Thank you serge!
Yes, I'm able to mknod the devices in the container and then it can use them.
Why they don't show up automatically like the others?
Giovanni
On 21/mag/2012, at 14:39, Serge Hallyn <serge.hal...@canonical.com> wrote:
> Just guessing, but
>
> 1. can you mknod the devices in the container? Can the container then
> use them?
>
> 2. which device are the containers on? I.e. what do pvscan, vgscan,
> and lvscan on the host show? Does the container actually have access
> to all the physical disks involved as well?
>
> -serge
>
> Quoting Giovanni Lovato (her...@aldu.net):
>> I'm using LXC on Ubuntu 12.04, and I have 4 LVM logical volumes:
>>
>> lxc-host$ ls -l /dev/dm-*
>> brw-rw---- 1 root disk 252, 0 May 19 11:47 /dev/dm-0
>> brw-rw---- 1 root disk 252, 1 May 19 11:47 /dev/dm-1
>> brw-rw---- 1 root disk 252, 2 May 19 11:47 /dev/dm-2
>> brw-rw---- 1 root disk 252, 3 May 19 11:47 /dev/dm-3
>> brw-rw---- 1 root disk 252, 4 May 19 11:47 /dev/dm-4
>>
>> I need dm-3 and dm-4 to be available on a guest, but I only see dm-0 and dm-4
>>
>> lxc-guest$ ls -l /dev/dm-*
>> brw-rw---- 1 root disk 252, 0 May 13 03:05 /dev/dm-0
>> brw-rw---- 1 root disk 252, 4 May 19 02:35 /dev/dm-4
>>
>> This is the guest configuration:
>> #### BEGIN ####
>> lxc.network.type = veth
>> lxc.network.flags = up
>> lxc.network.link = br2
>> lxc.network.name = eth0
>> lxc.network.ipv4 = 192.168.2.13/24
>>
>> lxc.utsname = lxc-guest
>>
>> lxc.devttydir = lxc
>> lxc.tty = 4
>> lxc.pts = 1024
>> lxc.rootfs = /var/lib/lxc/lxc-guest/rootfs
>> lxc.mount = /var/lib/lxc/lxc-guest/fstab
>> lxc.arch = i686
>> lxc.cap.drop = sys_module mac_admin
>> # uncomment the next line to run the container unconfined:
>> #lxc.aa_profile = unconfined
>>
>> lxc.cgroup.devices.deny = a
>> # Allow any mknod (but not using the node)
>> lxc.cgroup.devices.allow = c *:* m
>> lxc.cgroup.devices.allow = b *:* m
>> # /dev/null and zero
>> lxc.cgroup.devices.allow = c 1:3 rwm
>> lxc.cgroup.devices.allow = c 1:5 rwm
>> # consoles
>> lxc.cgroup.devices.allow = c 5:1 rwm
>> lxc.cgroup.devices.allow = c 5:0 rwm
>> #lxc.cgroup.devices.allow = c 4:0 rwm
>> #lxc.cgroup.devices.allow = c 4:1 rwm
>> # /dev/{,u}random
>> lxc.cgroup.devices.allow = c 1:9 rwm
>> lxc.cgroup.devices.allow = c 1:8 rwm
>> lxc.cgroup.devices.allow = c 136:* rwm
>> lxc.cgroup.devices.allow = c 5:2 rwm
>> # rtc
>> lxc.cgroup.devices.allow = c 254:0 rwm
>> # fuse
>> lxc.cgroup.devices.allow = c 10:229 rwm
>> # tun
>> lxc.cgroup.devices.allow = c 10:200 rwm
>> # full
>> lxc.cgroup.devices.allow = c 1:7 rwm
>> # hpet
>> lxc.cgroup.devices.allow = c 10:228 rwm
>> # kvm
>> lxc.cgroup.devices.allow = c 10:232 rwm
>> #### END ####
>>
>> I tried to add:
>>
>> lxc.cgroup.devices.allow = b 252:* rwm
>>
>> but nothing changed!
>>
>> I can't understand this behavior, I'm clearly missing something!
>>
>> Giovanni
>>
>>
>> ------------------------------------------------------------------------------
>> Live Security Virtual Conference
>> Exclusive live event will cover all the ways today's security and
>> threat landscape has changed and how IT managers can respond. Discussions
>> will include endpoint security, mobile security and the latest in malware
>> threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
>> _______________________________________________
>> Lxc-users mailing list
>> Lxc-users@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/lxc-users
------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and
threat landscape has changed and how IT managers can respond. Discussions
will include endpoint security, mobile security and the latest in malware
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users
