Questions tagged [lxc]

LXC is an operating system-level virtualization method for running multiple isolated Linux systems (containers) on a single control host. It is sometimes referred to as “chroot on steroids”.

LXC provides operating system-level virtualization not via a full blown virtual machine, but rather provides a virtual environment that has its own process and network space. LXC relies on the Linux kernel cgroups functionality that became available in version 2.6.29 and is now available in all further kernel distibutions.

Cgroups was developed as part of LXC. It also relies on other kinds of namespace-isolation functionality, which were developed and integrated into the mainline Linux kernel.

LXC is similar to other OS-level virtualization technologies on Linux such as OpenVZ and Linux-VServer, as well as those on other operating systems such as FreeBSD jails. LXC Containers can define various cpu limits, memory limits etc. (In short all parameters that can be set via CGROUPS) to prevent any one container from interfering with all other containers running on the same LXC host.

LXC uses the linux bridge-utils commands to create local VLANs, and attach containers and physical interfaces to them. With containers the physical overhead (ram, swap space, one kernel per VM, plus hypervisor) that is present in virtualization methods is reduced. With containers, one kernel and one virtual memory space is shared between all the containers running on that host.

For a comparison of other Operating System virtualization techniques, see this link

591 questions
0
votes
1 answer

OpenStack Ansible deployment fails due to lxc containers not having network connection

I'm trying to deploy OpenStack Ansible. When running the first playbook openstack-ansible setup-hosts.yml, there are errors for all containers during the task [openstack_hosts : Remove the blacklisted packages] (see below) and the playbook…
Ohley
  • 121
  • 1
  • 6
0
votes
1 answer

How to restart an LXC from the LXC itself?

I am installing a custom software in the LXC that requires to restart after installation is done, Is there any way the LXC can access the host's lxc-stop and lxc-start. I dont want to open another terminal to be able to stop and start from the…
0
votes
1 answer

CRIO runtime spec for OCI v1alpha1 compliance

devs, where can I find the spec for a cri-o runtime cmdline interface to be fully OCI v1alpha1 compliant? CRI-O supports any OCI compatible runtime. We test with runc and Clear Containers today. But while playing around with crictl I noticed that…
Ruben Jenster
  • 341
  • 1
  • 3
  • 7
0
votes
1 answer

What is a good way to setup a sandboxed container environment for development?

I want to develop on Linux in various languages (python, rust, ...) and will be installing packages through their respective tools (and also some infrastructure like redis, postgresql, ...). I'd like to create a sandbox for each project: shell…
0
votes
1 answer

LXD public ip to container using routed

I'm trying to set a public ip to a container using the routed nictype in LXD, Essentially i inited a fresh container, ran lxc config device add c1 eth0 nic nictype=routed parent=eth0 ipv4.address=my.public.ip then started the container, it shows the…
Prodigle
  • 1,757
  • 12
  • 23
0
votes
1 answer

MariaDB - "Error writing file" on binary logs

I have several MariaDB 10.1.45 instances running in Linux containers with memory limits. Last week I have enabled binary logging on all of them with the following parameters: log-bin = mysqld-bin binlog-format = mixed expire_logs_days = 1 After…
Gustavo
  • 1
  • 1
0
votes
1 answer

Deploy copies of web application and serve them on subdomains

Not sure if the title is well suited, but I have a laravel application with a database and I want to make copies of them programmatically and serve them from diffent subdomains (each app with it's database). What's better: - Make copies of the…
beerLantern
  • 482
  • 7
  • 23
0
votes
1 answer

Openstack-ansible setup-openstack.yml Error on Task [os_keystone: Create fernet keys for Keystone]

can someone help me?, Openstack-ansible git tags 20.0.0 (f2ff7902) I'm having trouble when running openstack-ansible setup-openstack.yml Keystone Version 20.0.0 Failure On TASK [os_keystone : Create fernet keys for Keystone]…
Calvin
  • 605
  • 10
  • 26
0
votes
0 answers

LxC Unprivileged Container & Iptables

I am running a custom-built firewall application on my OpenWRT router. This application manipulates the iptables rules and routing table rules dynamically based on packet patterns. This application works perfectly: When embedded as a package inside…
meetrp
  • 155
  • 9
0
votes
1 answer

502 Bad Gateway for NodeJS server managed by PM2 inside a lxc container

I have a digital ocean droplet running Ubuntu 18.04 and inside is is an lxc container. I have two applications in that container. The first application (a client) lives at /var/www/html and the second one is the NodeJS application that lives at…
Kingsley
  • 777
  • 1
  • 12
  • 35
0
votes
1 answer

Charmed Distribution Of Kubernetes on LXC and Ingress

I am trying to get a decent solution of exposing my services from a Kubernetes cluster hosted on local LXC containers. The setup is as follows: Host: Ubuntu 18.04 running a LXC cluster. Inside the LXC there is a Charmed Distribution Of Kubernetes…
Mihaimyh
  • 1,262
  • 1
  • 13
  • 35
0
votes
1 answer

LXC container running on Ubuntu gives linker errors (ERROR: ld.so)

I have the following setup: I have an archlinux LXC container running on a Ubuntu 18.04 LTS host. No matter what command I execute, I get the following error: [root@archie /]# pacman -Syu ERROR: ld.so: object 'libgtk3-nocsd.so.0' from…
Duck Dodgers
  • 3,409
  • 8
  • 29
  • 43
0
votes
0 answers

ssl_accept() returns SSL_ERROR_SYSCALL in c

I wrote a C program that secures http traffic using openssl library : #include #include #include #include #include #include #include…
f_y
  • 73
  • 9
0
votes
0 answers

NGINX Reserve Proxy SSL_ERROR_RX_RECORD_TOO_LONG

I have a lxc setup here. In one container is the nginx running with a simple html website. In the second container is the nginx reserve proxy running. When I try to open the url https://malte-kiefer.de in the browser, I get this…
beli3ver
  • 363
  • 3
  • 15
0
votes
1 answer

Can't change vm.max_map_count on LXC

I try running Elasticsearch 6.x on LXC using Ansible, when try to start Elasticsearch service in elasticsearch log I see: [2020-01-04T08:45:58,744][ERROR][o.e.b.Bootstrap ] [4WUODd8] node validation exception [1] bootstrap checks…
ᴀʀᴍᴀɴ
  • 4,443
  • 8
  • 37
  • 57