Questions tagged [lxc]

LXC short for (Linux Containers) LXC is an operating system-level virtualization method for running multiple isolated Linux systems (containers) on a single control host. LXC is the userspace control package for Linux Containers, a lightweight virtual system mechanism sometimes described as “chroot on steroids”.

Filter by
Sorted by
Tagged with
0
votes
0answers
48 views

Cannot access HTTP inside other LXC container on the same host

I'm using LXC to host a few of my services. One of them - say, container A, is an nginx working as a reverse proxy. Another one, let's call it B, is a service that needs to access container A via the ...
0
votes
1answer
28 views

How to forward traffic from a specific domain from apache2 to LXC container

I am currently running apache2 on my server, but would like to forward http(s) traffic requesting a specific host (ex. lxc.example.com) to an LXC container which can be accessed by a local ip address ...
0
votes
0answers
28 views

Temporary network issue with LXC container

Good afternoon, colleagues. I have a network availability issue when running the LXC container on a VMware virtual machine. When I turn on the LXC container, about 10-15 minutes, there is no Internet ...
0
votes
0answers
21 views

How to update LXD server version on Ubuntu?

I installed lxd using snap: snap install lxd --channel=3.0/stable when I list the package it says the version is 3.0.4: vagrant@ubuntu-xenial:~$ snap list Name Version Rev Tracking ...
0
votes
0answers
34 views

lxc with apparmor - where should be defined profiles

I created /root/example.sh from here at the host, and with aa-genprof denied it. # ./example.sh This is an apparmor example. ./example.sh: line 5: /usr/bin/touch: Permission denied File created ./...
0
votes
1answer
76 views

Dovecot lxc apparmor denied (Buster)

I can't run dovecot in lxc on Buster. I turn off PrivateTmp, but it isn't enough... Still : [ 4850.883141] audit: type=1400 audit(1563803461.322:34): apparmor="DENIED" operation="mount" info="failed ...
1
vote
1answer
242 views

LXC container cannot ping outside

I'm currently creating a new container on a fresh server and I'm facing a network issue. Basically the container cannot reach anything on the Internet i.e. every request timeout. Here are the ...
0
votes
1answer
739 views

Overhead of LXD

Question for server structure here. Is the overhead for LXD small enough to use it for per-process containers? E.G if I have a LAMP stack, media server, game server, etc. is it viable to split each ...
0
votes
0answers
145 views

ssh tunneling issue only in Ubuntu 18.04 Container: “channel 3: open failed: connect failed: Connection refused”

There are several distros that are running in lxc containers in the same proxmox instance. There is NO problem to ssh tunneling with other distros other than ubuntu family (in this case 18.04) lxc ...
0
votes
1answer
32 views

LXD container restricted to specific user

If I have 2 users with the 'lxd' group, user-1 and user-2. If user-1 starts a container, then I think that user-2 may stop it, destroy it or even run command on that container or connect via ssh to it....
0
votes
0answers
344 views

nftables with openvpn and lxc

I have a simple setup involving OpenVPN server in a LXC container (debian stretch host, debian buster container), in which i'd like to set up a firewall based on nftables. What confused me is the ...
2
votes
1answer
264 views

libvirt-lxc container on Debian buster with user namespacing not always startable

I have a bunch of libvirt-lxc containers whose configuration I migrated from Debian jessie to a fresh Debian buster host. I re-created the rootfs’ for the containers using lxc-create -t debian -- --...
2
votes
1answer
364 views

Can you run Docker natively on the new Windows 10 Linux kernel?

My understanding was that the primary limitation of running docker on other OSs was the Linux Network containers that made it possible. (Certainly for Macs). Recently Microsoft announced a plan to ...
2
votes
0answers
42 views

Sending tagged traffic to lxc container while sending untagged traffic to other containers

I have a situation where I already have several bridges on my lxc host to send vlan-specific traffic to my various containers. I have one container that lives on several of the networks, and was ...
0
votes
0answers
61 views

Unable to create LXC container with specific image

I recently hit issue with the creation of LXC container: tsenov@hometower:~$ createContainer.sh tester 1 256MB lxd_sp0 2 Creating tester Error: Failed container creation: Create container from image: ...
0
votes
0answers
9 views

How do I setup an unprivledged lxc container?

I am trying to create an unprivledged lxc container on arch linux, but it fails with a following error https://termbin.com/q4bd I checked /usr/share/lxc/templates and lxc-download exists I tried ...
1
vote
0answers
55 views

Libvirt lxc-enter-namespace with mapped uid/gid

I'm trying to implement LXC with mapped uid/gid (user namespace) under Libvirt on CentOS 7 with full separate root mounted. Libvirt config snippet <idmap> <uid start='0' target='100000'...
1
vote
2answers
78 views

LXC and iptables - how to change source IP address from main IP to different IP address

I have LXC container with mail server and "dedicated" IP address. "Dedicated" means that 25 and 110 port of the IP address are forwarded to 25 and 110 port of the container. This is done with ...
0
votes
1answer
121 views

How to get a Linux container to connect to the internet through a bridge?

My Linux host has a bridge device br0, and I have created an arch Linux container but it isn't able to access the internet. When the container is started the veth device appears on the host: [host]# ...
0
votes
1answer
129 views

Can I make a single computer out of 3 with lxd cluster?

I'm setting up a LXD cluster on 3 machines. Though I'm concerned if a single container (a virtual machine) use all the resources of 3 machine. I mean Does a single container use all 3 machine's CPU?...
2
votes
1answer
207 views

Is lxd/lxc a suitable replacement to virtual machines (vSphere, for example) for server infrastructure? [closed]

I would like to move my servers to virtual machines. This is because it'll make it easier for me to fire up more machines and back them up in case the physical server is damaged (I'm not aware of ...
1
vote
0answers
288 views

Unprivileged LXC fails to find subuid / subgid allocation

When I run lxc-usernsexec I get the error message: Failed to find subuid or subgid allocation lxc-create and lxc-start work without any problems, but I would need to run lxc-usernexec to remove a ...
0
votes
1answer
398 views

Docker inside LXC starting container process caused “apply caps: operation not permitted”

I'm trying to run a Docker container inside an LXC container. However doing so causes me to get the following error: [root@DH-DockerLXC01 alex]# docker run fedora bash docker: Error response from ...
0
votes
0answers
113 views

HAProxy not sending correct URL to LXD container

HAProxy not sending correct URL to LXD container I want to have the following behaviour: In one virtual machine I have three LXD containers: One with HAProxy, another with a LDAP server, and the ...
1
vote
2answers
719 views

How to resize lxc/lxd images, if i am using LVM backend?

I'm using LXD few years and I'm glad to use this platform in my testing environment. But few days ago, I couldn't install Microsoft SQL server 2017. The reason was, that I used default ZFS backend. ...
1
vote
0answers
707 views

Proxmox: how to access a ZFS volume directly through guest?

That may sound like a strange use case, but is there a way to access a ZFS volume directly through an LXC container or a Qemu VM with Proxmox? I'd like to have incremental backups pushed to my guest ...
0
votes
0answers
42 views

Setup iptables to connect LXC container to host tcp load balancer (from container to internet)

I have a LXC container inside a host. A program inside the container is trying to communicate with external nodes using port 9876. If I connect an external ip to the host VM, everything works. I ...
0
votes
0answers
289 views

How to run unprivileged lxc container on Arch Linux?

I'm trying to create unprivileged container, went to Error: Failed to initialize cgroup driver / PAM unable to open pam_cgfs.so Downgraded lxc to 3.0.1 as it's suggested in doc https://wiki....
0
votes
0answers
192 views

Proxmox LXC networking

We have 5 physical machines hosted at OVH. Each of them have Proxmox 5.2-10 installed Machines are inside of OVH vRack. we have separate LXC for database, separate LXC with loadbalancer and several ...
1
vote
0answers
591 views

What is standard way to forward port from host to LXC container?

I am researching LXC containers. When I do verth network, libvirtd creates some iptables rules: [root@VM ~]# iptables -L -n -v Chain INPUT (policy ACCEPT 61 packets, 6229 bytes) pkts bytes target ...
2
votes
1answer
2k views

unprivileged_userns_clone no such

I am trying to setup unprivileged LXC containers as explained in Debian Wiki on a Jessie Debian physical server (4.9.135 kernel). Hence, I want to enable the userns namespace: sysctl kernel....
0
votes
1answer
123 views

What is standard way to give LXC public IP address?

I am researching LXC. The thing I was unable to find is how to give a container public IP address? Suppose we have a server with 5 IP addresses. Then we do 4 containers there and give somehow one ...
6
votes
2answers
3k views

How to prevent docker-compose appending hashes to created container names?

I have a server with several lxc containers. In some of the containers there is a docker installed. Usually a docker compose action in these LXC containers results in container names with the format ...
-2
votes
1answer
430 views

Even with root user Im receiving 'Operation not permitted' when try creating gluster volume between Ubuntu 14.04 LXC containers

Even with root user Im receiving 'Operation not permitted' when try creating gluster volume between Ubuntu 14.04 LXC containers. Need test the solution locally before install it on prodution and even ...
0
votes
0answers
123 views

Slow running Cron tasks getting stuck in container

It is a Debian 9 container running on a Debian 9 host. Every now and then the container would grind to a halt. It is usually a slow task like apticron or munin. My last test was an idle container on ...
3
votes
2answers
2k views

Jenkins web server not responding to HTTP requests in Ubuntu/Dell PowerEdge R640

I have a system (the "host") that runs several containers, using LXC (i.e. the "guests"). I've installed Jenkins inside the guests and they appear to be working as intended, except that they don't ...
1
vote
1answer
337 views

How to set the dns on lxc containers staticly?

I am trying to set the dns manually to a lxc container. I already read your comments on [Setting up bridged LXC containers with static IPs But this did not work with me. In etc/network/interfaces ...
1
vote
2answers
445 views

Accessing LXC frm host over local network

Hay! I searched a lot, but it seems this is not common issue. Comments are much appreciated! # Set variables HOST=192.168.0.254 LXC=192.168.0.105 I am dealing with LXC (NGINX, MySQL) and I am not ...
0
votes
1answer
232 views

access webpage via url in an lxc container

I have installed a webserver in an lxc container. This webserver can be accessed from the outside world via its URL thanks to the following iptable rule: sudo iptables -t nat -A PREROUTING -i eno1 -p ...
0
votes
0answers
81 views

Restore namespace for adapters lost to LXC

First, is there any method to list all adapters on a host even when held in another namespace, and second, how can I restore them if they don't automatically come back when a container is destroyed? ...
1
vote
1answer
519 views

getting ipv6 via radvd/dhcpd6 in an LXC guest working

what i want my setup has a dynamic amount of LXC containers and therefore i need some dynamic ipv6 address allocation. the interface brNC-internet is a simple bridge which is mapped into the LXC ...
0
votes
1answer
236 views

Openvas 9 - Continual logouts due to “Server reached connection limit (closing inbound connection)”

I keep having issues with getting logged out of Openvas/Greenbone Security Assistant, and after monitoring the logs while I was trying to run a scan, I finally noticed these lines that corresponded ...
1
vote
1answer
988 views

how to fix filesystem of a LXC container

This container doen't start anymore with these errors messages : # lxc-start -n deb7 -F INIT: version 2.88 booting Using makefile-style concurrent boot in runlevel S. Cleaning up temporary files......
0
votes
2answers
305 views

How to create iptables rule to allow IP Address with any sub directory [closed]

I currently have a DigitalOcean Ubuntu 16.04x64 server with Linux Containers to house multiple sites. One of the containers has HAProxy installed and routes incoming traffic to their appropriate ...
1
vote
1answer
539 views

Configure dnsmasq to passthrough search domain to LXC guest? (Ubuntu 16.04)

Our network relies on DHCP tags to route clients to the correct upstream hosts without having to know the FQDN of those hosts. We use dnsmasq to set tags for clients by MAC address and then we push ...
0
votes
0answers
75 views

Is it possible to get dynamic lease of IP address from LXD container on Google Compute Engine?

Followed “Ubiquiti Networks UniFi Controller in an Ubuntu LXD Machine Container“ when setting up a new Ubuntu VM on Google Compute Engine. But the container tries to lease an IP address, but nothing ...
1
vote
0answers
310 views

IPv6 to LXC container

I've got an ipv6 /64 subnet and use lxc/lxd with many container. The ipv6 /64 subnet is attached to eth0. Now I want every container get an ipv6 (maybe in an /56 subnet of this /64?) and be available ...
2
votes
0answers
216 views

LXD external static ip

I'm using LXD for managing LXC containers. I used the "standard" bridged NAT setup up to now. But know I got an additional static ip which is external available. I want to attach it to my container ...
2
votes
1answer
2k views

Configure LXC to use specific DNS server instead of DNSMASQ

Out of the box, my LXC containers connect to a running instance of dnsmasq, which is started with the lxc-net service. In my case, I am running a local unbound DNS server that connects to a thing ...
2
votes
1answer
485 views

LXC container not connecting to bridge on startup

I'm struggling to get an lxc container to startup with proper networking. /etc/network/interfaces: auto lxcbr0 iface lxcbr0 inet static address 192.168.5.69 netmask 255.255.255.0 ...