Thank you for your answer, I really appreciate it.

I have a server currently running with ISPconfig 3, but I don't really like 
that system at all. 

It is over-complicating things. It works as a shared-host, but it is not an 
optimal solution. I would rather like to have a virtual-server farm or better 
said lxc container-farm, as soon as possible. ..

So I started a project, TURM - http://sourceforge.net/projects/turm/
.. and was working on it for a while. After reaching a basic level of 
functionality, I was auditing my code for security, and during the research I 
came across this post:
http://me.veekun.com/blog/2012/04/09/php-a-fractal-of-bad-design/
.. felt that something is not right with PHP, and this post nailed it to the 
point. I realized PHP is, .. how to say gently, not right for me .. ( + I use 
weird scripting techniques if the language allows)

Now I'm at the point where I plan to re-implement turm in Ruby. .. 

Anyone got any experience with Lexy? Seems to be a very similar project ...

http://jacoblewallen.wordpress.com/2011/05/16/lexy-a-web-ui-for-lxc/


Should LXC be used directly, or is there an API like libvirt necessery / handy 
in setting up networking for example? 


My desktop OS is Fedora 17 at the moment, and I'm happy with it. For some 
reason on my current desktop PC, Ubuntu didn't install. 

On my server I'm using Fedora at the moment - it is okay, but there been 
some crashes during the years, once or twice thru a software update, and 
hardware is failing from time to time too. 

Got also hacked once or twice (via PHP) and I really want a stable isolated 
environment, where users can use root-level ssh in their containers. ..

I don't really see a major difference between Ubuntu and Fedora, .. 
however if you say that Ubuntu is probably more stable or secure, I may switch 
to 
it. CentOs is stable, but as you say, ancient. :)  ..


I want to put together the right tool set, the right software environment now, 
so I can create a container farm, with two or more physical servers, and a nice 
GUI that I can present even for normal users.

Any advice appreciated, and considered. ..

Thank you.  


lak...@d250.hu
D250 Laboratories
www.D250.hu


----- Ursprüngliche Message -----
Von: Fajar A. Nugraha <l...@fajar.net>
An: István Király - LaKing <lak...@d250.hu>
CC: "lxc-users@lists.sourceforge.net" <lxc-users@lists.sourceforge.net>
Gesendet: 13:30 Freitag, 24.August 2012
Betreff: Re: [Lxc-users] LXC in production envivroment

On Fri, Aug 24, 2012 at 6:12 PM, István Király - LaKing <d...@yahoo.com> wrote:
> Hello users, and mainly developers, ..
>
> My question is, how reliable, how stable is LXC in a production environment?
>
> .. how far is LXC from being released as stabile 1.0?
>

As a user, I'd say lxc is usable for either:
- dev purposes
- production environment, where you control all the containers, and
using it for programs that works, and basically using lxc for resource
cap and network isolation purposes

Note that while most programs will work as-is on a container, some
might not work at all (e.g. those that loads and use their own custom
kernel module), while some needs special treatment (e.g. oracle db and
others that use large shared memory might need apparmor and friends
turned off, which results in the container being capable of doing
dangerous things to the host).

I would not use lxc for shared vps setup (like openvz) at this moment
due to some unsolved security issues.

> .. what OS is recommended for a stable environment with LXC?

I'd say latest Ubuntu stable. It works fine as-is, and uses apparmor
to workaround some lxc security issues.

> .. what kernel version is recommended?

Generally whatever version that comes with the distro that supports lxc.

Do NOT force yourself to use lxc with an "ancient" distro (e.g.
RHEL/centos6, or debian stable). Instead, if you have a program that
only works on those distros, use newer distro for the host, while
running the "stable" distro as guest container.

-- 
Fajar

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users

Reply via email to