Hi,

Ok you are using below as config

lxc.mount.auto  = proc:rw sys:ro
lxc.mount.entry = tmpfs                tmp                tmpfs
size=8192k,mode=1777   0 0

The following capabilities are configured to be dropped
## Capabilities
lxc.cap.drop = sys_module
#lxc.cap.drop = sys_boot
lxc.cap.drop = sys_admin
lxc.cap.drop = sys_nice
lxc.cap.drop = audit_con  $? = 0
lxc.cap.drop = audit_write
lxc.cap.drop = sys_rawio
lxc.cap.drop = mac_admin
lxc.cap.drop = mac_override
lxc.cap.drop = mknod
# this allow OpenWRT/netifd to configure the network setings inside the
# conatiner
#lxc.cap.drop = net_admin
#lxc.cap.drop = net_raw

# to run and shutdown procd
lxc.haltsignal = SIGUSR1
lxc.stopsignal = SIGINT
lxc.kmsg = 1


I am not getting where you are giving the container rootfs information in
config file.

I am using the below container config information but getting error

lxc.rootfs = /home/root/rootfs

lxc.devttydir = lxc
lxc.tty = 4
lxc.pts = 1024

lxc.mount.auto  = proc:rw sys:ro
lxc.mount.entry = tmpfs tmp tmpfs size=8192k,mode=1777   0 0

The following capabilities are configured to be dropped
## Capabilities
lxc.cap.drop = sys_module
#lxc.cap.drop = sys_boot
lxc.cap.drop = sys_admin
lxc.cap.drop = sys_nice
lxc.cap.drop = audit_con  $? = 0
lxc.cap.drop = audit_write
lxc.cap.drop = sys_rawio
lxc.cap.drop = mac_admin
lxc.cap.drop = mac_override
lxc.cap.drop = mknod
# this allow OpenWRT/netifd to configure the network setings inside the
# conatiner
#lxc.cap.drop = net_admin
#lxc.cap.drop = net_raw

# to run and shutdown procd
lxc.haltsignal = SIGUSR1
lxc.stopsignal = SIGINT
lxc.kmsg = 1


lxc-create -n vm0 -f /home/root/open.conf -o log
lxc-create: lxc_create.c: main: 271 Error creating container vm0

I am not sure where I am going wrong.



On Wed, Nov 4, 2015 at 4:38 PM, Joerg Jungermann <[email protected]> wrote:

> Hi,
>
> I did not used lxc-create, lxc-clone, ...
> I created the container config manually.
> So I cannot provide you with such steps.
>
> Lets say the container resides in $DIR.
> $DIR/config is the container config
> $DIR/rootfs/ contains the extracted rootfs as explained beforte.
>
> The config snippets I use are in the last mail, hope it helps.
>
> Best regards
>  Joerg
> On 04.11.2015 05:43, Divya Vyas wrote:
> > Hi Joerg,
> >
> > Thanks for your reply.
> >
> > I understand that
> > host kernel needs only cgroup and namespace changes to run openwrt
> container( lxc-checkconfig should give all enabled).
> >
> > Which template and configuration file do you use to create openwrt
> container. Can you please give me the exact  lxc-* steps with needed files ?
> >
> > It will be really helpful for me
> >
> > Thanks,
> > Divya
> >
> > On Tue, Nov 3, 2015 at 3:06 PM, joerg jungermann <[email protected] <mailto:
> [email protected]>> wrote:
> >
> >     Hi,
> >
> >     I am runnning multiple OpenWRT LXC containers on x386_64(15.05),
> >     arm5(dockstar,15.05) and mipsel(Asus WL-500V1 with old 12.09).
> >
> >     Your host kernel needs of course to have CGroup and Namespace
> support.
> >     Openwrt runs very smoothly in the container. Droping SYS_ADMIN
> pervents the rootfs just extracted from the
> >     rootfs.tar to try overlaymounts.
> >
> >     The FS settings are
> >     lxc.mount.auto  = proc:rw sys:ro
> >     lxc.mount.entry = tmpfs                tmp                tmpfs
> size=8192k,mode=1777   0 0
> >
> >     The following capabilities are configured to be dropped
> >     ## Capabilities
> >     lxc.cap.drop = sys_module
> >     #lxc.cap.drop = sys_boot
> >     lxc.cap.drop = sys_admin
> >     lxc.cap.drop = sys_nice
> >     lxc.cap.drop = audit_con  $? = 0
> >     lxc.cap.drop = audit_write
> >     lxc.cap.drop = sys_rawio
> >     lxc.cap.drop = mac_admin
> >     lxc.cap.drop = mac_override
> >     lxc.cap.drop = mknod
> >     # this allow OpenWRT/netifd to configure the network setings inside
> the
> >     # conatiner
> >     #lxc.cap.drop = net_admin
> >     #lxc.cap.drop = net_raw
> >
> >     # to run and shutdown procd
> >     lxc.haltsignal = SIGUSR1
> >     lxc.stopsignal = SIGINT
> >     lxc.kmsg = 1
> >
> >     To get an working rootfs I use a tarred rootfs from
> donwloads.openwrt.org <http://donwloads.openwrt.org>
> >     for the needed architecture.
> >
> >     This is far from perfect but works for me, very well.
> >     Let me know if you find some caveeats.
> >
> >     Best regards
> >
> >     > Hi,
> >     >
> >     > I am trying to create a openWRT lxc container on a yocto based
> filesystem. Has
> >     > any one any idea about openwrt template to create the container.
> Is it need any
> >     > kernel changes on host?
> >     >
> >     > Thanks,
> >     > Divya
> >     >
> >
> >     > _______________________________________________
> >     > openwrt-users mailing list
> >     > [email protected] <mailto:
> [email protected]>
> >     > https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-users
> >
> >
> >     --
> >     Joerg Jungermann
> >     _______________________________________________
> >     openwrt-users mailing list
> >     [email protected] <mailto:
> [email protected]>
> >     https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-users
> >
> >
> >
> >
> > _______________________________________________
> > openwrt-users mailing list
> > [email protected]
> > https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-users
> >
> _______________________________________________
> openwrt-users mailing list
> [email protected]
> https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-users
>
_______________________________________________
openwrt-users mailing list
[email protected]
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-users

Reply via email to