Re: [lxc-users] LXC unpreviliged problem with aufs mounted on nfs

2020-03-20 Thread hom...@163.com
Hi,All, BTW, my aufs version is aufs4. And it will fail to run: useradd newuser in the container's bash with nfs aufs mount. The result is : useradd: failure while writing changes to /etc/shadow Best Regards Michael Mao hom...@163.com From: hom...@163.com Date: 2020-03-21

[lxc-users] LXC unpreviliged problem with aufs mounted on nfs

2020-03-20 Thread hom...@163.com
Hi, All, I am working on my project that needs to use aufs as a backend for the LXC. If I set the local branch as the first rw branch for aufs, as: mount -t aufs -o br=/home/{lxcname}/data=rw:/home/base/rootfs=ro none /var/lib/lxc/containers/{lxcname}/rootfs the LXC works

Re: [lxc-users] Updating to LXC 3.2.1 fails

2020-03-20 Thread Saint Michael
I made lxc 3.2.1 it work, but networking ipvlan is not working at all. I found a solution that works as by miracle, to create the ipvlan interfaces first in the box, then to use type=phys in the container. But this means something is not right in version 3.2.1. I use Vmware ESXi, maybe that us an

Re: [lxc-users] Updating to LXC 3.2.1 fails

2020-03-20 Thread Andrey Repin
Greetings, Saint Michael! > I am using Ubuntu 18.04. In order to update to lxc 3.2.1 (since I need > ipvlan), I downloaded the tarball and compiled, installed, etc. How about not doing that? https://launchpad.net/~ubuntu-lxc/+archive/ubuntu/lxc-git-master?field.series_filter=bionic >

Re: [lxc-users] Quick Question

2020-03-20 Thread Saint Michael
Yes, that is correct. I installed LXC 3.2.1, and I am using now ipvlan, which allows the same MAC to be used in a container as in the host. But I cannot ping anything. Unless to use ipvlan I need to do something else. My kernel is 5.30 On Fri, Mar 20, 2020 at 8:17 AM Tomasz Chmielewski wrote:

Re: [lxc-users] Quick Question

2020-03-20 Thread Narcis Garcia
Different scenarios I know affect this your question: a) Container has public IP assigned b) Container has own LAN IP c) Container has no own NIC and IP (shares host one) d) ? In scenarios A and B the answer is no. In scenario B take care ports are forwarded through gw/wan router to that IP.

Re: [lxc-users] Quick Question

2020-03-20 Thread Ray Jender
No. I access the container using a subdomain (amsc1.mydomain.us). The host VPS is doing port forwarding of ports 80/443, forwarding to another container that is hosting HAproxy. HAproxy redirects to the container hosting the application based on the subdomain portion of the URL (amsc1). My app

[lxc-users] Quick Question

2020-03-20 Thread Ray Jender
So if I have an LXD container hosting an application that requires some specific ports be open, must those same ports be opened on the host OS? For example, I need udp ports 5000-65000 open in the container. Must I also open these ports on the host? Thanks, Ray

Re: [lxc-users] Quick Question

2020-03-20 Thread Tomasz Chmielewski
On 2020-03-20 21:07, Ray Jender wrote: So if I have an LXD container hosting an application that requires some specific ports be open, must those same ports be opened on the host OS? For example, I need udp ports 5000-65000 open in the container. Must I also open these ports on the host?

[lxc-users] Updating to LXC 3.2.1 fails

2020-03-20 Thread Saint Michael
> > I am using Ubuntu 18.04. In order to update to lxc 3.2.1 (since I need >> ipvlan), I downloaded the tarball and compiled, installed, etc. Previously >> I "apt remove --purge" every package with the word lcx in the name. > > But now lxc-ls shows nothing. what am I missing? what is the right way

Re: [lxc-users] Networking

2020-03-20 Thread Saint Michael
I use plain LXC, not LXD. is ipvlan supported? Also my containers have public IPs, same network as the host. This is why I cannot use NAT. On Fri, Mar 20, 2020 at 12:02 AM Fajar A. Nugraha wrote: > On Thu, Mar 19, 2020 at 12:02 AM Saint Michael wrote: > > > > The question is: how do we