Re: [lxc-users] Systemd inside lxc

2015-06-02 Thread Fajar A. Nugraha
. On Tue, Jun 2, 2015 at 3:40 PM, Fajar A. Nugraha l...@fajar.net wrote: On Wed, Jun 3, 2015 at 2:27 AM, SIVA SUBRAMANIAN.P psiv...@gmail.com wrote: lxc-attach works. But not able to find systemctl? which version of systemd did you use inside the container? did you ALSO have lxcfs on the host

Re: [lxc-users] Macvlan

2015-06-02 Thread Fajar A. Nugraha
On Mon, Jun 1, 2015 at 8:10 PM, Dave Smith dave.sm...@candata.com wrote: I never could fine anything on a bridgeless veth setup and I would be curious to read about this. If someone could point me to the link that would be great.

Re: [lxc-users] Creating a Linux container that is just a sandbox of my actual installation

2015-05-30 Thread Fajar A. Nugraha
On Sun, May 31, 2015 at 6:58 AM, james harvey jamespharve...@gmail.com wrote: I want to create a container that starts out being identical to my top-level no-container installation. I want any changes performed within the container to be kept in the container. I want anything added to my

Re: [lxc-users] Creating a Linux container that is just a sandbox of my actual installation

2015-05-30 Thread Fajar A. Nugraha
On Sun, May 31, 2015 at 8:14 AM, james harvey jamespharve...@gmail.com wrote: What is your primary goal? ... Part of me is wondering if I can overlayfs everything, and chroot a terminal into the overlayfs mount. Not too worried about malicious apps for my situation in Linux. Just want to

Re: [lxc-users] Systemd inside lxc

2015-05-27 Thread Fajar A. Nugraha
On Thu, May 28, 2015 at 5:11 AM, SIVA SUBRAMANIAN.P psiv...@gmail.com wrote: Hi, I'm compiling lxc in linux using yocto, how can I add systemd support to the lxc containers. Short version: you need up-to-date systemd on the container and up-to-date lxc on the host (preferably 1.1.2, with lxcfs

Re: [lxc-users] lxc guest cannot play sound using pulseaudio. tcp module is loaded with permission.

2015-05-25 Thread Fajar A. Nugraha
On Mon, May 25, 2015 at 1:40 PM, Oz Dror odr...@gmail.com wrote: Does pactl list modules on the host show the module loaded and correctly configured? An example output on my host setup $ pactl info Server String: unix:/run/user/1000/pulse/native ... Is Local: yes pactl info (in server

Re: [lxc-users] lxc guest cannot play sound using pulseaudio. tcp module is loaded with permission.

2015-05-25 Thread Fajar A. Nugraha
On Tue, May 26, 2015 at 12:35 AM, Oz Dror odr...@gmail.com wrote: # pactl list sinks A soon as I connect the lxc guest all the sinks are lost and I have a suspended sink Then I am not able to play sound on either. Some times this sink changes to the dummy sink. I can only recover from that

Re: [lxc-users] lxc-ls -f problem

2015-05-22 Thread Fajar A. Nugraha
This is on fresh ubuntu 14.04, fully-updated, with bundled lxc? If yes, it's a bug. Can you reproduce it on fresh installation (e.g. on kvm/virtualbox)? If you haven't update it, it's possible that you ran into some old bug. FWIW, this is my main configuration choice for production systems:

Re: [lxc-users] lxc-start fails

2015-05-20 Thread Fajar A. Nugraha
of warnings, but init applet error exists. On Mon, May 18, 2015 at 4:44 PM, Fajar A. Nugraha l...@fajar.net wrote: Read the messages (1) /usr/share/lxc/templates/lxc-busybox: line 182: file: command not found you don't have the necessary programs on your host (i.e. you don't have file

Re: [lxc-users] lxc-start fails

2015-05-18 Thread Fajar A. Nugraha
Read the messages (1) /usr/share/lxc/templates/lxc-busybox: line 182: file: command not found you don't have the necessary programs on your host (i.e. you don't have file, usually installed as /usr/bin/file). (2) warning : busybox is not statically linked. warning : The template script may

Re: [lxc-users] lxc.aa_allow_incomplete in vivid containers

2015-05-07 Thread Fajar A. Nugraha
On Fri, May 8, 2015 at 12:32 PM, Mark Constable ma...@renta.net wrote: I thought I'd try going back to normal privileged containers which will at least (or did pre-systemd) autostart. Unprivileged (i.e. container root uid is non 0) can also autostart if it is owned by root (i.e. located on

Re: [lxc-users] systemd hangs at container start

2015-05-06 Thread Fajar A. Nugraha
On Wed, May 6, 2015 at 12:41 PM, Dietmar Maurer diet...@proxmox.com wrote: using lxc 1.1.1, I downloaded a debian jessie based container with But I am unable to start it (hangs in init): # lxc-start -n 201 -F Failed to mount cgroup at /sys/fs/cgroup/systemd: Permission denied But it works

Re: [lxc-users] lxc SLES container and failed container creation.

2015-05-05 Thread Fajar A. Nugraha
On Wed, May 6, 2015 at 7:47 AM, Narahari Lakshminarayana itsme.narah...@gmail.com wrote: Ok. finally I got some time to retry this and get this to progress. But I have hit some roadblocks. I have pasted the log here. Please take a min and advise what is possibly wrong. I am trying to setup

Re: [lxc-users] no network in vivid image? - addendum

2015-05-05 Thread Fajar A. Nugraha
/utopic. -- Fajar On Tue, May 5, 2015 at 12:53 PM, Fajar A. Nugraha l...@fajar.net wrote: Short version: don't run systemd unpriviledged containers yet (including vivid). Priviledged containers should work fine. On Tue, May 5, 2015 at 3:51 AM, david.an...@bli.uzh.ch wrote: It definitely

Re: [lxc-users] no network in vivid image? - addendum

2015-05-05 Thread Fajar A. Nugraha
...@bli.uzh.ch wrote: Thanks Fajar for the explanations! I am going to stick to utopic for the time being :-) David -lxc-users lxc-users-boun...@lists.linuxcontainers.org wrote: - To: LXC users mailing-list lxc-users@lists.linuxcontainers.org From: Fajar A. Nugraha Sent by: lxc-users Date

Re: [lxc-users] no network in vivid image? - addendum

2015-05-04 Thread Fajar A. Nugraha
Short version: don't run systemd unpriviledged containers yet (including vivid). Priviledged containers should work fine. On Tue, May 5, 2015 at 3:51 AM, david.an...@bli.uzh.ch wrote: It definitely is a problem of vivid in the container, although not only the image. After installing utopic

Re: [lxc-users] services in container doesn't start automatically

2015-04-30 Thread Fajar A. Nugraha
On Thu, Apr 30, 2015 at 9:10 PM, Fırat KÜÇÜK firatku...@gmail.com wrote: lxc.network.ipv4 = 213.X.X.31/32 lxc.network.ipv4.gateway = 193.X.X.1 I didn't know you can do that. Thanks. container inerfaces file: auto eth0 iface eth0 inet static address 213.X.X.31 netmask

Re: [lxc-users] lxc memory limit doesn't work

2015-04-29 Thread Fajar A. Nugraha
On Wed, Apr 29, 2015 at 2:17 PM, Fırat KÜÇÜK firatku...@gmail.com wrote: Hi, i updated the config file: lxc.cgroup.memory.limit_in_bytes = 2048M but my container free -h output shows 32GB Is there anything that i missed? Not really. In most (all?) lxc setup, various tools (e.g. free,

Re: [lxc-users] lxc memory limit doesn't work

2015-04-29 Thread Fajar A. Nugraha
lxc then i created a container and edit conf-file lxc.cgroup.memory.limit_in_bytes = 2048M but it doesn't work. In both cases i used free -h or cat /proc/meminfo 2015-04-29 11:09 GMT+03:00 Fajar A. Nugraha l...@fajar.net: On Wed, Apr 29, 2015 at 2:17 PM, Fırat KÜÇÜK firatku...@gmail.com

Re: [lxc-users] lxc memory limit doesn't work

2015-04-29 Thread Fajar A. Nugraha
On Wed, Apr 29, 2015 at 5:13 PM, Fırat KÜÇÜK firatku...@gmail.com wrote: I reinstalled the lxc, lxcfs service cannot start. ... because ? There should be a log on /var/log/upstart/lxcfs.log. Or you could try starting it manually: /usr/bin/lxcfs -s -f -o allow_other /var/lib/lxcfs -- Fajar

Re: [lxc-users] lxc memory limit doesn't work

2015-04-29 Thread Fajar A. Nugraha
:/) failed: invalid request WARNING: failed to escape to root cgroup call to list_controllers failed: Method ListControllers with signature on interface org.linuxcontainers.cgmanager0_0 doesn't exist 2015-04-29 13:25 GMT+03:00 Fajar A. Nugraha l...@fajar.net: On Wed, Apr 29, 2015 at 5:13 PM

Re: [lxc-users] networking and permissions questions

2015-04-27 Thread Fajar A. Nugraha
On Tue, Apr 28, 2015 at 6:53 AM, Joe McDonald ideafil...@gmail.com wrote: 1) Do I need to specify this IP in both the config file and the rootfs/etc/network/interfaces file? Is there a better way to do this? IMHO the best way is on container's interfaces file 2) why does one container

Re: [lxc-users] #1390223 Apparmor related regression on access to unix sockets (was: ubuntu utopic (14.10) permission problems?)

2015-04-21 Thread Fajar A. Nugraha
On Wed, Apr 22, 2015 at 7:14 AM, Norberto Bensa nbensa+lxcus...@gmail.com wrote: 2015-04-21 11:01 GMT-03:00 Fajar A. Nugraha l...@fajar.net: On Tue, Apr 21, 2015 at 7:06 PM, Norberto Bensa nbensa+lxcus...@gmail.com wrote: 2015-03-11 23:01 GMT-03:00 Norberto Bensa nbensa+lxcus...@gmail.com

Re: [lxc-users] Is this a bug

2015-04-20 Thread Fajar A. Nugraha
On Mon, Apr 20, 2015 at 4:43 PM, Björn Mittelsdorf bjoern.mittelsd...@scheer-management.com wrote: I am using lxc version 1.0.7 # Note that /etc/hostname is updated by lxc itself for file in \ $LXC_ROOTFS_PATH/etc/sysconfig/network \

Re: [lxc-users] unable to start qemu-kvm inside lxc container (the host freezes)

2015-04-17 Thread Fajar A. Nugraha
On Thu, Apr 16, 2015 at 8:57 PM, Syraxes syra...@gmail.com wrote: On Thu, Apr 16, 2015 at 11:50 AM, Fajar A. Nugraha l...@fajar.net wrote: Have you tested using kvm WITHOUT network for the VMs, by any chance? I tested something similar with virtualbox inside a container, and virtualbox's

Re: [lxc-users] unable to start qemu-kvm inside lxc container (the host freezes)

2015-04-16 Thread Fajar A. Nugraha
On Thu, Apr 16, 2015 at 3:04 PM, Syraxes syra...@gmail.com wrote: But is there another way to make the qemu work inside the lxc container ? Yes. I've done it many times. The host freezing suggests you have a problem with the kvm binary - kvm runs fine outside of a container? You're sure

Re: [lxc-users] memory limits

2015-04-08 Thread Fajar A. Nugraha
On Thu, Apr 9, 2015 at 11:33 AM, Mohan G mohan...@yahoo.com wrote: Hi, query: if i create a cgroup with memory limit of 4GB and if the system has 8GB ram, now if both the system wide pressure is pretty high, does it mean it can take away part of this cgroup memory and what if the cgroup now

Re: [lxc-users] container stuck until lxcfs restart

2015-04-06 Thread Fajar A. Nugraha
On Fri, Mar 27, 2015 at 7:32 PM, Norberto Bensa nbensa+lxcus...@gmail.com wrote: 2015-03-25 2:53 GMT-03:00 Fajar A. Nugraha l...@fajar.net: On Tue, Mar 24, 2015 at 2:10 PM, Fajar A. Nugraha l...@fajar.net wrote: On Tue, Mar 24, 2015 at 5:52 AM, Norberto Bensa nbensa+lxcus...@gmail.com wrote

Re: [lxc-users] Container cannot write to /var/run

2015-04-06 Thread Fajar A. Nugraha
On the same container, of course. -- Fajar On Mon, Apr 6, 2015 at 6:12 PM, CDR vene...@gmail.com wrote: A symlink tu /run in the host ot in the same container? Philip On Monday, April 6, 2015, Fajar A. Nugraha l...@fajar.net wrote: On Sun, Apr 5, 2015 at 6:29 AM, Bostjan Skufca bost

Re: [lxc-users] lxs using host fs via aufs?

2015-04-05 Thread Fajar A. Nugraha
On Sat, Apr 4, 2015 at 1:37 PM, Johannes Graumann johannes_graum...@web.de wrote: Serge Hallyn wrote: Quoting Johannes Graumann (johannes_graum...@web.de): Hello, Has someone build lxc containers using the hosts /usr,/var, etc. partitions mounted througha union file system to the container?

Re: [lxc-users] Container cannot write to /var/run

2015-04-05 Thread Fajar A. Nugraha
On Sun, Apr 5, 2015 at 6:29 AM, Bostjan Skufca bost...@a2o.si wrote: Is systemd now supported as LXC guest's init system? Short answer: not yet It's work in progress. Among others, systemd in container needs lxcfs, and one of the issues you'd find is https://github.com/lxc/lxcfs/issues/17 ,

Re: [lxc-users] Building LXC 1.1 on Debian 8

2015-04-02 Thread Fajar A. Nugraha
On Fri, Apr 3, 2015 at 4:14 AM, Joshua Schaeffer jschaeffer0...@gmail.com wrote: Serge, I did have that sysctl, but it was set to 0. I changed it to 1 and now I get a new error: lxcuser@thinkhost:~$ lxc-create -t download -n c2 lxc: conf.c: lxc_map_ids: 3145 Missing newuidmap/newgidmap

Re: [lxc-users] LXCFS under Ubuntu 14.04 Trusty

2015-03-31 Thread Fajar A. Nugraha
On Tue, Mar 31, 2015 at 1:24 PM, Georg Schönberger gschoenber...@thomas-krenn.com wrote: Hi! I am trying to set up LXCFS under Ubuntu 14.04 trusty, I am using the daily ppa: # cat /etc/apt/sources.list.d/ubuntu-lxc-daily-trusty.list deb http://ppa.launchpad.net/ubuntu-lxc/daily/ubuntu

Re: [lxc-users] creating bridges inside a (macvlan) container

2015-03-25 Thread Fajar A. Nugraha
On Wed, Mar 25, 2015 at 9:01 PM, Chris Burroughs chris.burrou...@gmail.com wrote: On 03/24/2015 06:00 PM, Fajar A. Nugraha wrote: create veth bridges inside a container on top of macvlan bridges? It works just fine on Ubuntu with an old lxc-1.0.7. Thanks for checking! This is with lxc

Re: [lxc-users] creating bridges inside a (macvlan) container

2015-03-24 Thread Fajar A. Nugraha
On Wed, Mar 25, 2015 at 3:20 AM, Chris Burroughs chris.burrou...@gmail.com wrote: I have containers setup with macvlan [1] networking. This generally works well, but it would be nice in a few edge cases to be able to create an additional veth bridge from inside the container. However, this

Re: [lxc-users] container stuck until lxcfs restart

2015-03-24 Thread Fajar A. Nugraha
for poweroff.target timed out. Ubuntu 14.10 lxcfs 0.6-0ubuntu2~ubuntu14.10.1~ppa1 lxc 1.1.1-0ubuntu2~ubuntu14.10.1~ppa1 -- Fajar On Wed, Mar 25, 2015 at 12:53 PM, Fajar A. Nugraha l...@fajar.net wrote: I believe I have a reproducer script: - create a ubuntu vivid container, c1, with systemd # lxc-create -n

Re: [lxc-users] LXC 1.1.1 has been released! (Was: LXC 1.0.7 has been released!)

2015-03-23 Thread Fajar A. Nugraha
On Tue, Mar 17, 2015 at 6:34 AM, CDR vene...@gmail.com wrote: Is it available automatically in Ubuntu lcx-daily? Oddly enough it's available in lxd ppa, but lxc's daily master still use version number 1.1.0. $ apt-cache policy lxc lxc: Installed: 1.1.1-0ubuntu2~ubuntu14.10.1~ppa1 Candidate:

Re: [lxc-users] per user iptables set failed on unprivileged LXC container

2015-03-23 Thread Fajar A. Nugraha
On Sun, Mar 22, 2015 at 7:17 PM, tom zs68j...@gmail.com wrote: when create unprivileged LXC container as non root user, execute iptables below failed. iptables -A OUTPUT -o ethX -m owner --uid-owner ubuntu -j REJECT It seems iptables with -m owner --uid-owner {USERNAME} only can be

Re: [lxc-users] Network connection on a Debian unstable host

2015-03-22 Thread Fajar A. Nugraha
On Sun, Mar 22, 2015 at 10:53 PM, Geordie geo...@kos.net wrote: /etc/lxc/default.conf lxc.utsname =lsmb1 lxc.network.type=veth lxc.network.flags=up lxc.network.link=br0 lxc.network.hwaddr=ac:de:48:00:00:15 is the a unique MAC address? If you're unsure, just leave it empty.

Re: [lxc-users] Advice for running LXC on a Debian host

2015-03-13 Thread Fajar A. Nugraha
On Fri, Mar 13, 2015 at 8:34 PM, Rory Campbell-Lange r...@campbell-lange.net wrote: Dear LXC List I'm looking for advice on running LXC on Debian. I did quite a lot of work on trialling lxc about two years ago but then left it there because of a lack of time and some troublesome issues with

Re: [lxc-users] lxc-security: iptables audit with nflog not working with default settings (insecure)

2015-03-11 Thread Fajar A. Nugraha
On Wed, Mar 11, 2015 at 8:03 PM, Fiedler Roman roman.fied...@ait.ac.at wrote: But the current issue is different: The guest can snoop on the NFLOG messages generated on host and destined for the host and hence can get knowledge of ANY NFLOGed connection of host or any guest, no matter if on

Re: [lxc-users] installation of package fails in container

2015-03-11 Thread Fajar A. Nugraha
lxc.cap.drop definition from included configs (e.g. /usr/share/lxc/config/centos.common.conf) If you know exactly which cap is needed (I'm guessing setfcap), you should be able to copy that line and only remove that particular cap. -- Fajar On Wed, Mar 11, 2015 at 6:13 AM, Fajar A. Nugraha l

Re: [lxc-users] debian jessie ro bind mounts...

2015-03-11 Thread Fajar A. Nugraha
On Tue, Mar 10, 2015 at 7:43 PM, Marco foobar.an...@gmail.com wrote: Hi, I'm experiencing issues while trying to share an host path or filesystem as read only to guests (read only bind-mounts). Host: Debian 8 Jessie Linux deb 3.16.0-4-amd64 #1 SMP Debian 3.16.7-ckt4-3 (2015-02-03) x86_64

Re: [lxc-users] User namespaces

2015-03-11 Thread Fajar A. Nugraha
On Thu, Feb 26, 2015 at 5:48 AM, david.an...@bli.uzh.ch wrote: Hi, I am looking into individual user namespaces for each container. The first container could have uids and gids from 10 to 165536. The second container could have 20 to 265536, couldn't it? How far can I go? Is there a

Re: [lxc-users] lxc-security: iptables audit with nflog not working with default settings (insecure)

2015-03-11 Thread Fajar A. Nugraha
On Wed, Mar 11, 2015 at 5:48 PM, Fiedler Roman roman.fied...@ait.ac.at wrote: Hello list, Has someone managed to get reliable network traffic auditing with LXC up and running? That means, that it is possible to write a protocol of e.g. every new connection from and to host. On my setup

Re: [lxc-users] Question on bridging in nested containers

2015-03-11 Thread Fajar A. Nugraha
On Thu, Mar 12, 2015 at 4:21 AM, Anjali Kulkarni anj...@juniper.net wrote: Sorry, I didn¹t phrase this correctly. What I meant is I ok to bypass the base container (don¹t need bridging connectivity to it), but just want to expose the host bridge to the nested container. Short answer: no. Why

Re: [lxc-users] nested containers

2015-03-05 Thread Fajar A. Nugraha
, and then i will set soft limits on these children container. But when i start nested containers, i don;t see any entrry under /sys/fs/groups for the children container. Regards Mohan From: Fajar A. Nugraha l...@fajar.net To: LXC users mailing-list lxc

Re: [lxc-users] newbee to LXC and LXCFS

2015-03-05 Thread Fajar A. Nugraha
On Fri, Mar 6, 2015 at 4:14 AM, Rajasekar Darapuram r...@robinsystems.com wrote: The container created from scratch seems to work fine, but container whose rootfs is mounted from a dir is not working Here are my logs...Please let me know Have you read the config

Re: [lxc-users] lxc-console breaks on container reboot if someone is attached to it

2015-03-04 Thread Fajar A. Nugraha
On Thu, Mar 5, 2015 at 9:21 AM, Bostjan Skufca bost...@a2o.si wrote: Here are the steps to reproduce (lxc 1.0.7), assuming container is already running: ### Step 3: watch the shutdown messages in console on host: ...(all irrelevant content)... AT LAST: Rebooting... lxc_container:

Re: [lxc-users] newbee to LXC and LXCFS

2015-03-04 Thread Fajar A. Nugraha
On Thu, Mar 5, 2015 at 1:02 AM, Rajasekar Darapuram r...@robinsystems.com wrote: 1. Should I explicitly bind the host /var/lib/lxcfs/cgroup/proc to the container /proc (or something like /container_proc) Not if you update lxc to 1.1. See https://github.com/lxc/lxcfs/blob/master/README.md --

Re: [lxc-users] lxc.hook.start not working?

2015-03-04 Thread Fajar A. Nugraha
/ Shows: c11 c11-1 Before starting this container, there was no c11 or c11-1. ThANKS Anjali On 3/4/15, 2:36 PM, Fajar A. Nugraha l...@fajar.net wrote: On Thu, Mar 5, 2015 at 2:52 AM, Anjali Kulkarni anj...@juniper.net wrote: Thanks, that does not work either. Is this broken? Works

Re: [lxc-users] newbee to LXC and LXCFS

2015-03-04 Thread Fajar A. Nugraha
the cpuinfo, meminfo, uptime commands on each container, they both are returning the same values and they match the host machine values.. Did I miss anything? From: Fajar A. Nugraha l...@fajar.net To: LXC users mailing-list lxc-users@lists.linuxcontainers.org Cc: Date: Thu, 5 Mar 2015 06:00:00

[lxc-users] debugging lxcfs?

2015-03-04 Thread Fajar A. Nugraha
I'm having intermittent problem with lxcfs, used by vivid (with systemd-sysv installed) container. For example, just now lxc-start -n -v and lxc-console -n v -t console stuck on [ OK ] Reached target Basic System. Starting System Logging Service... lxc-stop -k -n v (from another

Re: [lxc-users] nested containers

2015-03-04 Thread Fajar A. Nugraha
On Wed, Mar 4, 2015 at 12:15 PM, Mohan G mohan...@yahoo.com wrote: Hi, Is there anyway we can have nested containers/cgroups. One parent container forming the basis for children containers. i.e subset of parent container. Yes. On parent container config (in ubuntu), add this:

[lxc-users] working centos 7 container under ubuntu

2015-03-03 Thread Fajar A. Nugraha
Hi, Since systemd-219 is out, I decided to test it again for centos 7 container. It works cleaner than the previous attempt (218), no need for custom hook script anymore. Tested and works: - container start stop (privileged container) - lxc-console - lxc-attach - login via ssh unprivileged

Re: [lxc-users] running NFS and cifs in a container.

2015-03-02 Thread Fajar A. Nugraha
On Tue, Mar 3, 2015 at 1:22 PM, Mohan G mohan...@yahoo.com wrote: Hi Folks. can anyone point me to material/docs on running NFS /CIFS inside a container. Short version: - if you mean nfs/cifs client, the recommended way if for the HOST to mount it (e.g. directly on

Re: [lxc-users] Problem with memory.memsw.limit_in_bytes on Ubuntu 14.04.

2015-02-26 Thread Fajar A. Nugraha
On Thu, Feb 26, 2015 at 6:51 PM, PONCET Anthony ff...@msn.com wrote: Hello, I'm trying to used the memory.memsw.limit_in_bytes, and I have this error when I trying to set this : lxc-cgroup -n c_name memory.memsw.limit_in_bytes 2G The name does say limit_in_bytes, not

Re: [lxc-users] Problem with memory.memsw.limit_in_bytes on Ubuntu 14.04.

2015-02-26 Thread Fajar A. Nugraha
: It should work with 2G. The rest a bad excuse. It has become a standard in the software industry. On Thu, Feb 26, 2015 at 8:49 AM, Fajar A. Nugraha l...@fajar.net wrote: On Thu, Feb 26, 2015 at 6:51 PM, PONCET Anthony ff...@msn.com wrote: Hello, I'm trying to used

Re: [lxc-users] macvlan-based networking for unprivileged containers

2015-02-24 Thread Fajar A. Nugraha
On Tue, Feb 24, 2015 at 11:50 AM, Serge Hallyn serge.hal...@ubuntu.com wrote: Quoting Fajar A. Nugraha (l...@fajar.net): On Wed, Feb 18, 2015 at 12:27 AM, Serge Hallyn serge.hal...@ubuntu.com wrote: Quoting Fajar A. Nugraha (l...@fajar.net): # c1's veth name on host side auto v-c1-0

Re: [lxc-users] Booting a Freebsd VM inside a container

2015-02-20 Thread Fajar A. Nugraha
On Fri, Feb 20, 2015 at 8:16 PM, Anjali Kulkarni anj...@juniper.net wrote: Thanks, so for networking to work, all you need to do is add the networking links to the config file in /var/lib/lxc/lxc_name and then networking should work in the VM as it would in a normal LXC. Not if by VM you mean

Re: [lxc-users] Booting a Freebsd VM inside a container

2015-02-19 Thread Fajar A. Nugraha
On Fri, Feb 20, 2015 at 12:56 AM, Anjali Kulkarni anj...@juniper.net wrote: Hi, The following link mentions booting an Ubuntu VM inside a container: (https://www.stgraber.org/2012/03/04/booting-an-ubuntu-12-04-virtual-machine-in-an-lxc-container/) However I had 2 qs 1. If we do boot a VM

Re: [lxc-users] What's the best way to get stderr from lxc-attach when running a command?

2015-02-18 Thread Fajar A. Nugraha
On Wed, Feb 18, 2015 at 3:33 PM, Dan Shi brui...@gmail.com wrote: I'm trying to run some command in container through lxc-attach. The script is in python 2.7. Apparently, command like following does not raise a subprocess exception: subprocess.check_output('lxc-attach -n c1 -- ls

Re: [lxc-users] macvlan-based networking for unprivileged containers

2015-02-17 Thread Fajar A. Nugraha
On Wed, Feb 18, 2015 at 12:27 AM, Serge Hallyn serge.hal...@ubuntu.com wrote: Quoting Fajar A. Nugraha (l...@fajar.net): # c1's veth name on host side auto v-c1-0 iface v-c1-0 inet static I'm probably just ignorant here, but - does this not cause 'ifup -a' to fail when the containers

Re: [lxc-users] lxc-console not working on centos 7 container

2015-02-12 Thread Fajar A. Nugraha
On Thu, Feb 12, 2015 at 5:20 PM, Fajar A. Nugraha l...@fajar.net wrote: OK. So first of all, the steps that I posted above are NOT, in any way, official or supported by lxc. However it works for me. Upon further tests, it seems I missed something. Sorry for the mix up. I actually tried two

Re: [lxc-users] lxc-console not working on centos 7 container

2015-02-12 Thread Fajar A. Nugraha
OK. So first of all, the steps that I posted above are NOT, in any way, official or supported by lxc. However it works for me. On Thu, Feb 12, 2015 at 3:23 PM, CDR vene...@gmail.com wrote: mount /dev/sda1 on / type ext4 (rw,errors=remount-ro) proc on /proc type proc (rw,noexec,nosuid,nodev)

Re: [lxc-users] lxc-console not working on centos 7 container

2015-02-12 Thread Fajar A. Nugraha
On Thu, Feb 12, 2015 at 5:56 PM, Fajar A. Nugraha l...@fajar.net wrote: The second scenario was with backported systemd, from f20 + ubuntu That should be with config modifications, mount hook, AND backported systemd ... -- Fajar ___ lxc-users mailing

Re: [lxc-users] lxc 1.0.6 / lvm / snapshot and clone

2015-02-12 Thread Fajar A. Nugraha
On Thu, Feb 12, 2015 at 12:26 AM, Marco foobar.an...@gmail.com wrote: Hi, I've some questions for which I couldn't find good answers online and I'd like your suggestions. OS: Linux/Debian 8 Jessie LXC: 1.0.6-6 Backing store: LVM It seems that snapshot clones cannot be done online :

Re: [lxc-users] Can't Start Unprivileged Container in Ubuntu

2015-02-11 Thread Fajar A. Nugraha
On Wed, Feb 11, 2015 at 8:16 PM, jqf...@hotmail.com wrote: jimmy@jimmyscomputer:~$ lxc-start -n p1 -F lxc-start: start.c: print_top_failing_dir: 102 Permission denied - could not access /home/jimmy. Please grant it 'x' access, or add an ACL for the container root. So I should just move

Re: [lxc-users] lxc-console not working on centos 7 container

2015-02-11 Thread Fajar A. Nugraha
On Thu, Feb 12, 2015 at 2:41 PM, CDR vene...@gmail.com wrote: I cannot make this solution work. There are a lot of errors. ... which are ...? a copy-paste of the output lxc-start -F -n will help, as well as your final container config. Also, I have cgroupfs-mount installed, so that I have

Re: [lxc-users] lxc-console not working on centos 7 container

2015-02-11 Thread Fajar A. Nugraha
PM, CDR vene...@gmail.com wrote: Thanks. I love Ubuntu as a host for LXC. I just got addicted to systemctl and writing *.service files. It is much more sophisticated than the older way of starting and stopping applications. On Fri, Feb 6, 2015 at 8:40 AM, Fajar A. Nugraha l...@fajar.net wrote

Re: [lxc-users] LXC 1.1 has been released!

2015-02-09 Thread Fajar A. Nugraha
On Mon, Feb 9, 2015 at 5:11 PM, Dirk Geschke d...@lug-erding.de wrote: ah, maybe I should try a newer systemd than jessie, jessie is testing. But this is systemd 215-10, where unstable uses systemd 215-11. So I did not expect a difference here. But maybe I should try experimental, this is

Re: [lxc-users] centos guest

2015-02-08 Thread Fajar A. Nugraha
On Mon, Feb 9, 2015 at 12:06 AM, mattias m...@mjw.se wrote: I run centos on my server If I do Lxc-create –name test –t cetos It will install same centos as on my server I understand I can use –r but how? Let’s say I will install centos 5? lxc-create ... -- -r 5 Note the --. Anything

Re: [lxc-users] TTY Question

2015-02-06 Thread Fajar A. Nugraha
On Fri, Feb 6, 2015 at 1:19 AM, CDR vene...@gmail.com wrote: I need to use TYY=9 in a container, how do I achieve that? You could probably start by NOT using big fonts in html mail when posting to the list. That being said, what do you mean tyy=9? did you mean tty? If yes, try man

Re: [lxc-users] TTY Question

2015-02-06 Thread Fajar A. Nugraha
On Fri, Feb 6, 2015 at 6:05 AM, CDR vene...@gmail.com wrote: a) Sorry about the fonts You're still replying using the same fonts. I find this really annoying, so this will be my last response to you. Hopefully others are willing to help. b) All my containers are unconfined c) My app does

Re: [lxc-users] lxc-console not working on centos 7 container

2015-02-06 Thread Fajar A. Nugraha
On Fri, Feb 6, 2015 at 3:25 AM, CDR vene...@gmail.com wrote: In Ubuntu 14.04 fully updated and lxc latest.1.1, a container with Centos 7 never allows connection via lxc-console. It stays as below. If you start the container with -F, you can see how it boots and indeed you can log in via the

Re: [lxc-users] lxc-console not working on centos 7 container

2015-02-06 Thread Fajar A. Nugraha
On Fri, Feb 6, 2015 at 8:15 PM, CDR vene...@gmail.com wrote: Thanks for the response. I disable selinux and a apparmor routinely. My containers are just a way to separate applications, there are no users accessing them, nothing bad can happen. So basically you are saying that there is no way

Re: [lxc-users] unprivileged container with zfs backing

2015-02-04 Thread Fajar A. Nugraha
On Wed, Feb 4, 2015 at 6:01 PM, Fajar A. Nugraha l...@fajar.net wrote: On Wed, Feb 4, 2015 at 5:46 PM, Adam Gold a...@gmx.com wrote: If so, what's the best way to manually create a template in unprivileged mode to ensure all the subuids and subgids are assigned correctly. Create

Re: [lxc-users] unprivileged container with zfs backing

2015-02-04 Thread Fajar A. Nugraha
On Wed, Feb 4, 2015 at 4:58 PM, Adam Gold a...@gmx.com wrote: In summary, I would like each unprivileged container to run on top of a new zfs filesystem which I create as root and assign relevant ownership to. Is this possible? should be possible, BUT not with lxc-create. The easiest method

Re: [lxc-users] unprivileged container with zfs backing

2015-02-04 Thread Fajar A. Nugraha
On Wed, Feb 4, 2015 at 5:46 PM, Adam Gold a...@gmx.com wrote: On 04/02/2015 10:10, Fajar A. Nugraha wrote: On Wed, Feb 4, 2015 at 4:58 PM, Adam Gold a...@gmx.com mailto:a...@gmx.com wrote: In summary, I would like each unprivileged container to run on top of a new zfs

Re: [lxc-users] LXC 1.1 on Ubuntu 14.04

2015-02-03 Thread Fajar A. Nugraha
On Sun, Feb 1, 2015 at 12:00 PM, Daniel Miranda danielk...@gmail.com wrote: Hello, I've recently seen the announcement of the 1.1 release, and I'd like to test it out on my 14.04 systems, so I can validate it to use in production (nothing life or money critical, just my college lab). I

Re: [lxc-users] writeback cache for all container processes?

2015-02-02 Thread Fajar A. Nugraha
On Mon, Feb 2, 2015 at 7:23 PM, Tomasz Chmielewski man...@wpkg.org wrote: On 2015-02-02 21:13, Fajar A. Nugraha wrote: You do know that lxc share the same kernel instance as the host OS, making such settings not applicable? Why not? Perhaps I wasn't very specific when starting the thread

Re: [lxc-users] writeback cache for all container processes?

2015-02-02 Thread Fajar A. Nugraha
On Mon, Feb 2, 2015 at 7:45 PM, Tomasz Chmielewski man...@wpkg.org wrote: On 2015-02-02 21:37, Fajar A. Nugraha wrote: It's certainly possible to do not applicable kinds of things with processes and their page cache, i.e.: https://code.google.com/p/pagecache-mangagement/ [1] Or here

Re: [lxc-users] writeback cache for all container processes?

2015-02-02 Thread Fajar A. Nugraha
You do know that lxc share the same kernel instance as the host OS, making such settings not applicable? -- Fajar On Mon, Feb 2, 2015 at 6:59 PM, Tomasz Chmielewski man...@wpkg.org wrote: Is it possible to start a lxc container with writeback cache, in a way similar to KVM's writeback cache?

Re: [lxc-users] Fun with lxc.network.type=phys

2015-01-25 Thread Fajar A. Nugraha
On Wed, Jan 21, 2015 at 10:50 PM, ScrumpyJack scrumpyj...@me.com wrote: On Wed, 21 Jan 2015, Fajar A. Nugraha wrote: On Wed, Jan 21, 2015 at 7:09 PM, scrumpyjack scrumpyj...@me.com wrote: Yes, i want to give a /32 to a container. Relevant part of container's /etc/network/interfaces

Re: [lxc-users] Fun with lxc.network.type=phys

2015-01-21 Thread Fajar A. Nugraha
On Wed, Jan 21, 2015 at 3:31 PM, ScrumpyJack scrumpyj...@me.com wrote: On Mon, 19 Jan 2015, ScrumpyJack wrote: I'd like to connect a physical interface from a host to a LXC container guest like so: lxc.network.type=phys And then assign a routable IP/32 address to the LXC container

Re: [lxc-users] Fun with lxc.network.type=phys

2015-01-21 Thread Fajar A. Nugraha
On Wed, Jan 21, 2015 at 7:09 PM, scrumpyjack scrumpyj...@me.com wrote: Yes, i want to give a /32 to a container. If i stick to lxc.network.type = macvlan lxc.network.flags = up lxc.network.link = eth0 lxc.network.name = eth1 lxc.network.ipv4 = 21.45.463.23/32 (fake IP, obvs)

Re: [lxc-users] xserver inside lxc

2015-01-16 Thread Fajar A. Nugraha
On Fri, Jan 16, 2015 at 6:07 PM, Alex Mestiashvili a...@biotec.tu-dresden.de wrote: Hi All, trying to start the xorg server in the container I receive the following messages: [ 61645.425] (II) NVIDIA dlloader X Driver 340.65 Tue Dec 2 08:47:36 PST 2014 What are you trying to achieve?

Re: [lxc-users] loading a file system

2015-01-13 Thread Fajar A. Nugraha
You need to be more clear. More response inline On Wed, Jan 14, 2015 at 11:26 AM, Mohan G mohan...@yahoo.com wrote: Thanks for the reply, now i guess my specific question is. 1) I have my own file system which i can load to the kernel. But i want to restrict the file systems usage as a

Re: [lxc-users] loading a file system

2015-01-13 Thread Fajar A. Nugraha
, Fajar A. Nugraha l...@fajar.net wrote: You need to be more clear. More response inline On Wed, Jan 14, 2015 at 11:26 AM, Mohan G mohan...@yahoo.com wrote: Thanks for the reply, now i guess my specific question is. 1) I have my own file system which i can load to the kernel. But i want

Re: [lxc-users] Security question: root w/ subuids vs. unprivileged.

2014-11-27 Thread Fajar A. Nugraha
On Fri, Nov 28, 2014 at 12:08 AM, Raimund Berger raimund.ber...@gmail.com wrote: I'm asking since, as root, I'm guessing it might be easier to map select devices - like OSS audio - into a container, even when mapping uids too, which seems to be pretty much impossible to do with unprivileged

Re: [lxc-users] processes escaped from memory cgroup in container, but CPU group is OK

2014-11-21 Thread Fajar A. Nugraha
On Fri, Nov 21, 2014 at 2:45 PM, Michael R. Hines mrhi...@linux.vnet.ibm.com wrote: Hi All, I am using LXC 1.0.5, and I have container running Redhat 7.0 on a Power7 processor. My host kernel version is 3.10.42. The cgroup for this container located at /cgroup/cpu works very well - I can

Re: [lxc-users] Network configuration for multiple IP adresses

2014-11-11 Thread Fajar A. Nugraha
On Tue, Nov 11, 2014 at 4:02 PM, Moritz Kobel mailingli...@kobelnet.ch wrote: Hello, I would like to configure several IPv4 and IPv6 adresses for one container. This works basically with the configuration below. But it configures only one network interface (eth0) with all addresses. (One

Re: [lxc-users] Unix Sockets communications between containers

2014-11-11 Thread Fajar A. Nugraha
On Wed, Nov 12, 2014 at 9:27 AM, CDR vene...@gmail.com wrote: That is how we do business now, over TCP. By the way, I downloaded a new derivative of Mysql, http://paralleluniverse-inc.com/, and it seems, in my tests, several times faster than any other version, at least for this query

Re: [lxc-users] Compile fails under Fedora

2014-09-21 Thread Fajar A. Nugraha
For critical line-of-business normally you wouldn't use git snapshot. Unless you're a developer (which you already mentioned you're not). I'd sugest you either: - use whatever released version already packaged, or - learn how to fix it manually, or hire someone to do so (which should be very

Re: [lxc-users] Comparison of used resources between LxC and UML

2014-09-18 Thread Fajar A. Nugraha
On Thu, Sep 18, 2014 at 5:30 PM, Marcel Sánchez Toledano marcelsanch...@gmail.com wrote: Hi, I'm need to make some kind of comparison between the resources (CPU, RAM,...) used when executing 1 LxC container and the resources used when executing 1 SIMCTL (VNUML utility, UML) Virtual Machine.

Re: [lxc-users] macvlan networking

2014-09-15 Thread Fajar A. Nugraha
On Mon, Sep 15, 2014 at 4:19 PM, Adam Gold a...@gmx.com wrote: The official networking guide for lxc on Ubuntu : https://help.ubuntu.com/14.04/serverguide/lxc.html#lxc-network At first glance your config looks correct, but the most obvious possible source of problem would be -i eth0. You said

Re: [lxc-users] macvlan networking

2014-09-14 Thread Fajar A. Nugraha
On Mon, Sep 15, 2014 at 7:58 AM, Adam Gold a...@gmx.com wrote: Hello. I'm just starting to learn about containers so apologies for the basic question (I couldn't find an exact answer from my non-exhaustive review of the archives). I'm trying to create a private container network using

Re: [lxc-users] No outgoing traffic with bridged network and public IP address from container

2014-09-11 Thread Fajar A. Nugraha
On Thu, Sep 11, 2014 at 4:05 PM, othiman othi...@gmx.de wrote: Hi everyone, I already posted this to askubuntu.com (http://askubuntu.com/ questions/522457/lxc-container-no-outgoing-traffic- with-bridged-network-and-public-ip-address), but I think this might be a better place to find help.

Re: [lxc-users] No outgoing traffic with bridged network and public IP address from container

2014-09-11 Thread Fajar A. Nugraha
Depends on how your provider set it up. If it WERE intended to work that way, they would've given you full instructions (e.g. use this IP, this netmask, and this gateway) instead of just giving the IP (and probably say add this as a secondary IP on your server). The fact that you say it works

Re: [lxc-users] Run GUI program using lxc-execute

2014-08-31 Thread Fajar A. Nugraha
javascript:_e(%7B%7D,'cvml','m...@wittsend.com'); wrote: On Sat, 2014-08-30 at 21:32 +0700, Fajar A. Nugraha wrote: On Saturday, August 30, 2014, Sun Keqin ke...@nfs.iscas.ac.cn javascript:_e(%7B%7D,'cvml','ke...@nfs.iscas.ac.cn'); wrote: Hi all, How to run a GUI program (eg

<    1   2   3   4   5   6   >