Questions tagged [lxc]

LXC short for (Linux Containers) LXC is an operating system-level virtualization method for running multiple isolated Linux systems (containers) on a single control host. LXC is the userspace control package for Linux Containers, a lightweight virtual system mechanism sometimes described as “chroot on steroids”.

LXC provides operating system-level virtualization not via a full blown virtual machine, but rather provides a virtual environment that has its own process and network space. LXC relies on the Linux kernel cgroups functionality that became available in version 2.6.29 and is now available in all newer kernel versions. Cgroups was developed as part of LXC. It also relies on other kinds of namespace-isolation functionality, which were developed and integrated into the mainline Linux kernel. LXC is similar to other OS-level virtualization technologies on Linux such as OpenVZ and Linux-VServer, as well as those on other operating systems such as FreeBSD jails. LXC Containers can define various cpu limits, memory limits etc. (In short all parameters that can be set via CGROUPS) to prevent any one container from interfering with all other containers running on the same LXC host. LXC uses the linux bridge-utils commands to create local VLANs, and attach containers and physical interfaces to them. With containers the physical overhead (ram, swap space, one kernel per VM, plus hypervisor) that is present in virtualization methods is reduced. With containers, one kernel and one virtual memory space is shared between all the containers running on that host. For a comparison of other Operating System virtualization techniques, see this link

420 questions
4
votes
2 answers

Enable SELinux on Centos7 LXC container with Ubuntu 14.04 host

I'm trying to setup an LXC container for testing which is running CentOS 7 with SELinux enabled to meet the requirements for a test I'm trying to run. Despite all my efforts, I'm still unable to get the output of getenforce to return anything except…
Dave Birch
  • 143
  • 1
  • 3
4
votes
1 answer

Running LXC and Docker on the same host

I'm running a private server for a some time now and back when I set it up, I used LXC to separate the different services from each other. About a month ago I've started to use docker (for work as well as privately) and from now on I'd like to use…
mreithub
  • 160
  • 1
  • 5
4
votes
2 answers

LXC container shows host's full RAM amount and CPU count

I've been using LXC containers for a few years and have recently expanded the types of applications that run inside of container environments. I'm starting to limit resources at the container level now with configuration parameters…
ewwhite
  • 197,159
  • 92
  • 443
  • 809
4
votes
0 answers

Unprivileged lxc container as root

I have successfully been able to run privileged lxc containers (as root). My system: uname -a Linux ruby-dev 3.13.0-32-generic #57-Ubuntu SMP Tue Jul 15 03:51:08 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux sudo apt-get install cgmanager cgmanager-utils…
mg03
  • 197
  • 1
  • 8
4
votes
0 answers

What is the best practise to autostart unprivileged lxc containers on Ubuntu 14.04 64bit?

The current implementation of the LXC technology deals nicely with an issue of starting the privileged containers upon system start.. Users of the unprivileged containers (which arguably promise better security) don't get any working out-of-the-box…
Adam Ryczkowski
  • 720
  • 1
  • 9
  • 29
4
votes
2 answers

Ubuntu LXC 14.04 Error

I had installed LXC in ubuntu 14.04. I had used an existing template and created a VM by executing the below command. /usr/share/lxc-templates/lxc-ubuntu -p /lxc/vm0 After the installation getting the below error. lxc-unshare: symbol lookup error:…
ZVIK
  • 535
  • 3
  • 11
4
votes
1 answer

Iptables prerouting based on destination's DNS name?

I've got a question concerning iptable prerouting. I'm not that familiar with networking/routing/iptables so I hope this is not a stupid question, at all. So I ask for your understanding and indulgence. What I do is: I use LXC to separate apps in…
ITL
  • 231
  • 3
  • 10
4
votes
1 answer

Configuring Container with bridges and vlans (server only?)

I have two groups of lxc contianers on a server and want to isolate their network traffic for security reasons. I will be using port forwarding so the containers much each have separate IP's. I know I must subnet both groups and intend to give each…
user108168
  • 141
  • 1
4
votes
3 answers

Reach LXC container from a virtualbox guest on the same host

Context I develop websites on my Ubuntu laptop (Ubuntu 13.04 64b). Each site runs within a dedicated LXC container¹ on network 10.0.3.x I sometimes need to reach those sites from a virtualbox guest running Windows² It used to work "out of the…
Huge
  • 231
  • 3
  • 6
4
votes
2 answers

LXC networking with public IP

I have installed LXC in ubuntu server 12.04 using this link. It was installed successfully and i am able login using ubutu/ubuntu as username and password. Then I tried to setup network for LXC container. I changed in /etc/network/interface as auto…
niren
  • 263
  • 2
  • 5
  • 11
4
votes
1 answer

linux container bridge filters ARP reply

I am using kernel 3.0, and I have configured a linux container that is bridged to a tap interface in my host computer. This is the bridge configuration: :~$ brctl show bridge-1 bridge name bridge id STP enabled …
Dani Camps
  • 301
  • 6
  • 11
4
votes
1 answer

eth0 on lxc does not work

I am facing some problems that the eth0 on lxc container does not work. I already tried Bridging LXC containers to host eth0 so they can have a public IP, but it does not help. On my host (Ubuntu on virtualbox): # cat…
akry
  • 141
  • 1
  • 2
4
votes
1 answer

Reading Samba from Windows 10 has major bottleneck

Keep in mind, both machines used are hosted in a Proxmox Node. SETUPS My Samba setup is installed on Ubuntu inside an LXC. The shares are located on a RAIDZ2 dataset, and are accessible from the LAN. 4 LCores, 6 GB RAM The Windows 10 VM is on a…
3
votes
1 answer

Can you run Docker natively on the new Windows 10 Linux kernel?

My understanding was that the primary limitation of running docker on other OSs was the Linux Network containers that made it possible. (Certainly for Macs). Recently Microsoft announced a plan to provide a Linux kernel running natively packaged…
Hawkeye
  • 2,699
  • 9
  • 30
  • 35
3
votes
1 answer

Is there a way to specify name servers for an interface in lxc configuration?

I'm trying to make LXC containers use static IP addresses. For that I specify lxc.network.ipv4 = 10.0.3.3 lxc.network.ipv4.gateway = 10.0.3.1 in lxc config file. I have only loopback interface in /etc/network/interfaces in containers. And it mostly…
x-yuri
  • 2,141
  • 2
  • 24
  • 29