Questions tagged [lxc]
Linux Containers (LXC) is a userspace interface for operating system-level virtualization features in the mainline Linux kernel, such as kernel namespaces and control groups (cgroups). These allow multiple distinct user space instances to be run on a single kernel. Note: the 3 letters "lxc" command is part of LXD, not LXC. Please use the LXD tag if your question is about LXD rather than only about LXC.
316
questions
1
vote
2
answers
35
views
LXD ZFS storage pool on lvm filesystem?
The default filesystem of my machine is lvm (Ubuntu 22.04). I would like to spin up LXD/LXC virtual machines to run some Apache projects like Hadoop and Spark. When setting up Hadoop there is a step ...
- 151
0
votes
1
answer
51
views
How to SSH to a host and attach an LXC container in one command, properly?
I'd like to connect to a LXC container through Proxmox via SSH without having SSH access to the container itself, so I can get the desired outcome by connecting to the Proxmox host first and then ...
- 197
0
votes
0
answers
12
views
LXD VM storage restrictions
I am using the dirdrive for my lxd and I have created a dedicated storage pool for my ongoing project. This pool is located in my one and only big data partition of my machine. In this project I need ...
- 151
0
votes
0
answers
214
views
LXC - using generated apparmor profiles, but apparmor status shows unconfined
I have been using unprivileged lxc containers (running as root but with user namespaces) using the following config to make use of apparmor:
lxc.apparmor.profile = generated
lxc.apparmor.allow_nesting ...
- 143
1
vote
1
answer
1k
views
No network in Waydroid: network is unreachable
I've followed Waydroid arch-wiki page and have installed waydroid, binder_linux-dkms and waydroid-image-gapps.
When I run waydroid it works perfectly except for the network part.
I do have new ...
- 1,062
0
votes
3
answers
563
views
What is the ID of nobody user and nogroup group?
When trying LXD, I tried to share a folder from my computer with the LXC Container, but I could not write in the folder in the container because ls -l shows that it belongs to user nobody and group ...
- 139
1
vote
4
answers
133
views
Persist resolvectl changes across reboots
I'm using LXC containers, and resolving CONTAINERNAME.lxd to the IP of the specified container, using:
sudo resolvectl dns lxdbr0 $bridge_ip
sudo resolvectl domain lxdbr0 '~lxd'
This works great! But ...
- 392
0
votes
0
answers
97
views
How can I monitor individual containers resource usage in LXD/C
I would like to be able to view which individual containers are using what percentage of CPU, memory etc.
I have installed HTOP but it doesn't tell me which container, and I have 20+ containers ...
0
votes
0
answers
228
views
LXD failed to start container, showing "Failed to mount "proc" onto "/var/snap/lxd/common/lxc//proc" "
Hello:) Recently I have been trying to run LXD containers on my NanoPi R4S which is an arm64 device. But containers won't start and that bothered me for about two weeks. After typing sudo lxc launch ...
- 1
1
vote
0
answers
161
views
How to set permissions for passthrough USB device in libvirt LXC guest?
I have an lxc type guest in libvirt to which I pass through a USB device like this:
<hostdev mode="subsystem" type="usb" managed="yes">
<source>
<...
- 289
0
votes
1
answer
469
views
Docker on Debian Failing to Bind to Port 80
I am running Docker on Debian 11. I deploy an Nginx container and it fails to bind to port 80 even though port 80 is not in use by any other process. I even tried running Docker as root.
Here's the ...
0
votes
0
answers
192
views
X11 display on my laptop for a LXD container on a remote server
I can connect to a UNIX server from my laptop, and I have X11Forwarding properly enabled, i.e., when I login to the server using
ssh -X <username>@<IP>
and I run xclock I can see a clock ...
- 1
2
votes
2
answers
245
views
Why is the Linux command `unshare --pid=p --mount=m` not creating a persistent namespace?
From everything I have read in the unshare and nsenter man pages, I should be able to bind-mount a directory to itself, mount --make-private the directory, and then use files within that directory to ...
- 263
1
vote
1
answer
125
views
LXC: exposed file from host has 000 permissions in rootfs dir
I have the following in the /var/lib/lxc/container1/config so my container can see the file from the host.
lxc.mount.entry = /etc/someconf.conf etc/someconf.conf none bind,create=file 0 0
I can see ...
- 11
0
votes
0
answers
405
views
ZeroTier L2/bridge in LXC container under PVE: ZeroTier interface not added to the bridge
I would like to setup a L2/bridge between my LAN and few ZeroTier remote clients, as described in the official documentation, with a Raspberry Pi and with an OpenWRT router
On some site I currently ...
- 101
2
votes
1
answer
452
views
Why is systemd stuck at 100% inside my new Ubuntu LXC container?
I am trying to create an LXC container with xubuntu desktop inside it. This is on a fresh Ubuntu 22.04 install with sudo lxc launch images:ubuntu/22.04 workstation executed to create the container, ...
- 8,141
1
vote
1
answer
123
views
Is it possible to use a file as Filesystem?
Here is the origin of my question:
I'm running Linux containers with LXD snap version at Ubuntu 22.04 on a VPS. The root file system of the VPS is Ext4 and there is not additional storage attached. ...
- 121
0
votes
0
answers
2k
views
dmesg: read kernel buffer failed: Permission denied with root user in LXC container after Ubuntu upgrade
I had an LXC container running in Proxmox with Ubuntu 21.04. In this container dmesg worked as expected with a root user.
I used do-release-upgrade and successfully upgraded the LXC container to ...
- 101
1
vote
2
answers
864
views
Cannot autostart unprivileged LXC containers on Debian 11 Bullseye
lxc-autostart won't start unprivileged containers in Debian 11 Bullseye.
Start of unprivileged container in Debian 11 Bullseye was solved in this
answer by using lxc-unpriv-start instead of lxc-start ...
- 51
1
vote
0
answers
837
views
systemd-logind.service doesn't work (NAMESPACE error)
The problem that occurred to me goes as follows.
I became the admin of a recently launched Linux machine. The specs are:
Kernel: 5.13.19-1-pve
OS: Debian GNU/Linux 11 (bullseye)
At first, I noticed ...
0
votes
0
answers
224
views
How to use screen inside of an LXC container
I am using Proxmox 7.0 to run an LXC container with Debian 11 as guest. When connecting via ssh to the guest, I can install and run screen as usual. I can detach and re-attach as usual. But if I ...
- 262
0
votes
1
answer
702
views
Connection refused between 2 linux containers
On my host Ubuntu 18.04 I am running two lxc containers using default setups. Containers use Ubuntu 18.04 as well. I have an app running on container1 that offers an https based service on https://...
- 151
1
vote
1
answer
2k
views
How can I display a GUI LXC container on a physically connected display without a window manager?
I want to have a setup where I have LXC OS containers that start full-screen on particular displays. As an intermediate step, I am trying to get X apps from the container to display via host X.
I have ...
- 719
0
votes
0
answers
55
views
LXD Container fails to SSH out to AWS
Workstation -> Local LXC -> AWS
I have copied over the .ssh keys and config from my main workstation into an LXD container on it. I have also cleared my ip tables which was an issue with docker ...
- 111
0
votes
1
answer
228
views
How can I fix etckeeper or uninstall it so apt will install / remove new packages?
OS: Debian Buster 10.10 inside lxc
I am attempting to install a new package (I tried different packages) and apt (and DPkg) is complaining with the following error message(s):
/etc/etckeeper/pre-...
4
votes
1
answer
4k
views
Cannot start unprivileged LXC containers on Debian 11 Bullseye
I've made a new installation of Debian 11. Regarding LXC, I copied the working setup of my Debian 10 computer. I use a separate user, lxcuser which I su to, to lxc-start.
The configuration, ~/.config/...
- 2,406
0
votes
0
answers
629
views
How to route LXC container traffic through Wireguard tunnel?
The image shows a complete picture of what I'm building. But for now I want to implement a small part with one home server and 2 LXC, 2 ipv4 on a remote server.
I want to use 2 different Wireguard ...
- 1
0
votes
0
answers
194
views
How to assign a remote public ip (via wireguard) to lxc container
What I have:
lxc host
# ifconfig
wg1: flags=209<UP,POINTOPOINT,RUNNING,NOARP> mtu 1420
inet 192.168.7.2 netmask 255.255.255.0 destination 192.168.7.2
...
enp2s0: flags=4163<UP,BROADCAST,...
- 1
0
votes
0
answers
48
views
How to attach 10 ipv4 from remote server to home lxc containers?
There is a remote ubuntu server with 10 ipv4.
There is a home ubuntu server without external ipv4. The home server has 10 lxc containers.
How to make each lxc container has own ipv4?
Upd
I want to ...
- 1
1
vote
0
answers
59
views
LXC container bridge with host network risks?
I'm new to LXC containers and still very much learning what is what.
I want to run a container bridged to the host network (e.g. 192.168.0.0). This is required because the application I want to run ...
- 534
0
votes
1
answer
180
views
lxc containers can ping host and can resolve dns internet addresses but cannot get to the internet
Debian Buster amd64
Two containers, 192.168.122.2,3 both can resolve but cannot get to the Internet
Both containers can ping / interact with the host server.
Here is what I have in iptables.
# ...
1
vote
1
answer
680
views
Command executing outside container with lxc-attach?
I am trying to do a more complicated task inside a running lxc ubuntu container, but my problem can be explained using this simple example. When I run
sudo lxc-attach -n container1 -- echo "test&...
3
votes
3
answers
2k
views
lxc-start tells me apparmor_parser not available even though apparmor is installed and running
System:Debian Testing (Bullseye)
I am trying to get an LXC container up and running as per here, however, when I get to lxc-start -n my-container -d I get the following:
$ lxc-start -n test1 -d
lxc-...
1
vote
1
answer
259
views
It is possible to use parallel compression method in lxc publish?
To generate images LXD compresses files using gzip, which can only use one core. Thus, creating images can be very slow with large containers. I would like to use other compressors (e.g., pigz). What ...
- 123
0
votes
1
answer
106
views
Is possible to identify the LXC unprivileged container owner of process?
I have a linux server, Debian buster with LXC configured for unprivileged containers.
I have also a lot of crash from sssd_be, dmesg from server said:
dmesg|grep segfault
sssd_be[6739]: segfault at 8 ...
- 11.7k
1
vote
0
answers
449
views
Start armv7 container on arm64 with lxc / lxd
I installed Ubuntu 20.04 on my Raspberry PI, which has an arm64v8 architecture (but could be on any other debian arm distribution / hardware).
Currently I compile a program for several arm ...
- 111
0
votes
1
answer
95
views
Why this script works fine if run as user, but faili if run from rc.local?
I have some troubles with lxc unprivileged containers on Debian.
I follow this method:
a)I create the user unprivileged with home in /var/lxcunpriv
useradd -m -d /var/lxcunpriv lxcunpriv
b)I install ...
- 11.7k
1
vote
0
answers
617
views
Run KVM inside LXC container
I have a baremetal server with Debian. Iside it I have KVM-based VMs and LXC containers. Now I am searching a solution to run KVM inside LXC container.
2
votes
1
answer
1k
views
LXC, Docker and iptables on the same host, timeout on port-forwarding from the container to the container
thanks for reading! I have a publicly exposed server (debian 10), used as an host, running both LXC (not LXD) and Docker.
These two container services are running with a mostly original configuration (...
- 21
2
votes
0
answers
443
views
Solution: How come that lxc-attach doesn't work within su -c?
I have an unprivileged lxc container. It works well and if I need to do something within that container, I su --login lxc-user, then I do lxc-attach -e -n lxc-container for e. g. doing updates ...
- 21
2
votes
2
answers
2k
views
disk quota exceeded when trying to deploy Docker container inside LXC
I have an LXC container running docker. Many containers are running successfully but I am unable to add more; I am trying to deploy a new docker container and getting the following error:
container ...
- 8,141
0
votes
1
answer
628
views
lxd init: bind: address already in use
I have problem with bind problem with lxd init. The port 8443 is not used by any other application, therefore I think, lxd init tries to bind this port twice.
My lxd version is 3.14 and I am using ...
- 103
1
vote
1
answer
43
views
How to bufferize a PTS?
I'm building a system using LXC containers trough libvirt, and I'm trying to record/forward the container's stdout.
When creating a new domain, a pseudo-TTY is created in /dev/pts/* and I'm able to ...
- 111
1
vote
3
answers
990
views
LXC container will start at the command line, but not automatically, from cron's @reboot or from /etc/rc.init
I can always start my container successfully with:
fadedbee@host:~$ sudo lxc-start -n mycontainer
It used to start automatically, until I bound some directories on a local ZFS to it.
I added the ...
- 723
0
votes
1
answer
32
views
Linux containers [closed]
Linux containers
1- are containers really safe ? (I know that there was some vulnerabilities around like the one found in runc ... but are they really safe in general, since they use syscalls and an ...
- 1
1
vote
0
answers
120
views
How to run snap daemon outside a container
It looks like snap programs (installed on ubuntu) are run instide VMs/containers created by Canonical (called multipass).
But what if my daemon needs access to the host filesystem, host system socket ...
- 8,992
2
votes
1
answer
640
views
Custom message to "This account is currently not available" when user login is disabled
I have a Lxc container inside a Proxmox host. I need to prevent that the Proxmox admin can login inside my container. To do so I disabled root login in /etc/passwd. When the Proxmox admin uses pct ...
- 23
0
votes
1
answer
609
views
debootstrap Couldn't find these debs: lxc
I'm trying to follow along to a guide to creating an unprivileged lxc container on Ubuntu. According to the instructions, I should run:
debootstrap --include=lxc eoan rootfs
But when I run that, I ...
- 139
2
votes
2
answers
951
views
Recover deleted but mounted loop file/filesystem
By mistake, I deleted an lxc image file. The container is still running and the file is therefore not yet actually deleted until I stop the container. I'd like to avoid stopping the container as it is ...
- 121
5
votes
1
answer
3k
views
How to run lxc exec for commands with pipe?
for example, I have this command:
lxc launch ubuntu:18.04 memsql1
lxc exec memsql1 -- wget -O - 'https://release.memsql.com/release-aug2018.gpg' 2>/dev/null | sudo apt-key add - && apt-...
- 8,893