Questions tagged [container]
The container tag has no usage guidance.
0
votes
0answers
11 views
Can I redirect logs from journald inside container to docker logs?
I have a container using systemd inside it. The command into the container is /usr/sbin/init. This is a requirement so I cannot change that.
I also have a custom service running inside that container ...
1
vote
2answers
19 views
Errors while trying to install packages using tasksel in Debian 9 containers
I'm running Docker desktop community 2.0.3.
I ran the official nginx and Apache HTTP server containers from docker hub (hub.docker.com).
The container images are based on Debian 9.
Then, I tried to ...
0
votes
1answer
11 views
Running a different configuration.nix file into a virtual machine from a non-nixos operating system
In the amazing nixos, it is possible to launch a lightweight container that will run a system whose configuration.nix file is different from the host configuration by using:
nixos-rebuild build-vm -I ...
1
vote
0answers
33 views
mount proc filestsrem inside namespace
I had a rootfs of a linux os (like ubuntu or centos) and removed mount command inside that .
now, is there any way to mount proc filesystem with nsenter or unshare or any other command inside a ...
0
votes
0answers
26 views
Do not allow detach for one bash
I would like to know if it's possible to forbid all detached-like things for a given shell.
More precisely, I'd like to make sure that if a command runs in a specific shell, when the command stops, ...
0
votes
0answers
87 views
execve(2) not launching system commands
I am trying to implement a container, and for that I create a process using the clone(2) system call with the appropriate flags:
if ((child_pid = clone(child_main, process_struct.Stack + ...
0
votes
1answer
33 views
pivot_root(2) causes system crash
I am trying to change the root of my process to new file system that I mounted at /tmp/mount_dir and i have created another directory inside it /tmp/mount_dir/inner_mount_dir, and according to the man ...
0
votes
1answer
46 views
Ejabberd Victim of Systemd Security Enhancements?
I can't get ejabberd to start on a Ubuntu 18.01 Server that's installed inside a Proxmox linux container.
During install I get this error:
I read a bug report that suggests that the problem has to ...
0
votes
1answer
66 views
Is there something which a container can't be used for while a Linux virtual machine can?
When would you choose to use a Linux virtual machine instead of a docker container?
Is there something which a docker container can't be used for while a Linux virtual machine can?
Is it correct ...
-5
votes
1answer
79 views
What is “a light-weight namespace container” created by systemd-spawn?
man systemd-nspawn says
systemd-nspawn may be used to run a command or OS in a light-weight namespace container.
In many ways it is similar to chroot(1), but more powerful since it fully ...
-3
votes
1answer
71 views
What is a docker container from Linux's point of view? [closed]
A docker container is a concept understood by docker daemon.
What is a docker container from Linux's point of view?
You can stop, kill and destroy a container. Is a container itself a
process?
Is a ...
0
votes
0answers
25 views
Container: lxc-execute fails to start with libcap read error
When using lxc 2.0.6 version to start unpriviliged container with lxc-execute in embedded linux.Container is failed to start.
We have enabled lxc.cap.keep in lxc configuration.
init.lxc.static is ...
0
votes
1answer
45 views
Docker ubunbu container , can't edit the source.list, no editor present
Just installed a docker Ubuntu container.
All the repositories in the sources list are commented (#) and so I neither can update nor install anything via APT.
There is no editor like nano ,vim etc. ...
0
votes
0answers
15 views
Can /sys be sanitized for use with linux namespaces (i.e. via systemd-nspawn)?
The tool systemd-nspawn is descriped as allowing this:
systemd-nspawn - Spawn a command or OS in a light-weight container
systemd-nspawn may be used to run a command or OS in a light-weight
...
4
votes
1answer
90 views
How do I find all interfaces that have been configured in Linux, including those of containers?
I know that you can display interfaces by doing ip a show. That only displays the interfaces that the host can see, but virtual interfaces configured by containers don't appear in this list. I've ...
0
votes
0answers
75 views
how to ssh into a lxc-container
I need a user that connects to my host with ssh, which is forwarded into a lxc-container.
My solution is:
Match User monitoring
ChrootDirectory /data/foreign_projects/monitoring
ForceCommand lxc-...
0
votes
0answers
80 views
Docker: use app - Skype from container instead of host
I want to maintain host machine that installed docker with minimal packages as possible - I'm using archlinux that is rolling-based system, currently I have 142 packages.
But when I'm at work, I ...
1
vote
0answers
16 views
How to ensure a container is started after another?
I use systemd-nspawn to run containers. There are mostly independent, except for two which should be started one after the other.
Is there a way to ensure this? Something similar to After= for ...
0
votes
0answers
42 views
Difference between SUID and user namespace
I was reading up on rootless containers which have the possibility to have unprivileged non-root containers where the parent process or tool that starts the application container itself runs as "non-...
0
votes
0answers
55 views
How come this service is not running? Why is it exiting? (Docker CentOS container)
I am trying to install Tenable Security Center in a CentOS container upon a base install of Debian.
Inside my container, the following returns when inspecting SecurityCenter service (suppose to ...
0
votes
1answer
405 views
How can I run the sudo command in Python code under CentOS in Docker
I am trying to access the docker image labels from Python as follows
hostname = socket.gethostname()
cmd = "sudo curl --unix-socket /var/run/docker.sock http:/containers/" + hostname + "/json"
output ...
1
vote
1answer
129 views
How to replace binary file in /bin inside a Linux container
I want to make some weird container, one of my tasks were to replace the uname binary.
I coded it:
#include <stdio.h>
int main() {
printf("This is a fake uname\n");
return 0;
}
...
3
votes
1answer
28 views
Should I set the time in a container?
I have a few containers (systemd-nspawn based) and I am wondering whether I should set up the time (via systemd-timesyncd) or is it maintained by the host?
1
vote
1answer
45 views
What containerization methods are actively being worked on for FreeBSD?
What is the state of containerization on FreeBSD as of FreeBSD 12? I've read about a few paths forward so far:
Jails -- mature, but not a container mechanism ...
Jetpack -- There is repository ...
2
votes
1answer
488 views
Differences between Container Linux, Red Hat CoreOS and Fedora CoreOS?
TL;DR
Is "Container Linux", "Red Hat CoreOS" and "Fedora CoreOS" basically the same? What are the differences in between?
TS; DR
I understood that "CoreOS" was renamed to "Container Linux by CoreOS"...
1
vote
2answers
65 views
Layered or Virtual filesystem on Linux
I basically would like to do something like this: Let's imagine a utility called layer.
# sudo layer somefile apt install gcc
layer would launch apt in some sort of container. Apt would think it ...
0
votes
0answers
32 views
What is the “Securebits:” in capsh --print
I ran capsh --print inside a container and saw this:
Securebits: 00/0x0/1'b0
secure-noroot: no (unlocked)
secure-no-suid-fixup: no (unlocked)
secure-keep-caps: no (unlocked)
What is Securebit ...
3
votes
1answer
185 views
ssh routing between multiple linux system containers transparently
I have system where I run multiple containers. Each container is a linux system with a specific purpose and every container has a ssh server enabled. I want to make an entity that manage new ssh ...
0
votes
2answers
93 views
Does firejail rely on the application crashing out and why can't we use named pipes to .Xauthority?
The purpose of jailing an Xorg application is to prevent it from accessing @/tmp/X11/X0 and /tmp/X11/X0 and then re-using its MIT-MAGIC-COOKIE to steal from other apps that are connected to the X ...
0
votes
1answer
52 views
Python application which is running inside a docker container is not showing up
I have created a python application using flask module and tested it locally and it is working fine. So i have tried to deploy it using a ubuntu docker container, but now the application is not ...
0
votes
1answer
135 views
How to Keep Network Namespace after reboot
I have created a network namespace, but after I have reboot, it've been removed.
I don't found an answer at this problem on the internet, so this is why I'm asking you :
Is there a way to keep a ...
4
votes
1answer
1k views
What does “process accounting” mean in Linux?
I'm working with Docker in action's book, and I have seen the term "process accounting" several times. I am in a containerization of the application context.
I would like to know more about this ...
1
vote
1answer
253 views
How to make systemd-nspawn work with ufw firewall?
I'm running a systemd-nspawn container (Debian 9, host also Debian 9) with VirtualEthernet=yes and some ports forwarded, e.g. Port=tcp:443:443. I.e. a web server runs in the container and should be ...
0
votes
1answer
60 views
Rancher - HTTPS cert issue - installing cattle docker container
I am trying to add a new host to my Rancher environment (using v1.6.17). I add the public IP and hostname then copy & paste the Docker link to the other host. I'm getting CA certificate errors as ...
0
votes
0answers
115 views
Any Linux containers with point-to-point host-guest network support?
OpenVZ would be the only one I can name myself.
I've looked through some options of widely used "frameworks": Docker, rkt, LXC/LXD — all those are bridge-"centric" or at least based on broadcast ...
2
votes
1answer
283 views
LXC container network speed issue
I am running openstack on LXC container and i found inside my LXC container network is very slow but from host its very fast
HOST
[root@ostack-infra-01 ~]# time wget http://mirror.cc.columbia.edu/...
1
vote
0answers
85 views
Ansible: failed to ping a linux container
Continuig with my ansible learning, I already fixed how to Ansible: How to parse an inventory source but now I ran into a new problem. He executes the following 2 commands (but im not sure if he does ...
0
votes
1answer
278 views
Unable to run Visual Studio Code with GUI when using a Singularity container: Get gtk, dbus and dconf errors
I am trying to avoid installing lots of dependencies of another software (Blender) on my laptop running an Ubuntu 16.04. Therefore, I decided to I build a Singularity container that has those ...
0
votes
0answers
57 views
Writing a systemd process that checks it's status with `systemctl`?
I have a third party (Microsoft) that bundles a product (SQL Server 2017) as a systemd task. Everything pretty much works, but their bundling actually checks if the service is running with ...
0
votes
1answer
124 views
LXD Container/What's the Preferred Way of Accessing Files from Host
I can access files inside a LXD container by running lxc from the host:
root@Host# lxc exec Container_Name bash
root@Container_Name# touch /tmp/hello
Or by accessing the files directly from the host ...
4
votes
1answer
725 views
What does “if1@if2” mean in interface name in output of “ip address” command on Ubuntu
What does at sign (@) mean in interface name in output of "ip address" command (or the "ip link" command) on Ubuntu, for example interface name "eth0@if44" in the following output:
root@aafa1fc24a0b:/...
1
vote
0answers
112 views
Access host's systemd from firejail --overlay namespace
Instead of initializing a whole discrete system, I want to run isolated programs and services within the same host. I can already achieve that with firejail --noprofile --overlay, but the problem is ...
2
votes
2answers
87 views
How can we easily revert the changes made by experiements with unfamiliar commands? [closed]
Sometimes I would like to experiment with some commands which I am unfamiliar with (e.g. xmodmap), and also have the ability to revert the changes very easily without knowing much about the commands ...
1
vote
2answers
460 views
How do I run an X server in a container on top of Wayland without the Xwayland overhead?
There's a similar question here but the scenario and objectives are different. The author cares about "just making it work", while I do also care about performance and efficiency.
What I'm trying to ...
0
votes
1answer
26 views
Docker to network VM networking
I'm experimenting with docker and I'm looking for the best way to have my container to communicate with a MYSQL DB running on a separate VM. The MYSQL DB is on the host's network.
SO setup is:
...
1
vote
2answers
44 views
Give application instances their own IPs? Extremely lightweight containerization?
About two years ago I received a note with a method, but I was not able to find the note or the method right now. Anyone know the easiest way to achieve this?
J.E.B.
1
vote
0answers
443 views
LXC does not stop, Failed to connect to bus
I just created a new LXC with the following command:
lxc-create -n ${NAME} -t download
I choosed debian, stretch and amd64 as characteristics. I'm using the LXC in unprivileged mode with UID/GID ...
2
votes
1answer
77 views
How do I setup Postfix to fulfill these requirements?
I'm having difficulty figuring out how to create a particular Postfix configuration for a Postfix instance that will be running inside a container.
Here are my requirements:
Disallow relaying unless ...
4
votes
0answers
977 views
How can I start an LXC (linux container) X server on separate TTY?
Apart from my default X server, which I run on tty1, I would like to start another one from within a linux container.
On tty2 (Ctrl+Alt+F2) I log in, then run sudo lxc-start -n c --foreground.
Then, ...
3
votes
1answer
225 views
Linux From Scratch Inside of an LXC Container
Is it possible to build ‘Linux From Scratch’ (LFS) inside of an LXC container, as opposed to creating a dedicated partition per the LFS instructions?
