Re: [Lxc-users] lxc-centos/lxc-rhel?

2013-12-04 Thread Tamas Papp
hi Dwight,

Sorry for the late reply.

Probably you were right and there was something in the bash initial
configuration/profile.

It is deployed by puppet, that's why I missed it. After disabling
puppet, I didn't experience this issue again. I need the check the bash
configuration:)


Thanks for the tip.

Cheers,
tamas



On 10/11/2013 06:17 PM, Dwight Engen wrote:
 On Thu, 10 Oct 2013 21:58:58 +0200
 Tamas Papp tom...@martos.bme.hu wrote:

 On 10/10/2013 08:56 PM, Dwight Engen wrote:
 Hmm not sure what could be the issue. I would start by running ssh
 -vv against the container and see where it is getting stuck.
 On the server:
 [...]

 It show up nothing to me.
 I agree that wasn't too helpful, but it shows there is nothing going
 wrong in the key exchange / authentication.
  
 There is strace log as well.
 This fork cycle is repeating:

 [...]

 Hmm, so for some reason /usr/bin/id -gn is being invoked over and over
 again? Do you have something in your login scripts that might do this?
 (ie. a quick google brought up
 http://stackoverflow.com/questions/5929552/ssh-command-execution-hangs-although-interactive-shell-functions-fine).
 Not sure where sshd is without seeing earlier in the strace.


--
Sponsored by Intel(R) XDK 
Develop, test and display web and hybrid apps with a single code base.
Download it for free now!
http://pubads.g.doubleclick.net/gampad/clk?id=111408631iu=/4140/ostg.clktrk
___
lxc-users mailing list
lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


Re: [Lxc-users] lxc-create -B zfs

2013-11-20 Thread Tamas Papp

On 11/20/2013 05:24 PM, Serge Hallyn wrote:
 Quoting Tamas Papp (tom...@martos.bme.hu):
 On 10/01/2013 07:14 AM, Serge Hallyn wrote:
 Right now if we say

 lxc-create -t ubuntu -n u1 -B zfs

 that means make the rootfs be type zfs.  Where/how should it be
 specified that $lxcpath/$lxcname should be a new zfs, not
 $lxcpath/$lxcname/rootfs?  'zfs.mounttype = [whole | rootfs]' ?
 Well, it's good idea.
 BTW I think it would be the same for lvm, btrfs and so on.

 Something like that would be ok for me, my main concern is actually
 that the special casing in lxcapi_create() and lxcapi_destroy()
 be done cleanly and concisely.  But yeah it should be possible.  Do
 you mind sending a patch?
 It would be great, but I checked and unfortunately it's much more then I
 can do with my programming skills:(
 Ok, lemme put out a general call - is there anyone who is using or
 wants to use lxc with zfs and who would have time to help straighten
 this out?  If/when I get two days where nothing else is likely to come
 up, I'd like to sit down and address this, but it'll take that time
 to clear my head to think about this right so that I make it better
 not worse...

 (I hope that sometime in december I'll have such a block of time,
 but hopefully someone beats me to it)

Seeing how busy you are, I'm doubt, it will ever happen:)
Anyway, if there is no volunteer, just drop the request. I can live with
a workaround (llxc-create container,  zfs create/lvcreate dataset, mv
container/* dataset/).
Though I'm afraid there will be more features in the future, that
require the layout compliance (eg. migration tool) and I'll be in trouble..


tamas

--
Shape the Mobile Experience: Free Subscription
Software experts and developers: Be at the forefront of tech innovation.
Intel(R) Software Adrenaline delivers strategic insight and game-changing 
conversations that shape the rapidly evolving mobile landscape. Sign up now. 
http://pubads.g.doubleclick.net/gampad/clk?id=63431311iu=/4140/ostg.clktrk
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


Re: [Lxc-users] How much LXC is secure?

2013-11-11 Thread Tamas Papp

On 11/11/2013 06:04 PM, Leonid Isaev wrote:
 On your system run
 $ lxc-checkconfig | grep User namespace
 to check if user namespaces are enabled on your host.

That's correct:

$ lxc-checkconfig | grep User namespace
User namespace: enabled
$ lsb_release -a
No LSB modules are available.
Distributor ID:Ubuntu
Description:Ubuntu Trusty Tahr (development branch)
Release:14.04
Codename:trusty


13.10 still lacks the support

tamas

--
November Webinars for C, C++, Fortran Developers
Accelerate application performance with scalable programming models. Explore
techniques for threading, error checking, porting, and tuning. Get the most 
from the latest Intel processors and coprocessors. See abstracts and register
http://pubads.g.doubleclick.net/gampad/clk?id=60136231iu=/4140/ostg.clktrk
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


Re: [Lxc-users] How much LXC is secure?

2013-11-11 Thread Tamas Papp

On 11/11/2013 10:23 PM, Serge Hallyn wrote:
 You can get the support either from ppa:ubuntu-lxc/kernel, or by
 installing the trusty kernel.  The trusty kernel has had some issues
 until last week (including upstream bugs), but I think it should be
 usable now.


I probably will wait until the release of Trusty or even more.
Both for safety and zfs support.

But I'm happy to read, that you guys are working on the support of this
important part of the concept.

tamas

ps.: A couple of months or years(?) ago there was a patch that was
submitted to the upstream, which made it possible to limit number of
processes in containers (against forkbombs). Is there any news about it?

--
November Webinars for C, C++, Fortran Developers
Accelerate application performance with scalable programming models. Explore
techniques for threading, error checking, porting, and tuning. Get the most 
from the latest Intel processors and coprocessors. See abstracts and register
http://pubads.g.doubleclick.net/gampad/clk?id=60136231iu=/4140/ostg.clktrk
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


Re: [Lxc-users] Containers that don't die!

2013-10-23 Thread Tamas Papp

On 10/23/2013 08:55 PM, Leandro Ferreira wrote:
 Hi,

 I was testing a solution with lxc and apache2 on ubuntu 13.04,
 And very very often some containers don't react to lxc-stop end even
 don't die with kill -9,
 It's a known bug? there are some work around?



What do you see exactly?
What is the output of:

lxc-list
ps axf
lxc-stop

What do you kill?
I don't see such a bug, though my system is not 13.04 but 12.04 and it's
normal lxc 0.7 or nightly or 13.04 + lxc nightly.


tamas

--
October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from 
the latest Intel processors and coprocessors. See abstracts and register 
http://pubads.g.doubleclick.net/gampad/clk?id=60135991iu=/4140/ostg.clktrk
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


Re: [Lxc-users] Problem with lxc and mutliple ips

2013-10-11 Thread Tamas Papp

On 10/11/2013 10:40 AM, Andreas Laut wrote:
 Ok, sorry. You're right.

 We are using a bridge named br0 bound to eth0 at lxc host. On the 
 containers we are using veth, but this problem happens also with type 
 macvlan. No change at all.

 We also tried using hwaddr.
 We're doing further research in hope to show a way to reproduce this for 
 you.

Are you able to reproduce that against recent nightly build?

tamas

--
October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from 
the latest Intel processors and coprocessors. See abstracts and register 
http://pubads.g.doubleclick.net/gampad/clk?id=60134071iu=/4140/ostg.clktrk
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


Re: [Lxc-users] Problem with lxc and mutliple ips

2013-10-11 Thread Tamas Papp

On 10/11/2013 02:42 PM, Andreas Laut wrote:
 Hi,

 actually can't get lxc nightly compiled with debian right now,
 configure has problems with pkg-config python3-dev (package pkg-config
 and python3-dev is installed) (configure line 5588)

 I tried instead lxc 0.9 from tarball and got the same problem.

 Our LXC Config is attached, maybe this helps.
 Our lxc-host bridge is configured like

 auto br0
 iface br0 inet static
 bridge_ports eth4
 bridge_stp off
 address 10.5.255.80
 netmask 255.255.0.0
 gateway 10.5.255.252

I used to add

bridge_fd 0
bridge_maxwait 0


to the bridge config.

tamas

--
October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from 
the latest Intel processors and coprocessors. See abstracts and register 
http://pubads.g.doubleclick.net/gampad/clk?id=60134071iu=/4140/ostg.clktrk
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


Re: [Lxc-users] lxc-centos/lxc-rhel?

2013-10-10 Thread Tamas Papp
On 10/02/2013 05:41 PM, Dwight Engen wrote:
 On Mon, 30 Sep 2013 23:18:59 +0200
 Tamas Papp tom...@martos.bme.hu wrote:

 On 09/30/2013 08:37 PM, Michael H. Warfield wrote:


 Dwight,

 Actually I have a problem with the Oracle template.
 I have a a couple of Oracle Linux containers and they are running
 fine. There are running Oracle Databases as well...

 But I cannot run anything through an ssh session noninteractively or
 copy files to the containers by scp as a destionation.

 Eg.:

 $ ssh container echo
 $ scp file container:

 It's waiting for something and I could not find out.
 Hi Tamas, sorry, I know you brought this up before and I wasn't sure if
 you got it solved or not. First off the host doesn't know the
 container by name so unless you've done something special the resolving
 of container isn't going to just work (ie. ping container should fail

Yes, I know about that. This not that case:)

 to resolve to an IP). You can use a recent version of lxc-info to get
 the containers' IP. Here is a session I just did in Ubuntu that I think
 is similar to what you are trying to do:

 root@xubu:~# lxc-create -n ol -t oracle -- -u ftp://mymirror/ol-public-yum
 lots of output
 root@xubu:~# lxc-start -d -n ol
 wait a few seconds for it to start
 root@xubu:~# lxc-info -n ol
 state:  RUNNING
 pid:8685
 ip: 10.0.3.163
 root@xubu:~# ssh 10.0.3.163
 The authenticity of host '10.0.3.163 (10.0.3.163)' can't be established.
 RSA key fingerprint is 2c:1a:82:14:24:72:c5:41:db:3e:b8:65:f9:c6:7e:35.
 Are you sure you want to continue connecting (yes/no)? yes
 Warning: Permanently added '10.0.3.163' (RSA) to the list of known hosts.
 long pause here...
 root@10.0.3.163's password: 
 [root@ol ~]# vi /etc/ssh/sshd_config
 set GSSAPIAuthentication no
 [root@ol ~]# halt
 container shuts down
 root@xubu:~# lxc-start -d -n ol
 root@xubu:~# ssh 10.0.3.163
 root@10.0.3.163's password: 
 Last login: Wed Oct  2 11:09:07 2013 from 10.0.3.1
 [root@ol ~]# 
 [root@ol ~]# exit
 logout
 Connection to 10.0.3.163 closed.
 root@xubu:~# scp 10.0.3.163:/etc/fstab .
 root@10.0.3.163's password: 
 bash: scp: command not found
 This is because openssh-clients wasn't installed in the container, so
  we have to go install that. I think I should add that to be installed
  by default in the template

[Good idea.]

 root@xubu:~# ssh 10.0.3.163
 root@10.0.3.163's password: 
 Last login: Wed Oct  2 11:11:38 2013 from 10.0.3.1
 [root@ol ~]# echo 192.168.1.30 mymirror /etc/hosts
 [root@ol ~]# yum install openssh-clients
 lots of yum output
 [root@ol ~]# exit
 logout
 Connection to 10.0.3.163 closed.
 root@xubu:~# scp 10.0.3.163:/etc/fstab .
 root@10.0.3.163's password: 
 fstab
 100%0 0.0KB/s   00:00
 root@xubu:~# 
 root@xubu:~# scp fstab 10.0.3.163:
 root@10.0.3.163's password: 
 fstab
 100%0 0.0KB/s   00:00

 So I hopefully your situation is similar and disabling the
 GSSAPIAuthentication or setting UseDNS no in the containers sshd_config
 will reduce the wait times. Also, the openssh-clients package has to be
 installed in the container for scp to work. For now you can manually
 install it in the container using yum or the -r option to the template
 when creating a new OL container. I'll submit a patch for the template
 that includes that package by default so scp in/out will work out of
 the box.

Unfortunately disabling GSSAPI* and UseDNS options doesn't help. I
experience the same problem.
BTW, our system works fine, DNS is fine, Ubuntu and Debian containers,
HW based OL installations and everything works as they expected.
In fact OL containers are working fine, except this issue. For I can run
Oracel DB inside one.

If you tell me, how to debug, what to do, I can try that. Currently I'm
out of ideas:/


10x
tamas

ps.: Sorry again and thanks for not forgetting this email;)

--
October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from 
the latest Intel processors and coprocessors. See abstracts and register 
http://pubads.g.doubleclick.net/gampad/clk?id=60134071iu=/4140/ostg.clktrk
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


Re: [Lxc-users] lxc-create -B zfs

2013-10-07 Thread Tamas Papp
On 10/01/2013 07:14 AM, Serge Hallyn wrote:
 Right now if we say

   lxc-create -t ubuntu -n u1 -B zfs

 that means make the rootfs be type zfs.  Where/how should it be
 specified that $lxcpath/$lxcname should be a new zfs, not
 $lxcpath/$lxcname/rootfs?  'zfs.mounttype = [whole | rootfs]' ?

Well, it's good idea.
BTW I think it would be the same for lvm, btrfs and so on.

 Something like that would be ok for me, my main concern is actually
 that the special casing in lxcapi_create() and lxcapi_destroy()
 be done cleanly and concisely.  But yeah it should be possible.  Do
 you mind sending a patch?

It would be great, but I checked and unfortunately it's much more then I
can do with my programming skills:(


tamas

--
October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from 
the latest Intel processors and coprocessors. See abstracts and register 
http://pubads.g.doubleclick.net/gampad/clk?id=60134791iu=/4140/ostg.clktrk
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


Re: [Lxc-users] lxc-instance fail

2013-10-07 Thread Tamas Papp

On 10/07/2013 07:09 PM, Serge Hallyn wrote:
 An easy way to reproduce this without zfs is:

   sudo lxc-create -t ubuntu -n r0
   sudo cp /var/lib/lxc/r0/config /tmp
   sudo lxc-start -n r0 -f /tmp/config -d
   sudo lxc-info -n r0
   (it shows up as stopped)

 sudo lsof shows that

   @/var/lib/lxc_anon/r0/command

 is the command socket, not the usual

   @/var/lib/lxc/r0/command

 You can see it using

   sudo lxc-info -P /var/lib/lxc_anon -n r0

 Perhaps lxc-instance should be following the config link, making
 sure it is in fact $lxcpath/$lxcname/config, and then just doing
 lxc-start -n $lxcname?

 -serge

Indeed, if I remove '-f $CONFIG' from upstart config it works fine.
Actually why is it there?

Thanks,
tamas

--
October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from 
the latest Intel processors and coprocessors. See abstracts and register 
http://pubads.g.doubleclick.net/gampad/clk?id=60134791iu=/4140/ostg.clktrk
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


Re: [Lxc-users] lxc mtab

2013-10-05 Thread Tamas Papp
On 10/05/2013 06:50 AM, Kalyana sundaram wrote:

 Hi
 I run a group of lxc containers over a ubuntu host. when I do df on the 
 container, I get rootfs
 and /dev/disk. But since both are same(mounted on /), why mtab shows them 
 separately, I think I
 am missing some insight in this.

 df -TH
 FilesystemType Size   Used  Avail Use% Mounted on
 rootfs  rootfs 984G54G   881G   6% /
 /dev/sdb1 ext4 984G54G   881G   6% /


What are the version numbers? Are the containers ubuntu as well?
What do you see on the host?

tamas

--
October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from 
the latest Intel processors and coprocessors. See abstracts and register 
http://pubads.g.doubleclick.net/gampad/clk?id=60134791iu=/4140/ostg.clktrk
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


Re: [Lxc-users] lxc-instance fail

2013-10-05 Thread Tamas Papp

On 10/04/2013 04:11 PM, Tamas Papp wrote:
 hi,

 Starting a container from cli by lxc-start works fine, lxc-info shows the 
 right state.

 Using upstart:

 start lxc-instance NAME=archiva-test CONFIG=/tank/lxc/archiva-test/config

 # lxc-info -n archiva-test
 state: STOPPED

 Though the container gets started.

 As a result I cannot use lxc-stop, lxc-ls or any other tool.
 But, stop lxc-instance... works fine.


 I was able to reproduce this issue on various machines with the latest daily 
 build.


 Am I alone with this issue?

This issue is bigger problem then I thought.
If container is started with the upstart script, a second one can be
started via normal lxc-start.

Why is that?
I mean, lxc tools doesn't see the container itself for some reasong.
But should not the directory be locked by the previously running
container? Eg. though the rootfs.hold file.

It's quite a big issue, that two instance is able to run on the same
directory.

Thanks,
tamas

--
October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from 
the latest Intel processors and coprocessors. See abstracts and register 
http://pubads.g.doubleclick.net/gampad/clk?id=60134791iu=/4140/ostg.clktrk
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


[Lxc-users] lxc-instance fail

2013-10-04 Thread Tamas Papp
hi,

Starting a container from cli by lxc-start works fine, lxc-info shows the right 
state.

Using upstart:

start lxc-instance NAME=archiva-test CONFIG=/tank/lxc/archiva-test/config

# lxc-info -n archiva-test
state: STOPPED

Though the container gets started.

As a result I cannot use lxc-stop, lxc-ls or any other tool.
But, stop lxc-instance... works fine.


I was able to reproduce this issue on various machines with the latest daily 
build.


Am I alone with this issue?


10x
tamas

--
October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from 
the latest Intel processors and coprocessors. See abstracts and register 
http://pubads.g.doubleclick.net/gampad/clk?id=60134791iu=/4140/ostg.clktrk
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


Re: [Lxc-users] lxc-instance fail

2013-10-04 Thread Tamas Papp
On 10/04/2013 05:05 PM, zoolook wrote:
 I have also seen this problem from time to time in different boxes and 
 different
 versions of lxc. It's not easily reproducible and I can't remember if I 
 reported
 it (maybe not since I couldn't make a 100% reproducible test case).

 I also use a non-standard directory, /srv/lxc in my case. Symlinking and -P 
 made
 no difference. 

 When the bug manifests the only solution I found was a complete reboot of the
 host.

I'm not able to not reproduce it:)

tamas

--
October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from 
the latest Intel processors and coprocessors. See abstracts and register 
http://pubads.g.doubleclick.net/gampad/clk?id=60134791iu=/4140/ostg.clktrk
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


Re: [Lxc-users] Puppetmaster (server) in container

2013-10-03 Thread Tamas Papp
On 10/03/2013 02:15 PM, Kaj Wiik wrote:
 Hi!

 I am trying to run puppetmaster in a vanilla ubuntu lxc container.
 Upon startup, I get the following error:

 /usr/lib/ruby/1.8/puppet/util/pidlock.rb:39:in `initialize':
 Permission denied - /var/lib/puppet/run/master.pid (Errno::EACCES)
 from /usr/lib/ruby/1.8/puppet/util/pidlock.rb:39:in `open'
 from /usr/lib/ruby/1.8/puppet/util/pidlock.rb:39:in `lock'
 from /usr/lib/ruby/1.8/puppet/daemon.rb:47:in `create_pidfile'
 from /usr/lib/ruby/1.8/puppet/util.rb:42:in `synchronize_on'
 from /usr/lib/ruby/1.8/sync.rb:230:in `synchronize'
 from /usr/lib/ruby/1.8/puppet/util.rb:42:in `synchronize_on'
 from /usr/lib/ruby/1.8/puppet/daemon.rb:46:in `create_pidfile'
 from /usr/lib/ruby/1.8/puppet/daemon.rb:22:in `daemonize'
 from /usr/lib/ruby/1.8/puppet/application/master.rb:191:in `main'
 from /usr/lib/ruby/1.8/puppet/application/master.rb:144:in `run_command'
 from /usr/lib/ruby/1.8/puppet/application.rb:309:in `run'
 from /usr/lib/ruby/1.8/puppet/application.rb:413:in `hook'
 from /usr/lib/ruby/1.8/puppet/application.rb:309:in `run'
 from /usr/lib/ruby/1.8/puppet/application.rb:404:in `exit_on_fail'
 from /usr/lib/ruby/1.8/puppet/application.rb:309:in `run'
 from /usr/lib/ruby/1.8/puppet/util/command_line.rb:69:in `execute'
 from /usr/bin/puppet:4

 Touching /var/lib/puppet/run/master.pid works as root. Starting
 puppetmaster in a 'real' ubuntu (same version) works without problem
 so this must be lxc-related...? Am I missing some service in the
 minimal ubuntu server installation?


It's not running as root:

puppet12914  1.3  0.0 185140 102864 ?   S13:25   0:47
master  


puppet12924  1.3  0.0 188136 106340 ?   S13:25   0:46
master  


puppet12935  1.2  0.0 184752 102648 ?   S13:25   0:40 master

BTW, it works fine for me at various places.

Cheers,
tamas

--
October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from 
the latest Intel processors and coprocessors. See abstracts and register 
http://pubads.g.doubleclick.net/gampad/clk?id=60134791iu=/4140/ostg.clktrk
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


Re: [Lxc-users] (no subject)

2013-10-03 Thread Tamas Papp
On 10/04/2013 06:03 AM, Kalyana sundaram wrote:
 Hi
 lxc by default creates rootfs and fstab on /var/lib/lxc
 Is it possible to use some other directory?
 Because when I do lxc-ls, it does a ls of /var/lib/lxc


Either use lxcpath=/some/other/dir in /etc/lxc/lxc.conf or -P switch


Cheers,
tamas

--
October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from 
the latest Intel processors and coprocessors. See abstracts and register 
http://pubads.g.doubleclick.net/gampad/clk?id=60134791iu=/4140/ostg.clktrk
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


Re: [Lxc-users] lxc-create -B zfs

2013-10-01 Thread Tamas Papp
On 10/01/2013 07:08 AM, Serge Hallyn wrote:
 Quoting Tamas Papp (tom...@martos.bme.hu):
 On 06/18/2013 04:14 AM, Serge Hallyn wrote:

 hi Serge,

 Quoting Tamas Papp (tom...@martos.bme.hu):
 On 06/10/2013 03:41 PM, Serge Hallyn wrote:
 Quoting Tamas Papp (tom...@martos.bme.hu):
 hi,

 # lxc-create -n pony -t ubuntu -B zfs --zfsroot=tank/lxc
 Hm.  Mine is simply called 'lxc', and that works.  So it sounds like I'm
 doing something wrong in parsing the zfsroot, but I can't offhand see
 in the code where.

 Could you run this through 'strace -f -odebutfile' and look in debugfile
 for the exec of 'zfs create'?
 hi,

 Sorry, I could get back to this just now:

 log.103022:execve(/sbin/zfs, [zfs, create,
 -omountpoint=/var/lib/lxc/test123/rootfs, tank/lxc/test123], [/*
 21 vars */]) = 0

 From cli it works fine.

 I can send the whole log file, if you want.
 Yes, please do - to me personally depending on the size, to spare the
 list.
 Shame on me, I absolutely forgot to answer this email.

 This one works fine:

 # lxc-create -n eee -t ubuntu -B zfs --zfsroot tank/lxc

hi,

 Can zfs pools be any directory hierarchy depth?  Examples I had seen

Yes, they can.
A complete zfs pool acts as a hierarchy set of directories and volumes.

For example this one is from a production server:

# zfs list
NAME USED  AVAIL  REFER  MOUNTPOINT
tank1.56T  3.79T   176K  /tank
tank/eee 136K  3.79T   136K  /tank/eee
tank/iso11.1G  3.79T  11.1G  /tank/iso
tank/kvm97.1G  3.79T   136K  /tank/kvm
tank/kvm/bw139.0G  3.79T  32.5G  -
tank/kvm/compreg-vmk01  11.4G  3.79T  9.18G  -
tank/kvm/ipa12  1005M  3.79T   953M  -
tank/kvm/naming-vmk01   18.7G  3.79T  15.3G  -
tank/kvm/naming-vmk02   17.5G  3.79T  12.5G  -
tank/kvm/tpl-kvm-w7 9.49G  3.79T  9.49G  -
tank/lxc1.46T  3.79T   339M  /tank/lxc
tank/lxc/cz  136K  3.79T   136K  /tank/lxc/cz
tank/lxc/dctest  338M  3.79T   338M  /tank/lxc/dctest
tank/lxc/finance2.97G  3.79T  2.97G  /tank/lxc/finance
tank/lxc/hammer 1.16T  3.79T  1.16T  /tank/lxc/hammer
tank/lxc/ijc-cipool 38.5G  3.79T  38.5G  /tank/lxc/ijc-cipool
tank/lxc/inventory   706M  3.79T   504M  /tank/lxc/inventory
tank/lxc/jay94.8G  3.79T  94.8G  /tank/lxc/jay
tank/lxc/jcc-vmc01  1.26G  3.79T  1.26G  /tank/lxc/jcc-vmc01
tank/lxc/marvin4jsci6.03G  3.79T  6.03G  /tank/lxc/marvin4jsci
tank/lxc/marvinci   5.93G  3.79T  5.93G  /tank/lxc/marvinci
tank/lxc/svntest 149G  3.79T   149G  /tank/lxc/svntest
tank/lxc/webdev-vmc01767M  3.79T   767M  /tank/lxc/webdev-vmc01
tank/tmp 282M  3.79T   136K  /tank/tmp



There is nothing directly under the pool 'tank', but mostly filesystems.
tank/lxc and tank/kvm are like forks of a volume group (though they could be 
used as simple
directories).

 were always just one (i.e. 'tank'), so I always just used 'lxc'.

Terminology:

tank - pool
tank/lxc - filesystem
tank/ - root filesystem of the pool.


Differences are in properties:

# zpool get all tank
NAME  PROPERTY   VALUE  SOURCE
tank  size   5.44T  -
tank  capacity   28%-
tank  altroot-  default
tank  health ONLINE -
tank  guid   14358046246634998549   default
tank  version-  default
tank  bootfs -  default
tank  delegation on default
tank  autoreplaceoffdefault
tank  cachefile  -  default
tank  failmode   wait   default
tank  listsnapshots  offdefault
tank  autoexpand offdefault
tank  dedupditto 0  default
tank  dedupratio 1.00x  -
tank  free   3.87T  -
tank  allocated  1.57T  -
tank  readonly   off-
tank  ashift 12 local
tank  comment-  default
tank  expandsize 0  -
tank  freeing0  default
tank  feature@async_destroy  enabledlocal
tank  feature@empty_bpobjactive local
tank  feature@lz4_compress   active local

# zfs get all tank
NAME  PROPERTY  VALUE  SOURCE
tank  type  filesystem -
tank  creation  Tue Jul 16 17:23 2013  -
tank  used  1.57T  -
tank  available 3.79T  -
tank  referenced176K   -
tank  compressratio

Re: [Lxc-users] lxc-centos/lxc-rhel?

2013-09-30 Thread Tamas Papp
On 09/30/2013 06:23 PM, Michael H. Warfield wrote:
 The Oracle Linux template worked well on Fedora.  Will it work on other
 distros like Arch, Alt, or Suse which doesn't have a (compatible)
 version of yum/rpm?  That's one of my major take-aways from Linux

It works on Ubuntu (12.04+ in my case).

 Plumbers, to tub thump the message that these templates need to be as
 distro agnostic as possible.  I think I now have the Fedora template in
 pretty good shape and will be posting a patch for that in the next day
 or two (after reviewing your suggestions).

I'm waiting for it very much, fedora template doesn't work on Ubuntu at this 
moment...

Cheers,
tamas

--
October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from 
the latest Intel processors and coprocessors. See abstracts and register 
http://pubads.g.doubleclick.net/gampad/clk?id=60133471iu=/4140/ostg.clktrk
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


Re: [Lxc-users] lxc-centos/lxc-rhel?

2013-09-30 Thread Tamas Papp
On 09/30/2013 08:37 PM, Michael H. Warfield wrote:
 Oh?  I thought it did, but you had to have the rpm and yum packages
 installed (you won't with the new one).  I thought I had tested that out
 on one of my Ubuntu systems.

This is the end of the process:

Copy /var/cache/lxc/fedora/x86_64/18/rootfs to  /tank/lxc/ipa12/rootfs ...
Copying rootfs to  /tank/lxc/ipa12/rootfs ...setting root passwd to root
installing fedora-release package
warning: Failed to read auxiliary vector, /proc not mounted?
warning: Failed to read auxiliary vector, /proc not mounted?
warning: Failed to read auxiliary vector, /proc not mounted?
warning: Failed to read auxiliary vector, /proc not mounted?
warning: Failed to read auxiliary vector, /proc not mounted?
warning: Failed to read auxiliary vector, /proc not mounted?
warning: Failed to read auxiliary vector, /proc not mounted?
warning: Failed to read auxiliary vector, /proc not mounted?
Error: Cannot retrieve metalink for repository: fedora/18/x86_64. Please verify 
its path and try again
container rootfs and config created



But I wouldn't care about this if you rewrite it anyway.
BTW:
ii  lxc 1.0.0~alpha1.0+master~201309
amd64Linux Containers userspace tools


I also suggest you to take a look at this:

https://github.com/lxc/lxc/issues/47


Sorry about the quality of the report, it was quite late, when I wrote it:)


Cheers,
tamas

--
October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from 
the latest Intel processors and coprocessors. See abstracts and register 
http://pubads.g.doubleclick.net/gampad/clk?id=60134791iu=/4140/ostg.clktrk
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


Re: [Lxc-users] lxc-centos/lxc-rhel?

2013-09-30 Thread Tamas Papp
On 09/30/2013 08:37 PM, Michael H. Warfield wrote:


Dwight,

Actually I have a problem with the Oracle template.
I have a a couple of Oracle Linux containers and they are running fine. There 
are running Oracle
Databases as well...

But I cannot run anything through an ssh session noninteractively or copy files 
to the containers by
scp as a destionation.

Eg.:

$ ssh container echo
$ scp file container:

It's waiting for something and I could not find out.

The system is Ubuntu (12.04 and 13.04). Don't you have this error?


Thanks,
tamas

--
October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from 
the latest Intel processors and coprocessors. See abstracts and register 
http://pubads.g.doubleclick.net/gampad/clk?id=60134791iu=/4140/ostg.clktrk
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


Re: [Lxc-users] Some important project changes

2013-09-20 Thread Tamas Papp
On 09/20/2013 06:37 PM, Stéphane Graber wrote:


hi Stephane,

Don't hesitate to contact me, if you need help with the infrastructure or the 
migration process.
Though I guess you're fine about these things:)

For the website (I see it the first time now):

lxc-ls --fancy | grep p1

I would change this example to:

lxc-ls --fancy p1


Cheers,
tamas


ps.: Big thanks to Daniel and everybody who contributed to this great project!

--
LIMITED TIME SALE - Full Year of Microsoft Training For Just $49.99!
1,500+ hours of tutorials including VisualStudio 2012, Windows 8, SharePoint
2013, SQL 2012, MVC 4, more. BEST VALUE: New Multi-Library Power Pack includes
Mobile, Cloud, Java, and UX Design. Lowest price ever! Ends 9/20/13. 
http://pubads.g.doubleclick.net/gampad/clk?id=58041151iu=/4140/ostg.clktrk
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


Re: [Lxc-users] lxc-create -B zfs

2013-09-10 Thread Tamas Papp
On 06/18/2013 04:14 AM, Serge Hallyn wrote:

hi Serge,

 Quoting Tamas Papp (tom...@martos.bme.hu):
 On 06/10/2013 03:41 PM, Serge Hallyn wrote:
 Quoting Tamas Papp (tom...@martos.bme.hu):
 hi,

 # lxc-create -n pony -t ubuntu -B zfs --zfsroot=tank/lxc
 Hm.  Mine is simply called 'lxc', and that works.  So it sounds like I'm
 doing something wrong in parsing the zfsroot, but I can't offhand see
 in the code where.

 Could you run this through 'strace -f -odebutfile' and look in debugfile
 for the exec of 'zfs create'?
 hi,

 Sorry, I could get back to this just now:

 log.103022:execve(/sbin/zfs, [zfs, create,
 -omountpoint=/var/lib/lxc/test123/rootfs, tank/lxc/test123], [/*
 21 vars */]) = 0

 From cli it works fine.

 I can send the whole log file, if you want.
 Yes, please do - to me personally depending on the size, to spare the
 list.

Shame on me, I absolutely forgot to answer this email.

This one works fine:

# lxc-create -n eee -t ubuntu -B zfs --zfsroot tank/lxc

But:

# lxc-create -n eee -t ubuntu -B zfs
cannot create 'lxc/eee': no such pool 'lxc'
lxc-create: Failed to create backing store type zfs

lxc-create: Error creating backing store type zfs for eee
lxc-create: Error creating container eee

The problematic command:

execve(/sbin/zfs, [zfs, create, -omountpoint=/tank/lxc/eee/rootfs, 
lxc/eee], [/* 31 vars
*/]) = 0

Of course it's not OK, since the last parameter should be tank/lxc/eee.

It seems to me, that either -B zfs should require --zfsroot or the default 
value for zfsroot
should be tank/lxc as it is in the help:

  --zfsroot=PATHCreate zfs under given zfsroot
(Default: tank/lxc))


I've attached the strace log.

Sorry for the mess again...

 ps.: Can we make at least configurable the mountpoint, so it can be set to 
 the root of the container?
 I'd like to call that something different, as it has completely
 different behavior.  We could do the same for btrfs and zfs.
 At container start, we want $rootfs to be treated as a simple dir
 backed container.  At clone time, we want to bypass manual copying
 of files and backing store - but not of the updating of the files -
 in favor clone of all of $lxcpath/$container/.

I'm not sure, I see the problem here. Can you elaborate it?
Even if config, fstab and other files outside of rootfs directory are cloned to 
a new fs, they can
be overwritten, deleted or anything else.
Is the problem something around this?

Thanks,
tamas
set_robust_list(0x7fd33f156a20, 0x18)   = 0
execve(/root/bin/zfs, [zfs, create, -omountpoint=/tank/lxc/eee/rootfs, lxc/eee], [/* 31 vars */]) = -1 ENOENT (No such file or directory)
execve(/usr/local/sbin/zfs, [zfs, create, -omountpoint=/tank/lxc/eee/rootfs, lxc/eee], [/* 31 vars */]) = -1 ENOENT (No such file or directory)
execve(/usr/local/bin/zfs, [zfs, create, -omountpoint=/tank/lxc/eee/rootfs, lxc/eee], [/* 31 vars */]) = -1 ENOENT (No such file or directory)
execve(/usr/sbin/zfs, [zfs, create, -omountpoint=/tank/lxc/eee/rootfs, lxc/eee], [/* 31 vars */]) = -1 ENOENT (No such file or directory)
execve(/usr/bin/zfs, [zfs, create, -omountpoint=/tank/lxc/eee/rootfs, lxc/eee], [/* 31 vars */]) = -1 ENOENT (No such file or directory)
execve(/sbin/zfs, [zfs, create, -omountpoint=/tank/lxc/eee/rootfs, lxc/eee], [/* 31 vars */]) = 0
brk(0)  = 0x174d000
access(/etc/ld.so.nohwcap, F_OK)  = -1 ENOENT (No such file or directory)
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5a2b5a8000
access(/etc/ld.so.preload, R_OK)  = -1 ENOENT (No such file or directory)
open(/etc/ld.so.cache, O_RDONLY|O_CLOEXEC) = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=25408, ...}) = 0
mmap(NULL, 25408, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f5a2b5a
close(3)= 0
access(/etc/ld.so.nohwcap, F_OK)  = -1 ENOENT (No such file or directory)
open(/lib/libnvpair.so.1, O_RDONLY|O_CLOEXEC) = 3
read(3, \177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0\0\1\0\0\0\260\0\0\0\0\0\0@\0\0\0\0\0\0\0`\\1\0\0\0\0\0\0\0\0\0@\0008\0\7\0@\0\33\0\32\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0,\30\1\0\0\0\0\0,\30\1\0\0\0\0\0\0\0 \0\0\0\0\0\1\0\0\0\6\0\0\0\340\32\1\0\0\0\0\0\340\32!\0\0\0\0\0\340\32!\0\0\0\0\0x\6\0\0\0\0\0\0\210\6\0\0\0\0\0\0\0\0 \0\0\0\0\0\2\0\0\0\6\0\0\0\310\35\1\0\0\0\0\0\310\35!\0\0\0\0\0\310\35!\0\0\0\0\0\260\1\0\0\0\0\0\0\260\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0\4\0\0\0\4\0\0\0\310\1\0\0\0\0\0\0\310\1\0\0\0\0\0\0\310\1\0\0\0\0\0\0$\0\0\0\0\0\0\0$\0\0\0\0\0\0\0\4\0\0\0\0\0\0\0P\345td\4\0\0\0d\352\0\0\0\0\0\0d\352\0\0\0\0\0\0d\352\0\0\0\0\0\0\244\10\0\0\0\0\0\0\244\10\0\0\0\0\0\0\4\0\0\0\0\0\0\0Q\345td\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\0\0\0\0R\345td\4\0\0\0\340\32\1\0\0\0\0\0\340\32!\0\0\0\0\0\340\32!\0\0\0\0\0 \5\0\0\0\0\0\0 \5\0\0\0\0\0\0\1\0\0\0\0\0\0\0\4\0\0\0\24\0\0\0\3\0\0\0GNU\0\301\274\243#'\205\252\364Z\3069\365\355\f\235\201e\361 D\0\0\0\0\305\0\0\0'\0\0

[Lxc-users] shared memory

2013-09-09 Thread Tamas Papp
hi All,

I always had issues regarding to shared memory and containers in the past. It 
was about postgresql
and shmmax tuning or something like that. I always solved the those issues in 
different way.

Now I'd like to install a DB2 server in a container. After a successful setup 
process I get this
error, when I try to start the database:

 Global instance memory (4KB)  (INSTANCE_MEMORY) = AUTOMATIC(20)


I guess, the problem is the same.

Is there anybody else who was able to install DB2 in a container?


Thanks,
tamas

--
Learn the latest--Visual Studio 2012, SharePoint 2013, SQL 2012, more!
Discover the easy way to master current and previous Microsoft technologies
and advance your career. Get an incredible 1,500+ hours of step-by-step
tutorial videos with LearnDevNow. Subscribe today and save!
http://pubads.g.doubleclick.net/gampad/clk?id=58041391iu=/4140/ostg.clktrk
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


[Lxc-users] copy from OEL template does not work

2013-08-15 Thread Tamas Papp
hi,

env:

Linux virt101 3.8.0-27-generic #40-Ubuntu SMP Tue Jul 9 00:17:05 UTC 2013 
x86_64 x86_64 x86_64 GNU/Linux
No LSB modules are available.
Distributor ID:Ubuntu
Description:Ubuntu 13.04
Release:13.04
Codename:raring
ii  lxc 0.9.0.0~staging~20130814-145 amd64Linux 
Containers userspace tools

I created the container with the official lxc-oracle script:

$ lxc-create -n VM -t oracle

LSB Version: :base-4.0-amd64:base-4.0-noarch:core-4.0-amd64:core-4.0-noarch
Distributor ID:OracleServer
Description:Oracle Linux Server release 6.4
Release:6.4
Codename:n/a





I copy a file from the container with scp.

 From top output:
31973 tompos20   0  120m  18m 1272 S 41.3  0.0   0:05.28 bash -c scp -f 
a.txt

File:
-rw-r--r-- 1 tompos tompos 0 Aug 15 09:42 /home/tompos/a.txt

Usually I get a segfault after a time:
[356314.564571] bash[6347]: segfault at 7fff110d1ff8 ip 7f30ec5bc2ea sp 
7fff110d2000 error 6 
in libc-2.12.so[7f30ec578000+18a000]



The same works fine with Ubuntu guest. What can be the problem?
Is it a bug or maybe I miss something?

Thanks in advance,
tamas

--
Get 100% visibility into Java/.NET code with AppDynamics Lite!
It's a free troubleshooting tool designed for production.
Get down to code-level detail for bottlenecks, with 2% overhead. 
Download for free and get started troubleshooting in minutes. 
http://pubads.g.doubleclick.net/gampad/clk?id=48897031iu=/4140/ostg.clktrk
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


Re: [Lxc-users] copy from OEL template does not work

2013-08-15 Thread Tamas Papp
On 08/15/2013 06:37 PM, Dwight Engen wrote:
 On Thu, 15 Aug 2013 16:12:26 +0200
 Tamas Papp tom...@martos.bme.hu wrote:

 hi,

 env:

 Linux virt101 3.8.0-27-generic #40-Ubuntu SMP Tue Jul 9 00:17:05 UTC
 2013 x86_64 x86_64 x86_64 GNU/Linux No LSB modules are available.
 Distributor ID:Ubuntu
 Description:Ubuntu 13.04
 Release:13.04
 Codename:raring
 ii  lxc 0.9.0.0~staging~20130814-145 amd64
 Linux Containers userspace tools

 I created the container with the official lxc-oracle script:

 $ lxc-create -n VM -t oracle

 LSB
 Version: :base-4.0-amd64:base-4.0-noarch:core-4.0-amd64:core-4.0-noarch
 Distributor ID:OracleServer Description:Oracle Linux Server
 release 6.4 Release:6.4
 Codename:n/a





 I copy a file from the container with scp.

   From top output:
 31973 tompos20   0  120m  18m 1272 S 41.3  0.0   0:05.28 bash -c
 scp -f a.txt

 File:
 -rw-r--r-- 1 tompos tompos 0 Aug 15 09:42 /home/tompos/a.txt

 Usually I get a segfault after a time:
 [356314.564571] bash[6347]: segfault at 7fff110d1ff8 ip
 7f30ec5bc2ea sp 7fff110d2000 error 6 in
 libc-2.12.so[7f30ec578000+18a000]
 Hi Tamas, I'm not certain I fully understand your scenario. It looks
 like you have an OL6.4 container on an Ubuntu host, and you are then
 trying to scp a file from out of the container into the host? Are you

Exactly.
Into the host or any other VM or (linux?) computer. I didn't tested other OS, 
like windows.

 doing the scp from inside the container or on the host?

I connect with scp to the container:

host:~$ scp container:a.txt .

BTW, the same is true for rsync.


tamas

--
Get 100% visibility into Java/.NET code with AppDynamics Lite!
It's a free troubleshooting tool designed for production.
Get down to code-level detail for bottlenecks, with 2% overhead. 
Download for free and get started troubleshooting in minutes. 
http://pubads.g.doubleclick.net/gampad/clk?id=48897031iu=/4140/ostg.clktrk
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


Re: [Lxc-users] copy from OEL template does not work

2013-08-15 Thread Tamas Papp
On 08/15/2013 07:26 PM, Tony Su wrote:
 Also,
 Without an error message more informative than a simple segfault, who knows?

There is no more.

 Recommend:
 Search your Host syslogs for a more informative error message
 If not in a message, post the Container config file somewhere where
 someone can inspect (eg Pastbin)

I think, in this case the simplest way would be to create an own container.

Anyway, it's a default config file:

# Template used to create this container: /usr/share/lxc/templates/lxc-oracle
# Parameters passed to the template:
lxc.network.type = veth
lxc.network.flags = up
lxc.network.link = br-eth0
lxc.rootfs = /tank/lxc/jcc-vmc01/rootfs
# Container configuration for Oracle Linux 6.4
lxc.arch = x86_64
lxc.utsname = jcc-vmc01
lxc.devttydir = lxc
lxc.tty = 4
lxc.pts = 1024
lxc.mount = /tank/lxc/jcc-vmc01/fstab
lxc.hook.clone = /usr/share/lxc/hooks/clonehostname
# Uncomment these if you don't run anything that needs the capability, and
# would like the container to run with less privilege.
#
# Dropping sys_admin disables container root from doing a lot of things
# that could be bad like re-mounting lxc fstab entries rw for example,
# but also disables some useful things like being able to nfs mount, and
# things that are already namespaced with ns_capable() kernel checks, like
# hostname(1).
# lxc.cap.drop = sys_admin
# lxc.cap.drop = net_raw  # breaks dhcp/ping
# lxc.cap.drop = setgid   # breaks login (initgroups/setgroups)
# lxc.cap.drop = dac_read_search  # breaks login (pam unix_chkpwd)
# lxc.cap.drop = setuid   # breaks sshd,nfs statd
# lxc.cap.drop = audit_control# breaks sshd (set_loginuid failed)
# lxc.cap.drop = audit_write
#
lxc.cap.drop = mac_admin mac_override setfcap setpcap
lxc.cap.drop = sys_module sys_nice sys_pacct
lxc.cap.drop = sys_rawio sys_time
lxc.cap.drop = sys_resource
# Networking
lxc.network.name = eth0
lxc.network.mtu = 1500
lxc.network.hwaddr = fe:9c:0f:5c:e3:ed
# Control Group devices: all denied except those whitelisted
lxc.cgroup.devices.deny = a
lxc.cgroup.devices.allow = c 1:3 rwm# /dev/null
lxc.cgroup.devices.allow = c 1:5 rwm# /dev/zero
lxc.cgroup.devices.allow = c 1:7 rwm# /dev/full
lxc.cgroup.devices.allow = c 5:0 rwm# /dev/tty
lxc.cgroup.devices.allow = c 1:8 rwm# /dev/random
lxc.cgroup.devices.allow = c 1:9 rwm# /dev/urandom
lxc.cgroup.devices.allow = c 136:* rwm# /dev/tty[1-4] ptys and lxc console
lxc.cgroup.devices.allow = c 5:2 rwm# /dev/ptmx pty master



BTW copying from the container to other hosts works fine.


tamas

--
Get 100% visibility into Java/.NET code with AppDynamics Lite!
It's a free troubleshooting tool designed for production.
Get down to code-level detail for bottlenecks, with 2% overhead. 
Download for free and get started troubleshooting in minutes. 
http://pubads.g.doubleclick.net/gampad/clk?id=48897031iu=/4140/ostg.clktrk
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


Re: [Lxc-users] copy from OEL template does not work

2013-08-15 Thread Tamas Papp
On 08/15/2013 08:31 PM, Dwight Engen wrote:
 It looks like you called your container VM, not container. What

Yes, sorry, mixed that.
In fact, it's name is jcc-vmc01 :)

 does lxc-ls show? Are you sure the host has network connectivity with
 the container? (ie. are you resolving to the container? Can you ping
 it?) If you think its ssh protocol/authentication related you might try
 to just ssh in with -vv to see what is going on.

Otherwise the container works fine. I can ssh to and from there, I can copy 
files if I'm on the host.
But for example this doesn't work:

host:~$ ssh jcc-vmc01 cat a.txt

 rsyncd is not run in the Oracle container by default, so unless you
 have enabled it I wouldn't expect it to work :)

I mean rsync over ssh.

tamas

--
Get 100% visibility into Java/.NET code with AppDynamics Lite!
It's a free troubleshooting tool designed for production.
Get down to code-level detail for bottlenecks, with 2% overhead. 
Download for free and get started troubleshooting in minutes. 
http://pubads.g.doubleclick.net/gampad/clk?id=48897031iu=/4140/ostg.clktrk
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


Re: [Lxc-users] Running the latest LXC version

2013-08-07 Thread Tamas Papp
On 08/08/2013 12:39 AM, Kevin LaTona wrote:

 I am still getting up to speed with Ubuntu and I went looking to see how I 
 could install the latest version of LXC on Ubuntu 12.04 and can't find 
 anything that shows how to do this.

 Is anyone aware of any documentation that shows how one can install this.

 As well as how to uninstall bleeding edge LXC versions on Ubuntu in case 
 something goes sideways?


There is a ppa available for daily builds.

tamas

--
Get 100% visibility into Java/.NET code with AppDynamics Lite!
It's a free troubleshooting tool designed for production.
Get down to code-level detail for bottlenecks, with 2% overhead. 
Download for free and get started troubleshooting in minutes. 
http://pubads.g.doubleclick.net/gampad/clk?id=48897031iu=/4140/ostg.clktrk
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


Re: [Lxc-users] lxc-ls --fancy is lying

2013-08-04 Thread Tamas Papp
On 08/02/2013 11:51 PM, Serge Hallyn wrote:
 Quoting Tamas Papp (tom...@martos.bme.hu):
 hi All,

 I've seen a couple of times in the past like this:

 # lxc-ls --fancy --stopped --fancy-format name,state
 NAME STATE
 
 finance  STOPPED
 hammer   STOPPED
 ijc-cipool   STOPPED
 jay  STOPPED
 marvin4jsci  STOPPED
 marvinci STOPPED
 svntest  STOPPED


 In fact VMs are running fine, but I updated lxc (from daily ppa) this 
 morning.

 Is this some kind of bug? Do others meet this issue?
 I don't get this, using the daily ppa on precise.  It only shows

I figured out, it was something else.
I use /var/lib/lxc as a symlink for /tank/lxc. I started containers and later I 
set lxcpath for 
/data/lxc and I got this error.

connect(4, {sa_family=AF_FILE, path=@/tank/lxc/finance/command}, 110) = -1 
ECONNREFUSED 
(Connection refused)
close(4)= 0
exit_group(0)


Sorry for the noise.
Cheers,
tamas

--
Get your SQL database under version control now!
Version control is standard for application code, but databases havent 
caught up. So what steps can you take to put your SQL databases under 
version control? Why should you start doing it? Read more to find out.
http://pubads.g.doubleclick.net/gampad/clk?id=49501711iu=/4140/ostg.clktrk
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


[Lxc-users] lxc-ls --fancy is lying

2013-07-31 Thread Tamas Papp
hi All,

I've seen a couple of times in the past like this:

# lxc-ls --fancy --stopped --fancy-format name,state
NAME STATE

finance  STOPPED
hammer   STOPPED
ijc-cipool   STOPPED
jay  STOPPED
marvin4jsci  STOPPED
marvinci STOPPED
svntest  STOPPED


In fact VMs are running fine, but I updated lxc (from daily ppa) this morning.

Is this some kind of bug? Do others meet this issue?


10x
tamas

--
Get your SQL database under version control now!
Version control is standard for application code, but databases havent 
caught up. So what steps can you take to put your SQL databases under 
version control? Why should you start doing it? Read more to find out.
http://pubads.g.doubleclick.net/gampad/clk?id=49501711iu=/4140/ostg.clktrk
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


Re: [Lxc-users] lxc-ls --fancy is lying

2013-07-31 Thread Tamas Papp
On 07/31/2013 07:37 PM, Jay Taylor wrote:
 Out of curiosity, did you see it in the past before you you updated from the 
 PPA today?

No, I didn't.

tamas

--
Get your SQL database under version control now!
Version control is standard for application code, but databases havent 
caught up. So what steps can you take to put your SQL databases under 
version control? Why should you start doing it? Read more to find out.
http://pubads.g.doubleclick.net/gampad/clk?id=49501711iu=/4140/ostg.clktrk
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


Re: [Lxc-users] lxc-ls --fancy is lying

2013-07-31 Thread Tamas Papp
On 07/31/2013 09:44 PM, zoolook wrote:
 On Wed, Jul 31, 2013 at 3:47 PM, Tamas Papp tom...@martos.bme.hu wrote:
 On 07/31/2013 07:37 PM, Jay Taylor wrote:
 Out of curiosity, did you see it in the past before you you updated from 
 the PPA today?
 No, I didn't.

 I did but a simple reboot fixed it.


Ohh, I'm afraid, I misunderstood the question.

Yes, I did as well, a couple of time.
As for that a couple of time I experienced really stopped guests after package 
update.

tamas

--
Get your SQL database under version control now!
Version control is standard for application code, but databases havent 
caught up. So what steps can you take to put your SQL databases under 
version control? Why should you start doing it? Read more to find out.
http://pubads.g.doubleclick.net/gampad/clk?id=49501711iu=/4140/ostg.clktrk
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


Re: [Lxc-users] clones of clones are failing to start

2013-07-17 Thread Tamas Papp
On 07/17/2013 10:01 PM, Jay Taylor wrote:
 Hi,

 I'm not sure what I am doing wrong here.

 This is a EC2 VM with /var/lib/lxc linking to a mounted BTRFS volume.

 OS: Ubuntu 12.04 LTS
 LXC Version: 0.9.0
 FS: BTRFS

 The current situation is that I have a base container, base, which starts 
 fine.  This has then 
 been cloned (with snapshot) to another container, e.g. test.  test is 
 also able to start fine. 
  Then if I clone (again with snapshot) test to test_1, and it won't start.

 Here is the output:
 $ sudo lxc-start -n test_1
 lxc-start: unknown capability mac_test_1
 lxc-start: failed to drop capabilities
 lxc-start: failed to setup the container
 lxc-start: invalid sequence number 1. expected 2
 lxc-start: failed to spawn 'test_1'

 I not yet sure why this is happening.  Do you know what might be causing this 
 or how I might best 
 go about resolving it?


How does your config file looks?

tamas

--
See everything from the browser to the database with AppDynamics
Get end-to-end visibility with application monitoring from AppDynamics
Isolate bottlenecks and diagnose root cause in seconds.
Start your free trial of AppDynamics Pro today!
http://pubads.g.doubleclick.net/gampad/clk?id=48808831iu=/4140/ostg.clktrk
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


Re: [Lxc-users] clones of clones are failing to start

2013-07-17 Thread Tamas Papp
On 07/17/2013 10:14 PM, Jay Taylor wrote:
 lxc.cap.drop = mac_test_1

Remove this line.

tamas

--
See everything from the browser to the database with AppDynamics
Get end-to-end visibility with application monitoring from AppDynamics
Isolate bottlenecks and diagnose root cause in seconds.
Start your free trial of AppDynamics Pro today!
http://pubads.g.doubleclick.net/gampad/clk?id=48808831iu=/4140/ostg.clktrk
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


Re: [Lxc-users] Getting IP address of running container

2013-07-11 Thread Tamas Papp
On 07/11/2013 04:45 PM, Robin Monjo wrote:
 Hello,

 I need to know the IP address of a running container in order to add a port 
 forwarding rule with iptables.  My containers are build using the default 
 ubuntu template and use dhcp to obtain an IP.

 I'm able to access the ip by reading the /var/lib/misc/dnsmasq.leases file. 
 However I'm not sure this is reliable.

 What do you think ? Any better way to do it ?


What version of LXC do you use?
In 0.9 it works from API, at least 'lxc-ls --fancy' prints the guest IP.

tamas

--
See everything from the browser to the database with AppDynamics
Get end-to-end visibility with application monitoring from AppDynamics
Isolate bottlenecks and diagnose root cause in seconds.
Start your free trial of AppDynamics Pro today!
http://pubads.g.doubleclick.net/gampad/clk?id=48808831iu=/4140/ostg.clktrk
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


Re: [Lxc-users] lxc-create -B zfs

2013-06-17 Thread Tamas Papp
On 06/10/2013 03:41 PM, Serge Hallyn wrote:
 Quoting Tamas Papp (tom...@martos.bme.hu):
 hi,

 # lxc-create -n pony -t ubuntu -B zfs --zfsroot=tank/lxc
 Hm.  Mine is simply called 'lxc', and that works.  So it sounds like I'm
 doing something wrong in parsing the zfsroot, but I can't offhand see
 in the code where.

 Could you run this through 'strace -f -odebutfile' and look in debugfile
 for the exec of 'zfs create'?

hi,

Sorry, I could get back to this just now:

log.103022:execve(/sbin/zfs, [zfs, create, 
-omountpoint=/var/lib/lxc/test123/rootfs, 
tank/lxc/test123], [/* 21 vars */]) = 0

 From cli it works fine.

I can send the whole log file, if you want.

Thanks,
tamas

ps.: Can we make at least configurable the mountpoint, so it can be set to the 
root of the container?

--
This SF.net email is sponsored by Windows:

Build for Windows Store.

http://p.sf.net/sfu/windows-dev2dev
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


[Lxc-users] lxc-create -B zfs

2013-06-10 Thread Tamas Papp
hi,

# lxc-create -n pony -t ubuntu -B zfs --zfsroot=tank/lxc
getopt: unrecognized option '--rootfs=/usr/lib/x86_64-linux-gnu/lxc'
lxc-create: container creation template for pony failed

lxc-create: Error creating container pony


# lxc-create -n pony -t ubuntu -B zfs
cannot create 'lxc/pony': no such pool 'lxc'
lxc-create: Error creating backing store type zfs for pony
lxc-create: Error creating container pony

Pool name is 'tank' and containers are like /tank/lxc/CONTAINER.

# lsb_release -a
No LSB modules are available.
Distributor ID:Ubuntu
Description:Ubuntu 12.04.2 LTS
Release:12.04
Codename:precise
root@virt102:~/bin#


Linux virt102 3.2.0-45-generic #70-Ubuntu SMP Wed May 29 20:12:06 UTC 2013 
x86_64 x86_64 x86_64 
GNU/Linux

ii lxc 0.9.0.0~staging~20130605-1508-0ubuntu1~ppa1~precise1 Linux Containers 
userspace tools


If I see correctly, lxc-create is already a binary file and probably compiled 
from C source.
It's way more then I can help:)

Thanks,
tamas

--
How ServiceNow helps IT people transform IT departments:
1. A cloud service to automate IT design, transition and operations
2. Dashboards that offer high-level views of enterprise services
3. A single system of record for all IT processes
http://p.sf.net/sfu/servicenow-d2d-j
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


Re: [Lxc-users] list admin

2013-05-24 Thread Tamas Papp
On 05/24/2013 02:06 AM, Daniel Lezcano wrote:
 Yes, sure.

 Sorry, I have been more and more busy with other stuff and flooded by
 emails, so I did not followed the discussion closely.

 Can you explain in a few words what do you need ?


I'd like to be sure, there is no SPOF in the listadmin position:)

Personally I want to kick off the invalid email address, like Mike said.
Also I think it would be a good idea to change the Reply-To: header to the list 
address.

Cheers,
tamas

--
Try New Relic Now  We'll Send You this Cool Shirt
New Relic is the only SaaS-based application performance monitoring service 
that delivers powerful full stack analytics. Optimize and monitor your
browser, app,  servers with just a few lines of code. Try New Relic
and get this awesome Nerd Life shirt! http://p.sf.net/sfu/newrelic_d2d_may
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


Re: [Lxc-users] Skype in a container

2013-05-24 Thread Tamas Papp
On 05/24/2013 11:11 AM, Fajar A. Nugraha wrote:
 On Sun, May 19, 2013 at 4:03 AM, Tamas Papp tom...@martos.bme.hu wrote:
 On 05/18/2013 10:39 PM, Elie Deloumeau wrote:
 Hi, you need a xserver in your container.

 Create a container, install gnome or whatever and install Skype for Linux ;)
 It's a bit more complicated, as there are some requirements.

 How should I run the container/application? How can I use it?

 How would it appear on my systray or whatever it is called in Unity?

 Yeah, it's pretty much a hassle. Not to mention you also have to allow
 access to various devices needed by skype.

 What version are you using? I'm using skype
 4.1.0.20.0-0ubuntu0.13.04.2 from ubuntu partner repository on raring,
 and it seems to work so far. Perhaps you can try that.

It was a glib2 error and now it works again, so I leave it as it is now.
It's 4.2.0.11-1 from the official download site.

Though, I'm still interested in running GUI application inside a container.

Thanks,
tamas

--
Try New Relic Now  We'll Send You this Cool Shirt
New Relic is the only SaaS-based application performance monitoring service 
that delivers powerful full stack analytics. Optimize and monitor your
browser, app,  servers with just a few lines of code. Try New Relic
and get this awesome Nerd Life shirt! http://p.sf.net/sfu/newrelic_d2d_may
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


Re: [Lxc-users] errors

2013-05-23 Thread Tamas Papp
On 05/23/2013 03:35 PM, Stéphane Graber wrote:
 That looks like broken locking, though Serge would know for sure.
 You may want to try clearing /dev/shm/*lxc* and see if that fixes the
 problem (not usually recommended as those locks are there for a reason).

OK.

At this moment I'm trying to reproduce the problem on a test machine, but still 
no luck.

I'll let you know, as soon as I have something.


Thanks,
tamas

--
Try New Relic Now  We'll Send You this Cool Shirt
New Relic is the only SaaS-based application performance monitoring service 
that delivers powerful full stack analytics. Optimize and monitor your
browser, app,  servers with just a few lines of code. Try New Relic
and get this awesome Nerd Life shirt! http://p.sf.net/sfu/newrelic_d2d_may
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


Re: [Lxc-users] errors

2013-05-23 Thread Tamas Papp
On 05/23/2013 03:39 PM, Tamas Papp wrote:
 On 05/23/2013 03:35 PM, Stéphane Graber wrote:
 That looks like broken locking, though Serge would know for sure.
 You may want to try clearing /dev/shm/*lxc* and see if that fixes the
 problem (not usually recommended as those locks are there for a reason).
 OK.

 At this moment I'm trying to reproduce the problem on a test machine, but 
 still no luck.

 I'll let you know, as soon as I have something.

Well, I still was success in this.

No I have 3 other system with the symptoms (FUTEX_WAIT, segfaults).

Regerding to lock file, I renamed /dev/shm/sem.lxcapi.jcb-vmc02 and it's 
recreated automatically. It 
is still there, no changes.


tamas

--
Try New Relic Now  We'll Send You this Cool Shirt
New Relic is the only SaaS-based application performance monitoring service 
that delivers powerful full stack analytics. Optimize and monitor your
browser, app,  servers with just a few lines of code. Try New Relic
and get this awesome Nerd Life shirt! http://p.sf.net/sfu/newrelic_d2d_may
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


Re: [Lxc-users] errors

2013-05-23 Thread Tamas Papp
On 05/23/2013 07:34 PM, Serge Hallyn wrote:
 Quoting Tamas Papp (tom...@martos.bme.hu):
 On 05/23/2013 03:39 PM, Tamas Papp wrote:
 On 05/23/2013 03:35 PM, Stéphane Graber wrote:
 That looks like broken locking, though Serge would know for sure.
 You may want to try clearing /dev/shm/*lxc* and see if that fixes the
 problem (not usually recommended as those locks are there for a reason).
 OK.

 At this moment I'm trying to reproduce the problem on a test machine, but 
 still no luck.

 I'll let you know, as soon as I have something.
 Well, I still was success in this.

 No I have 3 other system with the symptoms (FUTEX_WAIT, segfaults).

 Regerding to lock file, I renamed /dev/shm/sem.lxcapi.jcb-vmc02 and it's 
 recreated automatically. It
 is still there, no changes.
 I'm in the process of replacing those locks.  In the meantime, the
 /dev/shm/sem.* files are removed when things exit normally, but
 if you kill a lxc-* command while it is holding the lock, you
 may have to remove it manually.  If the commands are still running,
 then of course they should still be there, as the intent is to keep
 two programs which are both doing c-set_config_item(lxc.rootfs, x)
 from overwiting each other.

 I'll try to get the replacement for that ready for staging by
 tomorrow night.

FYI, now it works fine now with 
0.9.0.0~staging~20130523-0240-0ubuntu1~ppa1~precise1 .
For this I had to stop all containers then start them again.

Thanks for you help guys,
tamas

ps.: Can I expect similar bugs from these changes, like this was?

--
Try New Relic Now  We'll Send You this Cool Shirt
New Relic is the only SaaS-based application performance monitoring service 
that delivers powerful full stack analytics. Optimize and monitor your
browser, app,  servers with just a few lines of code. Try New Relic
and get this awesome Nerd Life shirt! http://p.sf.net/sfu/newrelic_d2d_may
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


Re: [Lxc-users] errors

2013-05-23 Thread Tamas Papp
On 05/23/2013 07:55 PM, Serge Hallyn wrote:
 FYI, now it works fine now with 
 0.9.0.0~staging~20130523-0240-0ubuntu1~ppa1~precise1 .
 For this I had to stop all containers then start them again.
 Ok - I suspect what was happening was that every lxc-ls was
 segfaulting while holding the semaphore, then the next lxc-*
 action using the api would hang.

 Thanks for you help guys,
 tamas

 ps.: Can I expect similar bugs from these changes, like this was?
 Not sure what you mean.

Are the planned (lock file) changes going to be risky, so it may happen, 
that, say, it starts to 
segfaulting again?

I'm just interested, wheter it's safe to upgrade to the latest version in the 
next few days. 
Unfortunately there is only daily ppa for 0.9 tree.


Thanks,
tamas

--
Try New Relic Now  We'll Send You this Cool Shirt
New Relic is the only SaaS-based application performance monitoring service 
that delivers powerful full stack analytics. Optimize and monitor your
browser, app,  servers with just a few lines of code. Try New Relic
and get this awesome Nerd Life shirt! http://p.sf.net/sfu/newrelic_d2d_may
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


Re: [Lxc-users] Use host syslog socket in container

2013-05-23 Thread Tamas Papp
On 05/23/2013 09:42 PM, Vallevand, Mark K wrote:
 Will that work for a single file?  I thought it was for directories.



It works for files, but I would use parent directories for the syslog sockets, 
since sockets are 
changing eg. by restarting the syslog server.

tamas

--
Try New Relic Now  We'll Send You this Cool Shirt
New Relic is the only SaaS-based application performance monitoring service 
that delivers powerful full stack analytics. Optimize and monitor your
browser, app,  servers with just a few lines of code. Try New Relic
and get this awesome Nerd Life shirt! http://p.sf.net/sfu/newrelic_d2d_may
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


Re: [Lxc-users] errors

2013-05-23 Thread Tamas Papp
On 05/23/2013 09:47 PM, Serge Hallyn wrote:
 The lxc lock had nothing to do with the segfaulting - and no, the new
 hanges will simply swap out use of named semaphore for a flock on an
 open fd (so that they get auto-cleaned if process is killed).  Any
 potential for segvs *should* be found while I test.

OK

 I'm just interested, wheter it's safe to upgrade to the latest
 version in the next few days. Unfortunately there is only daily ppa
 for 0.9 tree.
 raring and saucy are based on 0.9.

 For the most part the daily ppa is actually very stable.  It goes
 through quite a bit of automated testing before it gets published.
 It's what I use on my main dev box, though when Im working on something
 that takes a few days, I sometimes end up a few days behind while I
 test my feature.

Yes, I know and I use it in production on a couple of servers.


Thanks to you!

 I think this is the second time a bug has been exposed mainly through
 lxc-list (because it uses quite a bit of the api), so lxc-list should
 be added explicitly to the testsuite.

You mean lxc-ls?

BTW, lxc-list:

# lxc-list
WARNING: lxc-list is deprecated, please use lxc-ls --fancy.
  This symlink will be dropped in LXC 1.0.

NAME STATEIPV4IPV6  AUTOSTART
-


I use this alias as  an lxc-ls --fancy:

alias lxc-list='lxc-ls --fancy --fancy-format name,state,ipv4,autostart'


Whould it not be better if lxc-list would be left as it is now, or even it's 
behaviour would be 
defined in /etc/lxc or /etc/default/lxc.

Something like:

LXC_LIST_SWITCHES=--fancy --fancy-format name,state,ipv4,autostart

Just a stupid idea.


tamas

--
Try New Relic Now  We'll Send You this Cool Shirt
New Relic is the only SaaS-based application performance monitoring service 
that delivers powerful full stack analytics. Optimize and monitor your
browser, app,  servers with just a few lines of code. Try New Relic
and get this awesome Nerd Life shirt! http://p.sf.net/sfu/newrelic_d2d_may
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


[Lxc-users] case sensitivity

2013-05-23 Thread Tamas Papp
hi,

lxc-ls --fancy-format is case sensitivie:

$ lxc-ls --fancy --fancy-format name,state,ipv4,autostart
NAME  STATEIPV4AUTOSTART



According to the above headers the suspected format is uppercase (I thin).



lxc-info --state-is is also case sensitive for lowercase chars.

$ lxc-info -n tc -t RUNNING



I suggest using the same behaviour, or the best would be case insensitivity. Is 
it possible?


Thanks,
tamas

ps.: BTW, lxc-info(1) doesn't contain the long switches:

OPTIONS
-n name
   The container name.

[-s]   Just print the container's state.

[-p]   Just print the container's pid.

[-t state]
   Check whether the container is in the provided state.




--
Try New Relic Now  We'll Send You this Cool Shirt
New Relic is the only SaaS-based application performance monitoring service 
that delivers powerful full stack analytics. Optimize and monitor your
browser, app,  servers with just a few lines of code. Try New Relic
and get this awesome Nerd Life shirt! http://p.sf.net/sfu/newrelic_d2d_may
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


[Lxc-users] list admin

2013-05-23 Thread Tamas Papp
hi Guys,


Please, someone!
Who is the owner/admin of this list?

Thanks,
tamas

--
Try New Relic Now  We'll Send You this Cool Shirt
New Relic is the only SaaS-based application performance monitoring service 
that delivers powerful full stack analytics. Optimize and monitor your
browser, app,  servers with just a few lines of code. Try New Relic
and get this awesome Nerd Life shirt! http://p.sf.net/sfu/newrelic_d2d_may
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


Re: [Lxc-users] list admin

2013-05-23 Thread Tamas Papp
On 05/23/2013 11:13 PM, Michael H. Warfield wrote:
 Last I knew, it was Daniel who created the list and most likely owns
 it.  It was created at my suggestion to move user questions off the
 devel list ages and ages ago.  Lately he's typically been buried over
 his head busy that he doesn't show up much even in the -devel list
 lately other than to cut a release, must less this list.  You're
 probably complaining about that bad E-Mail address that's been on the
 list for like forever.  It's been mentioned before.  It's a mailman list
 so we just need someone with owner privs and the password.

I already offered my service on the list a couple of months ago, but no answer 
was received:(
I would be glad to kick off that address:)

Also I think replies should be addressed to the list, though whose decision it 
is.

Daniel, can you help in this?

10x
tamas

--
Try New Relic Now  We'll Send You this Cool Shirt
New Relic is the only SaaS-based application performance monitoring service 
that delivers powerful full stack analytics. Optimize and monitor your
browser, app,  servers with just a few lines of code. Try New Relic
and get this awesome Nerd Life shirt! http://p.sf.net/sfu/newrelic_d2d_may
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


[Lxc-users] errors

2013-05-22 Thread Tamas Papp
hi All,

# lxc-ls --fancy
Traceback (most recent call last):
   File /usr/bin/lxc-ls, line 221, in module
 ips = container.get_ips(protocol=protocol, timeout=1)
TypeError: 'protocol' is an invalid keyword argument for this function


# lxc-info -n sc --state-is=running
# echo $?
1

The container is running.

ii  lxc 0.9.0.0~staging~20130521-1727-0ubuntu1~ppa1~pre Linux Containers 
userspace tools

# lsb_release -a
No LSB modules are available.
Distributor ID:Ubuntu
Description:Ubuntu 12.04.2 LTS
Release:12.04
Codename:precise

Linux virt102 3.2.0-43-generic #68-Ubuntu SMP Wed May 15 03:33:33 UTC 2013 
x86_64 x86_64 x86_64 
GNU/Linux



I'm not sure, it's related, but the server is after a restart, because lxc-* 
commands were segfaulting.

Do you have an idea?

Thanks,
tamas

--
Try New Relic Now  We'll Send You this Cool Shirt
New Relic is the only SaaS-based application performance monitoring service 
that delivers powerful full stack analytics. Optimize and monitor your
browser, app,  servers with just a few lines of code. Try New Relic
and get this awesome Nerd Life shirt! http://p.sf.net/sfu/newrelic_d2d_may
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


Re: [Lxc-users] errors

2013-05-22 Thread Tamas Papp
On 05/23/2013 01:02 AM, Tamas Papp wrote:
 hi All,

 # lxc-ls --fancy
 Traceback (most recent call last):
 File /usr/bin/lxc-ls, line 221, in module
   ips = container.get_ips(protocol=protocol, timeout=1)
 TypeError: 'protocol' is an invalid keyword argument for this function


 # lxc-info -n sc --state-is=running
 # echo $?
 1

 The container is running.

 ii  lxc 0.9.0.0~staging~20130521-1727-0ubuntu1~ppa1~pre Linux Containers 
 userspace tools

 # lsb_release -a
 No LSB modules are available.
 Distributor ID:Ubuntu
 Description:Ubuntu 12.04.2 LTS
 Release:12.04
 Codename:precise

 Linux virt102 3.2.0-43-generic #68-Ubuntu SMP Wed May 15 03:33:33 UTC 2013 
 x86_64 x86_64 x86_64
 GNU/Linux



 I'm not sure, it's related, but the server is after a restart, because lxc-* 
 commands were segfaulting.

 Do you have an idea?

I downgraded to 0.9.0.0~staging~20130516-1655-0ubuntu1~ppa1~precise1, segfault.
Then reboot and now it's stuck at this stage:

Process 77488 detached
... wait4 resumed [{WIFEXITED(s)  WEXITSTATUS(s) == 0}], 0, NULL) = 77488
--- SIGCHLD (Child exited) @ 0 (0) ---
fstat(3, {st_mode=S_IFIFO|0600, st_size=0, ...}) = 0
lseek(3, 0, SEEK_CUR)   = -1 ESPIPE (Illegal seek)
read(3, , 6)  = 0
close(3)= 0
geteuid()   = 0
open(/dev/shm/sem.lxcapi.bioreg-vmc01, O_RDWR|O_NOFOLLOW) = 3
fstat(3, {st_mode=S_IFREG|0640, st_size=32, ...}) = 0
mmap(NULL, 32, PROT_READ|PROT_WRITE, MAP_SHARED, 3, 0) = 0x7fe5c5fce000
close(3)= 0
stat(/var/lib/lxc/bioreg-vmc01/config, {st_mode=S_IFREG|0644, st_size=1552, 
...}) = 0
futex(0x7fe5c5fce000, FUTEX_WAIT, 0, NULL


This is the first container on the list.

Any idea?

Thanks,
tamas

--
Try New Relic Now  We'll Send You this Cool Shirt
New Relic is the only SaaS-based application performance monitoring service 
that delivers powerful full stack analytics. Optimize and monitor your
browser, app,  servers with just a few lines of code. Try New Relic
and get this awesome Nerd Life shirt! http://p.sf.net/sfu/newrelic_d2d_may
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


Re: [Lxc-users] errors

2013-05-22 Thread Tamas Papp
On 05/23/2013 04:27 AM, Stéphane Graber wrote:
 Oops, looks like I broke lxc-ls --fancy with my recent get_ips() API
 change. I'll fix it directly to staging (trivial fix) and trigger a new
 daily build, you should be able to update to a fixed package in the next
 couple of hours.


hi,

Although the the package is not here, I downloaded the raw file from github, 
and the function is 
indeed fixed.

Though still there is the FUTEX_WAIT error
strace -ff lxc-ls --fancy:


[...]
geteuid()   = 0
statfs(/dev/shm, {f_type=0x1021994, f_bsize=4096, f_blocks=16498192, 
f_bfree=16498156, 
f_bavail=16498156, f_files=16498192, f_ffree=16498155, f_fsid={0, 0}, 
f_namelen=255, f_frsize=4096}) = 0
futex(0x7ff06b4cc31c, FUTEX_WAKE_PRIVATE, 2147483647) = 0
open(/dev/shm/sem.lxcapi.jcb-vmc02, O_RDWR|O_NOFOLLOW) = 3
fstat(3, {st_mode=S_IFREG|0640, st_size=32, ...}) = 0
mmap(NULL, 32, PROT_READ|PROT_WRITE, MAP_SHARED, 3, 0) = 0x7ff06b65d000
close(3)= 0
stat(/var/lib/lxc/jcb-vmc02/config, {st_mode=S_IFREG|0644, st_size=1293, 
...}) = 0
futex(0x7ff06b65d000, FUTEX_WAIT, 0, NULL


And it's waiting here...

What is it waiting for?
I quite lost now..

Thanks,
tamas

--
Try New Relic Now  We'll Send You this Cool Shirt
New Relic is the only SaaS-based application performance monitoring service 
that delivers powerful full stack analytics. Optimize and monitor your
browser, app,  servers with just a few lines of code. Try New Relic
and get this awesome Nerd Life shirt! http://p.sf.net/sfu/newrelic_d2d_may
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


[Lxc-users] Skype in a container

2013-05-18 Thread Tamas Papp
hi All,

Is there a cookbook to run Skype in a container?

I upgraded my laptop to Saucy and Skype seems to crash continuously.
So I think it would be a good idea to run a Precise container with Skype.


10x
tamas

--
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
http://p.sf.net/sfu/alienvault_d2d
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users


Re: [Lxc-users] Restarting LXC containers after power failure

2013-05-06 Thread Tamas Papp
On 05/06/2013 02:58 PM, David Parks wrote:
 We just had a datacenter power failure, upon restart of course our LXC 
 containers were stopped. It
 would be just dandy if there were an LXC option to restart the containers 
 that were already running
 before the sudden failure.

 Is there any such capability?

There is no such option.
You can enable containers to start automatically at boot time, see 
/etc/lxc/auto/ .

Cheers,
tamas


--
Introducing AppDynamics Lite, a free troubleshooting tool for Java/.NET
Get 100% visibility into your production application - at no cost.
Code-level diagnostics for performance bottlenecks with 2% overhead
Download for free and get started troubleshooting in minutes.
http://p.sf.net/sfu/appdyn_d2d_ap1
___
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users