have created a network namespace, but after I have reboot, it've been removed.
I don't found an answer at this problem on the internet, so this is why I'm asking you :
Is there a way to keep a ...
4
votes
1answer
799 views
What does “process accounting” mean in Linux?
I'm working with Docker in action's book, and I have seen the term "process accounting" several times. I am in a containerization of the application context.
I would like to know more about this ...
1
vote
1answer
208 views
How to make systemd-nspawn work with ufw firewall?
I'm running a systemd-nspawn container (Debian 9, host also Debian 9) with VirtualEthernet=yes and some ports forwarded, e.g. Port=tcp:443:443. I.e. a web server runs in the container and should be ...
0
votes
1answer
45 views
Rancher - HTTPS cert issue - installing cattle docker container
I am trying to add a new host to my Rancher environment (using v1.6.17). I add the public IP and hostname then copy & paste the Docker link to the other host. I'm getting CA certificate errors as ...
0
votes
0answers
112 views
Any Linux containers with point-to-point host-guest network support?
OpenVZ would be the only one I can name myself.
I've looked through some options of widely used "frameworks": Docker, rkt, LXC/LXD — all those are bridge-"centric" or at least based on broadcast ...
2
votes
1answer
240 views
LXC container network speed issue
I am running openstack on LXC container and i found inside my LXC container network is very slow but from host its very fast
HOST
[root@ostack-infra-01 ~]# time wget http://mirror.cc.columbia.edu/...
1
vote
0answers
81 views
Ansible: failed to ping a linux container
Continuig with my ansible learning, I already fixed how to Ansible: How to parse an inventory source but now I ran into a new problem. He executes the following 2 commands (but im not sure if he does ...
0
votes
1answer
243 views
Unable to run Visual Studio Code with GUI when using a Singularity container: Get gtk, dbus and dconf errors
I am trying to avoid installing lots of dependencies of another software (Blender) on my laptop running an Ubuntu 16.04. Therefore, I decided to I build a Singularity container that has those ...
0
votes
0answers
54 views
Writing a systemd process that checks it's status with `systemctl`?
I have a third party (Microsoft) that bundles a product (SQL Server 2017) as a systemd task. Everything pretty much works, but their bundling actually checks if the service is running with ...
0
votes
1answer
109 views
LXD Container/What's the Preferred Way of Accessing Files from Host
I can access files inside a LXD container by running lxc from the host:
root@Host# lxc exec Container_Name bash
root@Container_Name# touch /tmp/hello
Or by accessing the files directly from the host ...
0
votes
0answers
31 views
Sharing Linux character devices with the virtual guests (virtual machines/containers)
I'm trying to share Linux character devices with different guests (Virtual machines/Containers). My goal is that every guest is able to read every incoming byte on these devices. I was thinking about ...
4
votes
1answer
575 views
What does “if1@if2” mean in interface name in output of “ip address” command on Ubuntu
What does at sign (@) mean in interface name in output of "ip address" command (or the "ip link" command) on Ubuntu, for example interface name "eth0@if44" in the following output:
root@aafa1fc24a0b:/...
0
votes
0answers
82 views
Error in docker network
Here is a link to my relevant configuration
https://github.com/TheGlitchr/acidbox
I'm trying to create a deployable webstack for my own user that's easy to migrate and recreate without data loss while ...
1
vote
0answers
102 views
Access host's systemd from firejail --overlay namespace
Instead of initializing a whole discrete system, I want to run isolated programs and services within the same host. I can already achieve that with firejail --noprofile --overlay, but the problem is ...
2
votes
2answers
81 views
How can we easily revert the changes made by experiements with unfamiliar commands? [closed]
Sometimes I would like to experiment with some commands which I am unfamiliar with (e.g. xmodmap), and also have the ability to revert the changes very easily without knowing much about the commands ...
1
vote
2answers
414 views
How do I run an X server in a container on top of Wayland without the Xwayland overhead?
There's a similar question here but the scenario and objectives are different. The author cares about "just making it work", while I do also care about performance and efficiency.
What I'm trying to ...
0
votes
1answer
26 views
Docker to network VM networking
I'm experimenting with docker and I'm looking for the best way to have my container to communicate with a MYSQL DB running on a separate VM. The MYSQL DB is on the host's network.
SO setup is:
...
1
vote
2answers
44 views
Give application instances their own IPs? Extremely lightweight containerization?
About two years ago I received a note with a method, but I was not able to find the note or the method right now. Anyone know the easiest way to achieve this?
J.E.B.
1
vote
0answers
414 views
LXC does not stop, Failed to connect to bus
I just created a new LXC with the following command:
lxc-create -n ${NAME} -t download
I choosed debian, stretch and amd64 as characteristics. I'm using the LXC in unprivileged mode with UID/GID ...
2
votes
1answer
74 views
How do I setup Postfix to fulfill these requirements?
I'm having difficulty figuring out how to create a particular Postfix configuration for a Postfix instance that will be running inside a container.
Here are my requirements:
Disallow relaying unless ...
4
votes
0answers
893 views
How can I start an LXC (linux container) X server on separate TTY?
Apart from my default X server, which I run on tty1, I would like to start another one from within a linux container.
On tty2 (Ctrl+Alt+F2) I log in, then run sudo lxc-start -n c --foreground.
Then, ...
3
votes
1answer
206 views
Linux From Scratch Inside of an LXC Container
Is it possible to build ‘Linux From Scratch’ (LFS) inside of an LXC container, as opposed to creating a dedicated partition per the LFS instructions?
1
vote
1answer
5k views
Failed to get D-Bus connection: Operation not permitted
While I can login to the running container and even enter the Asterisk console, below, can't seem to see the status for the Asterisk service:
ubuntu@ip-172-31-14-19:~$
ubuntu@ip-172-31-14-19:~$ sudo ...
0
votes
0answers
582 views
PXE Network Booting for Docker Containers
I would like to boot a Docker container using PXE network booting.
I've read that Docker containers don't really boot and I've also read about the fundamentals of network booting. I understand that ...
2
votes
1answer
339 views
Can Kernel Same page Merging share page cache between containers?
KSM allows identical pages of memory in VMs to be merged, particularly including common OS / application files cached in RAM.
Can KSM be used to similarly reduce the memory requirements of containers?...
2
votes
1answer
870 views
How to bootstrap an arch base system, probably without pacstrap
I run an Ubuntu server on which I use systemd-nspawn to start containers. Containers need a base system which, in the case of Ubuntu, can be bootstrapped by debootstrap.
I would like now to try Arch....
1
vote
0answers
542 views
Accessing a serial device from LXC guest
I have a Fedora 26 host running a privileged Ubuntu 16.04 guest in an LXC container. My goal is to connect to a serial device (/dev/ttyACM0) from the LXC guest.
I created the guest OS with the ...
