New answers tagged lxc
1
vote
Accepted
LXC container fail to load big iptables rules
You should consider using ipset to keep host/network addresses for block_spam* rules (and likely merge them into just one set), this would be faster. Or just move to nftables and use built in sets.
- 3,415
0
votes
LXC container fail to load big iptables rules
If you look up the sendmsg() man page you'll see that it does not actually have a response indicating that a message was too large. It does however return ENOBUFS if there is not enough space in the ...
- 21.5k
0
votes
Accepted
Debian 12 + LXD/LXC security.idmap.isolated fails
Apparently this is by design a feature of newer kernels. Here is a good explanation by Stéphane Graber, maintainer of LXC:
Prior to VFS idmap being available, we needed to work around file ownership ...
- 1,186
Top 50 recent answers are included