[config for network] VSERVER_ISOLATION_NET=yes really matters here --- https://www.pld-linux.org/docs/lxc?rev=1384814716 +++ https://www.pld-linux.org/docs/lxc @@ -49,9 +49,9 @@ | vserver test stop | lxc-stop -n test | ==== config for network ==== - static networking, set ''VSERVER=yes'' in guest ''/etc/sysconfig/system'' to disable all network configuration by guest. + static networking, set ''VSERVER=yes'' and ''VSERVER_ISOLATION_NET=yes'' in guest ''/etc/sysconfig/system'' to disable all network configuration by guest. - uses ''macvlan'' - that interface is NOT visible on host - you can't filter it from host's firewall
Diff URL: https://www.pld-linux.org/docs/lxc?do=diff&r1=1384814716&r2=1384814790 -- This mail was generated by DokuWiki at https://www.pld-linux.org/ _______________________________________________ pld-cvs-commit mailing list [email protected] http://lists.pld-linux.org/mailman/listinfo/pld-cvs-commit
