Questions tagged [container]
151
questions
0
votes
1answer
13 views
Apport not receiving coredumps from Docker containers
If a program crashes inside a Docker container and reports "core dumped", no core dump is actually created. Instead, there's just an entry in /var/log/apport.log saying sth. like host pid 21500 ...
4
votes
0answers
112 views
Opening /proc/<pid>/net/dev prevents network namespace from expiring, is this expected?
I'm looking for input whether the following observation related to network namespace expiration is expected, or should be reported as bug?
When some process opens /proc/<pid>/net/dev it can ...
0
votes
1answer
12 views
Linux containers [closed]
Linux containers
1- are containers really safe ? (I know that there was some vulnerabilities around like the one found in runc ... but are they really safe in general, since they use syscalls and an ...
0
votes
0answers
19 views
Custom LXC container not getting auto IPv4
I've created an Alpine Linux container, modeled after the image provided on the lxc/lxd image server. I imported the image using the following:
lxc image import metadata.tar.gz rootfs.tar.gz --alias ...
1
vote
0answers
16 views
+50
How to run snap daemon outside a container
It looks like snap programs (installed on ubuntu) are run instide VMs/containers created by Canonical (called multipass).
But what if my daemon needs access to the host filesystem, host system socket ...
1
vote
0answers
23 views
How to use host PTY in container?
I'm learning about container technologies of Linux and wrote a minimal container implementation on my own. I'm currently confused about consoles / terminals for container processes, as I'm "reusing" ...
1
vote
1answer
49 views
Why does `sudo cat /proc/self/attr/current` return “Invalid argument”?
I have read that the current AppArmor profile should be listed in the /proc/self/attr/current file, and that if it's empty the current profile is "unconfined".
But why does cat return "Invalid ...
1
vote
1answer
66 views
How to check the device number of a device in `/proc/1/ns/{ns}`?
How to check the device number of a device in /proc/1/ns/{ns}?
I've read the code for a Go library (see below), which states that it's possible to determine, if a container is in the host namespace ...
0
votes
0answers
28 views
Help need to setup a Ruby on Rails App stack using docker
I have setup a Rails app on a docker container and a apache web server on another container. I need the apache web server to access the rails app for every request made. The issue is I have to ...
0
votes
0answers
40 views
Running multiple isolated NFS Servers
I have a computer on my network which I want to run multiple NFS servers on.
Let's say I have a directory /export, and inside I have dir1, dir2, etc, and I want to export the directories under /export ...
0
votes
0answers
27 views
HDFS on docker containers - is it possible?
we are using Hadoop cluster based on HDP version - 2.6.5 with ambari platform
we want to know if we can use the following HDFS components on docker containers as:
journal nodes
ZK fail controller
...
0
votes
0answers
23 views
Can a Windows hypervisor running inside Linux access Windows-only drivers?
Suppose you have a Linux as host OS. Within a container you run a Windows hypervisor.
Will that Windows hypervisor have access to Windows-only 3D accelerated drivers that Linux doesn't support?
0
votes
0answers
14 views
Distribute network packages between Containers
Is it possible to distribute network packages randomly between several Containers (LXC/LXD)?
Example: We have eth2 (we get raw packets in Promiscuous mode) we want to give 50% of packages to ...
0
votes
1answer
48 views
Bypass X forwarding to sommelier during XRDP session (via xorg) on Crostini
On my Pixelbook, I'm using XRDP to RD into an xorg session of XFCE. It works pretty well except that certain Linux apps called upon within the remote desktop session launch in Chrome OS (DISPLAY=:0) ...
0
votes
1answer
15 views
charset issues with firefox on docker
My host is a Debian Buster build and i'm attempting to build a firefox-esr container (alpine base). While i am able to bring up the brower using --net=host, i see an issue with charsets.
following ...
6
votes
0answers
261 views
How can I make a device available inside a systemd-nspawn container with user namespacing?
I would like to mount an encrypted image file using cryptsetup inside a systemd-nspawn container. However, I get this error message:
[root@container ~]# echo $key | cryptsetup -d - open luks.img luks
...
0
votes
0answers
49 views
systemd-nspawn: Memory Accounting inside the Container
I've used systemd-nspawn, systemd, machinectl and debootstrap under a Debian 9 machine to setup a simple Debian 10 container as:
debootstrap --include=ssh,locales,dbus,net-tools,vim,htop,gnupg2,curl,...
0
votes
1answer
74 views
Bind network link exclusively to Docker container
Is it possible, with Docker, to bind a host network link exclusively to a Docker container?
In other words, to move eth1 (or whatever) into a container so that it is only avalilable to that container ...
0
votes
1answer
138 views
How to test a linux kernel upgrade inside a Container
As I know Docker uses host OS kernel, there is no custom or additional kernel inside container. All containers which run on a machine are sharing this "host" kernel.
Working with a containerized ...
0
votes
0answers
42 views
How to receive journal entries from systemd services running inside a podman container?
As showcased here and here, with podman one can run systemd services inside containers.
Is there a convenient way to view (and store) the embedded services' logs in the host's journal?
-7
votes
1answer
267 views
SED commands for text transformations
Kindly help. RUNNING SUCCESSFUL IN LOCAL
with help of awk achieved this below transformations,
now locally (Linux cent OS with GNU Awk 4.0.2 version) is running perfect, but problem is with the remote ...
0
votes
1answer
89 views
Docker mounted directory and permission
I am running an nginx docker with document root /var/www/html/. I have mounted /opt/app in my host machine to /var/www/html/ of docker. An ftp user webftp is created in hostmachine and is able to ...
0
votes
1answer
136 views
Differences between LXC, KVM and Firejail
Also, what is the closest thing to FreeBSD jails in GNU/Linux?
0
votes
1answer
624 views
How to synchronize timezone in Docker containers
I've some issues to have similar timezone in all containers of a docker-compose stack.
I tried to add TZ=Europe/Paris as environment variable to containers, and also tried to use :
volumes:
-v /...
1
vote
1answer
48 views
Xorg: Having authenticated in X as a remote user allows me to have access to another users' applications?
I'm trying to run a docker container (for security reasons) from which I want to see a GUI application.
I'm between two options at the moment, I'm not sure if I should forward its traffic to my X ...
0
votes
0answers
42 views
Is it possible to export/save Docker's full Linux OS system as a rootfs.tar.gz?
I would like to export or save the full Linux OS, i.e, all root directories ā /bin, /home, /usr, etc. as a rootfs.tar.gz and to view and access all full root directories.
If I mount the Docker's ...
0
votes
1answer
103 views
Run a container with access to a device without running it as root
I want to run a zigbee2mqtt container.
I need to bind a device to the container doing :
devices:
- "/dev/serial/by-id/usb-Texas_Instruments_\
TI_CC2531_USB_CDC___0X00124B00194AD935-if00:/dev/...
0
votes
2answers
427 views
How to run docker inside an lxc container?
I have unprivileged lxc container on Arch host created like this:
lxc-create -n test_arch11 -t download -- --dist archlinux --release current --arch amd64
And it doesn't run docker. What I did ...
0
votes
1answer
50 views
HELP - problem setting up Linux FW with two interfaces
First of all, sorry about my English lul
I have a pretty simple infrastructure running under docker:
container1: iptables firewall;
container2: https repository;
container3: ansible server.
...
0
votes
0answers
72 views
Why export TERM=ansi fixes terminal and shell emulation incompatibilities?
I was running a arch linux container within a linux host with systemd-nspawn. The container worked perfectly, but something weird happened. The backspace would create a white space character. After ...
1
vote
2answers
74 views
What parts of the kernel are not namespace aware? [closed]
I've started to learn Docker security, and so have come across cgroups, namespaces, and capabilities, which together with chroot form the basis of modern container technologies.
Historically many ...
0
votes
1answer
156 views
How to generate memory dump from outside a running container
I have running a .net service inside a container. And I am observing the memory consumption of this service inside the container is gradually going up to the limit set to that container and after it ...
0
votes
0answers
307 views
How to fix apt-get update not working on my linux container
I have created a Linux Container using below command.
sudo LXC create k3_7.8 container_name
I am not able to run the apt-get update command after container creation successfully. Please see the ...
1
vote
0answers
16 views
Problem loading CentOS on Linux Virtual Box
I am trying to install CentOS 07-1810 on my new Virtualbox and I was getting an error message. It looks like the software is bigger than the available size of my System hard disk, but being a new user ...
3
votes
1answer
514 views
User switching within a Docker container's context
In a self-built Docker container, I want/need to run applications under a specific UID and GID. Trying to use a UID:GID pair that does not exist on the host fails.
Remarks
the intended UID:GID(s) do ...
0
votes
0answers
17 views
how to mount host machine directory to overlay fs?
I want to mount host machine directory to overlay fs. Now, I have a overlay directory:
.
āāā lower
ā āāā file1
ā āāā file2
āāā merged
ā āāā file1
ā āāā file2
ā āāā file3
āāā upper
ā āāā ...
0
votes
1answer
204 views
How to pause a docker container then reboot host system and unpause container?
Need to restart host os but how to save the state
of the running containers and after the host system
rebooted restore the containers from saved point?
2
votes
2answers
530 views
logrotate with only size option does not rotate. This is inside Alpine docker container
I have below configuration for access logs
cat /etc/logrotate.d/logrotate_nginx.conf
/nginx/access/logs/*.log {
rotate 2
size 1k
missingok
compress
notifempty
copytruncate
}
There is no ...
0
votes
0answers
65 views
systemd-nspawn outputs terminated by signal KILL and returns
Inside a script (namely container.sh), I start a container with the following command:
sudo systemd-nspawn --share-system -D /media/diskimage/ sudo /bin/bash -c "script.sh 2>&1 | tee script....
0
votes
0answers
100 views
Can I redirect logs from journald inside container to docker logs?
I have a container using systemd inside it. The command into the container is /usr/sbin/init. This is a requirement so I cannot change that.
I also have a custom service running inside that container ...
1
vote
2answers
491 views
Errors while trying to install packages using tasksel in Debian 9 containers
I'm running Docker desktop community 2.0.3.
I ran the official nginx and Apache HTTP server containers from docker hub (hub.docker.com).
The container images are based on Debian 9.
Then, I tried to ...
2
votes
1answer
204 views
Running a different configuration.nix file into a virtual machine from a non-nixos operating system
In the amazing nixos, it is possible to launch a lightweight container that will run a system whose configuration.nix file is different from the host configuration by using:
nixos-rebuild build-vm -I ...
1
vote
0answers
79 views
mount proc filestsrem inside namespace
I had a rootfs of a linux os (like ubuntu or centos) and removed mount command inside that .
now, is there any way to mount proc filesystem with nsenter or unshare or any other command inside a ...
1
vote
0answers
30 views
Do not allow detach for one bash
I would like to know if it's possible to forbid all detached-like things for a given shell.
More precisely, I'd like to make sure that if a command runs in a specific shell, when the command stops, ...
0
votes
0answers
294 views
execve(2) not launching system commands
I am trying to implement a container, and for that I create a process using the clone(2) system call with the appropriate flags:
if ((child_pid = clone(child_main, process_struct.Stack + ...
0
votes
1answer
58 views
pivot_root(2) causes system crash
I am trying to change the root of my process to new file system that I mounted at /tmp/mount_dir and i have created another directory inside it /tmp/mount_dir/inner_mount_dir, and according to the man ...
0
votes
1answer
95 views
Ejabberd Victim of Systemd Security Enhancements?
I can't get ejabberd to start on a Ubuntu 18.01 Server that's installed inside a Proxmox linux container.
During install I get this error:
I read a bug report that suggests that the problem has to ...
0
votes
1answer
73 views
Is there something which a container can't be used for while a Linux virtual machine can?
When would you choose to use a Linux virtual machine instead of a docker container?
Is there something which a docker container can't be used for while a Linux virtual machine can?
Is it correct ...
-4
votes
1answer
229 views
What is “a light-weight namespace container” created by systemd-spawn?
man systemd-nspawn says
systemd-nspawn may be used to run a command or OS in a light-weight namespace container.
In many ways it is similar to chroot(1), but more powerful since it fully ...
-3
votes
1answer
106 views
What is a docker container from Linux's point of view? [closed]
A docker container is a concept understood by docker daemon.
What is a docker container from Linux's point of view?
You can stop, kill and destroy a container. Is a container itself a
process?
Is a ...
