0

I have successfully created unprivileged lxc containers for one user on a system. All of those containers use the default lxcbr0 bridge.

Now I want to allow other users on the system to create unprivileged lxc containers.

How do I create more bridges, one for each of the users? And is it a good idea to do this?

One reason for separate bridges is: keeping the ip-address range separate, so that one user can't hijack the ip addresses allocated to another user's lxc.

4
  • This seems to be possible. All I need is the /etc scripts to support creating a list of bridges (so that it can be managed easily). I have requested the feature in Ubuntu here
    – HRJ
    Aug 20, 2014 at 13:52
  • 1
    It might be time to move onto something more powerful to manage your containers, like libvirt, which will create as many bridges as you want. Aug 20, 2014 at 15:17
  • @MichaelHampton The Ubuntu serverguide says "Use of libvirt-lxc is not generally recommended due to a lack of Apparmor protection for libvirt-lxc containers.?" Just quoting; don't shoot the messenger.
    – HRJ
    Aug 20, 2014 at 15:50
  • Well, use of Ubuntu is not generally recommended either. :) Aug 20, 2014 at 15:51

0

You must log in to answer this question.

Browse other questions tagged .