I have a host with LXC guests.

What I want to achieve:
1. Administration of guests without a need to have network in guests
2. Fully isolated sessions - think of 2 devs connecting to the same
container.
3. Delegate logon security to host - ideally passwordless root login to
guests as access is already secured by host.

I want to combine advantages of ssh to guest and lxc-console from host.

ssh to guest has disadvantage of requiring network access in guest and per
guest ssh key management.

ssh to host and then lxc-console to guest has disadvantage of logging into
previous session.

Is it possible?

I imagine something like this (feel fee to replace with a simpler way):

1. Setup a telnet server in guest that listens on a unix socket
2. Share the socket between guest and host
3. Set permissions on the host socket so members of lxcadm group can use it.
4. Login using ssh to host as a member of lxcadm group
5. Telnet to the socket
6. PROFIT!!!

-- 
Andrei
------------------------------------------------------------------------------
Everyone hates slow websites. So do we.
Make your web apps faster with AppDynamics
Download AppDynamics Lite for free today:
http://p.sf.net/sfu/appdyn_d2d_mar
_______________________________________________
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users

Reply via email to