LXC short for (Linux Containers) LXC is an operating system-level virtualization method for running multiple isolated Linux systems (containers) on a single control host. LXC is the userspace control package for Linux Containers, a lightweight virtual system mechanism sometimes described as “chroot ...

learn more… | top users | synonyms

15
votes
3answers
9k views

How to disconnect from lxc-console

I'm working with lxc in Ubuntu 12.04, and it's really great. However, I am unable to disconnect from a lxc-console session after I've connected. I read somewhere that Ctrl-aq will disconnect me from ...
10
votes
2answers
1k views

Linux containers (LXC) on Red Hat/CentOS EL6 - lxc-create versus libvirt?

It's tricky trying to stay within the good graces of Red Hat and still plan for system longevity... I've been a proponent of Linux Containers (LXC) for over a year. My initial installations were ...
10
votes
2answers
2k views

Relationship between Vagrant, Docker, Chef and OpenStack (or similar products)?

I am a web developer, but I am also interested in a few administrative tasks. Hence, the new move from pure administration to dev-ops comes handy for me. Anyway, I have some problems to put a few ...
9
votes
5answers
2k views

Compute a list of difference between packages installed on two hosts

I just add some problems with my Debian virtual servers and I add to reinstall all of them from scratch. However, I still had access to the old version and I could retrieve the list of installed ...
8
votes
2answers
2k views

Is it possible to start LXC container inside LXC container?

Is it possible to start LXC container inside another LXC container?
8
votes
1answer
2k views

Is LXC secure enough for VPS hosting?

Right now I'm using Linux VServer for VPS hosting. But it's lacking some functionality I need (ex. cpu usage virtualization, quota support for guests, etc.) so I'm thinking about switching to OpenVZ ...
8
votes
3answers
324 views

Technology for short-lived private VMs

I'm trying to build a system that will run short-lived (CI and test builds) of software components, it's mandatory according to my requirements that each live on a private host. I'm taking that ...
7
votes
3answers
3k views

Why LXC when there is linux-vserver?

I am no LXC expert, but as far as I know it is really similar to linux-vserver. If that is correct, I wonder why there is another player in the already crowded virtualization camp? What does LXC ...
6
votes
2answers
3k views

use LXC under heavier virtualization (Xen, KVM,Hyper-V,VMVare)

Is it possible to use LXC under heavier virtualization (Xen DomU,KVM,Hyper-V,VMVare) ? I would like to use it as security (isolation) tool, the ability to limit resource consumption is not priority ...
6
votes
1answer
351 views

Can I use a different linux distribution in an LXC container?

We are developing a server product targeted for Debian Lenny (and some others). However, due to driver needs, developers' personal choices etc. we run Ubuntu (12.04) on the hardware. Is it possible ...
5
votes
3answers
1k views

Explain in Plain English what is LXC and for what it is useful [closed]

What is LXC? For what it is useful? What are the differences between LXC and common virtualization?
5
votes
3answers
698 views

Why are applications in a memory-limited LXC container writing large files to disk being killed by the OOM?

EDIT2: This problem appears to exist as well under 3.8.0-25-generic #37-Ubuntu SMP EDIT: I modified the question from the original title of "Why would the Linux Out of Memory manager be triggered by ...
5
votes
2answers
4k views

Running linux containers (lxc) on ubuntu to isolate web server processes (ruby/thin)

I am trying to setup a server where I would be running multiple apps. Mostly internal but could also be open source projects like Redmine. They would all be Rails/Ruby apps/test scripts running on ...
5
votes
1answer
352 views

Microsoft Windows equivalent to LXC

Does Microsoft Windows have any equivalent product similar to Ubuntu's LXC container virtualization technology?
5
votes
2answers
7k views

Bridging LXC containers to host eth0 so they can have a public IP

UPDATE: I found the solution there: http://www.linuxfoundation.org/collaborate/workgroups/networking/bridge#No_traffic_gets_trough_.28except_ARP_and_STP.29 # cd /proc/sys/net/bridge # ls ...
4
votes
2answers
218 views

Does LXC container performance depends of host load?

I am wondering if LXC could offer a full isolated benchmarking environment. Let's say we have 2 identical machines, with the same fresh Linux and without network connection. First machine has a load ...
4
votes
2answers
996 views

lxc bandwidth control using tc

I am trying to restrict bandwidth inside my containers. I have tried using the following commands , But I think it is not getting effective. cd /sys/fs/cgroup/net_cls/ echo 0x1001 > ...
4
votes
1answer
846 views

docker: set hostname for container

I'm having trouble setting the hostname on a running docker container. I'm also having trouble understanding how to specify hostname after the image is started. I started a container from an image I ...
4
votes
0answers
12 views

Proper way of handling LXC containers on btrfs

Lets say we have one server with lxc installed, and a lxc container used for as a base img /var/lib/lxc/ubuntu_base. For simplicity let's forget the config changes after copying the base img. some ...
3
votes
2answers
3k views

Limit memory and cpu with lxc-execute

I would like to isolate processes using lxc-execute. Is it possible to set bandwidth, cpu and memory limit? I had a look in the man of lxc.conf but I did not find it exhaustive.
3
votes
3answers
558 views

LXC container templates?

Is it possible to create an LXC container that you maintain only for the purpose of copying as a template? If so, how does one properly copy an LXC container?
3
votes
1answer
206 views

LXC and Saltstack minion_id configuration on Ubuntu

I'm using LXC as a lab platform for testing SaltStack scripts. The lab consists of +5 Ubuntu 12.04 LTS containers, which I create by cloning a template container with salt-minion pre-installed. Once ...
3
votes
3answers
1k views

Running systemd based container in LXC

I'm currently trying to run an Arch Linux container using LXC on an Ubuntu 12.04 host. Arch Linux has recently migrated to systemd, which according to a variety of places has some problems operating ...
3
votes
1answer
202 views

Link all LXC node APT caches to the host machine's APT cache

I have a number of LXC containers (ubuntu template) which all have their own separate APT caches. /var/lib/lxc/*/rootfs/var/cache/apt/archives/ I would like to have these linked to the host ...
3
votes
1answer
384 views

fail2ban on server with LXC Containers

The issue is modprobe and iptables don't work inside an LXC Container. LXC is the userspace control package for Linux Containers, a lightweight virtual system mechanism sometimes described as ...
3
votes
1answer
1k views

SSH traffic redirect for LXC containers

I use LXC containers for ssh hosting and I would like to redirect SSH/SFTP traffic (using port 22) to the container's private IP address but on a user/IP basis. That is - one source port, many ...
3
votes
1answer
927 views

eth0 on lxc does not work

I am facing some problems that the eth0 on lxc container does not work. I already tried Bridging LXC containers to host eth0 so they can have a public IP, but it does not help. On my host (Ubuntu on ...
3
votes
1answer
137 views

OpenVZ has vzctl exec, what is the equivelent for lxc

I'm switching from OpenVZ to lxc. The one thing that is really bugging me is that I can't find a lxc alternative to vzctl exec. Before on OpenVZ I could do vzctl exec 1033 restart nginx. Now, all I ...
3
votes
1answer
51 views

Why are cgroups (blkio serviced bytes) and iotop producing diverging results

I work with lxc user space tools on ubuntu 14.04 and I want to perform some stress tests and benchmarking within a container. I know that free and htop are not working properly in a container. I am ...
3
votes
0answers
64 views

Configuring Container with bridges and vlans (server only?)

I have two groups of lxc contianers on a server and want to isolate their network traffic for security reasons. I will be using port forwarding so the containers much each have separate IP's. I know I ...
3
votes
1answer
319 views

LXC networking with public IP

I have installed LXC in ubuntu server 12.04 using this link. It was installed successfully and i am able login using ubutu/ubuntu as username and password. Then I tried to setup network for LXC ...
3
votes
1answer
553 views

With CentOS 6 and LXC, “ifconfig” is unable to see network interface (but busybox “ifconfig” works fine)

I've just started working with LXC under CentOS 6 (via the libvirt adapter). If I create an LXC container, I'm unable to see any network interfaces when using the native system tools: # ifconfig -a ...
2
votes
1answer
86 views

iptables port forwarding only for a certain range of IP

I'm using LXC containers. Each one of my containers have an ip address in 10.0.3.0/24. I want the packets that come into my host on a certain port to be redirected to a container so I use this rule: ...
2
votes
2answers
3k views

No tun device in lxc guest for openvpn

I am trying to set up an openvpn server inside a lxc guest. However, it seams there is no tun device available in the container. Starting openvpn inside the container gives me this error: Tue Sep 18 ...
2
votes
3answers
431 views

Setting up bridged LXC containers with static IPs

I'm trying to setup multiple LXC containers on a host, each with public static IPs of their own. My host is running the latest Ubuntu. It has a single network interface named eth0. The static IPs ...
2
votes
1answer
698 views

Why use lxc instead of chroot?

One ubuntu server hosts 3 apps all on separate domains. Each app has its own developers. App developers belong to linux "sftp" group. chroot allows password sftp access for each app developer. ...
2
votes
2answers
175 views

LXC and port overlapping

I've done a lot of searching on Google and browsed what I could find on Server Fault, but can't find any solution to this. I have a server that is running LXC containers (2 for right now, both ...
2
votes
1answer
684 views

modprobe inside an LXC container

I need to run a WebDAV server inside of an LXC container, but I'm being told that modprobe is not available (even as root). I've seen that this was requested by developers, but how can I get around ...
2
votes
1answer
124 views

Is it possible to limit/throttle page faults with LXC container virtualization?

It's possible to limit a container to 512MB of RAM and 4GB of swap. However, if that container uses memory frequently that has been swapped out wouldn't it dominate the the IO resources of the storage ...
2
votes
1answer
298 views

Allowed cgroup devices for libvirt/lxc container

I want to allow my libvirt/lxc containers to use tun/tap device. In order to do so I for a running container I can add it to the allowed devices by: # echo "c 10:200 rwm" > ...
2
votes
1answer
504 views

firehol (firewall) with bridge: how to filter

I have two interfaces: eth0 (public address) and lxcbr0 with 10.0.3.1. I have a LXC guest running with ip 10.0.3.10 This is my firehol config: version 5 trusted_ips=`/usr/local/bin/strip_comments ...
2
votes
0answers
48 views

how to move process from one namespace to other? [closed]

Is there any available method to move process/group of processes from one namespace to other in Linux? I mean methods via commands of some packages or it can be done via setns()? E.g. I have processes ...
2
votes
0answers
86 views

How do I find the path of socket?

Is there any method that can allow me to find the path of socket if the type of socket is PF_UNIX? And I have another question: let's assume that I have the following output of lsof: COMMAND PID ...
2
votes
0answers
308 views

Networking with lxc containers with local dhcp and external ipv6 double bridge problems

I want to use both ipv6 externally on all my containers, and ipv4 external only on the hosts. I am using Ubuntu 12.04 64bit. For ipv4 on the container I use the DHCP that came with the lxc ...
2
votes
1answer
298 views

lxc container not getting default route

I'm running Ubuntu Precise. I understand that my current version of lxc doesn't support gateway/default route assignment (lxc 0.7.5-3ubuntu67). I've been trying like heck to get a few lines to execute ...
2
votes
1answer
345 views

Managing LXC containers in EC2

I have an EC2 instance running inside a VPC. I need to run a service inside a LXC container started in that instance and to make the service available to the outside world. I have therefore created a ...
2
votes
1answer
769 views

How to start external programs in “unshare” container, with sending of file descriptors?

With unshare or lxc-execute I can create environments with separate network/mount/whatever namespaces. But starting programs there from outside is not really straightforward. Usually network and sshd ...
2
votes
0answers
428 views

FTP proxy with SSL support

I have a bunch of LXC containers with vsftpd daemon installed on each. I would like to forward/proxy traffic from dom0 server port 21 to particular containers based on ftp user name e.g. ...
2
votes
0answers
720 views

User not recognized by underlying authentication

I'm running lxc on Linux Mint Debian Edition tracking Wheezy/Sid. I created a container using "lxc-create -t debian -n dev". In accordance with the Debian wiki article on LXC I have mounted the ...
2
votes
1answer
154 views

NAT for static private addresses

Could someone please help me out with the following scenario: I have a machine that hosts 3 lxc containers, and acts like a router for them. The LXC containers have private ip addresses set on the ...