Re: [lxc-users] Running unprotected system container

2020-06-22 Thread jjs - mainphrame
I understand his point, he knows what a container is, and wants to use a container for this. Being told he should use a VM instead is not helping him towards the goal. Just my $.02 J On Mon, Jun 22, 2020 at 10:35 AM Andrey Repin wrote: > Greetings, Koehler! > > > Ok you are not helpful, not

Re: [lxc-users] Running unprotected system container

2020-06-22 Thread Andrey Repin
Greetings, Koehler! > Ok you are not helpful, not sure why you are replying. "Your answer is invalid, you should give me the answers I expect, everything else is useless." Sorry, but with such attitude, you get what you deserve. > My os already provides kernel modules and script within init

Re: [lxc-users] Running unprotected system container

2020-06-20 Thread Fajar A. Nugraha
On Sat, Jun 20, 2020 at 3:07 PM Fajar A. Nugraha wrote: > > On Tue, Jun 16, 2020 at 6:26 PM Koehler, Yannick > wrote: > > > > Hi Fajar, > > > > If I use a Ubuntu image it works fine and I can run bash within the > > container. So I know the issue is somehow related to my imported image but > >

Re: [lxc-users] Running unprotected system container

2020-06-20 Thread Fajar A. Nugraha
On Tue, Jun 16, 2020 at 6:26 PM Koehler, Yannick wrote: > > Hi Fajar, > > If I use a Ubuntu image it works fine and I can run bash within the > container. So I know the issue is somehow related to my imported image but I > fail to understand why at this time. > > All the files in the imported

Re: [lxc-users] Running unprotected system container

2020-06-17 Thread Koehler, Yannick
Ok you are not helpful, not sure why you are replying. My os already provides kernel modules and script within init to load them up and that actually works already. And yes I want those modules loaded by my os in the container and made available to host as well. I have no issue with that, I

Re: [lxc-users] Running unprotected system container

2020-06-17 Thread Andrey Repin
Greetings, Koehler! > But I do not want kernel virtualization, not sure where you saw me ask for > that, I want the exact opposite, I want the kernel to be share, meaning same > kernel, same instance, with just layers on top, exactly as system containers > do. Then stop mentioning kernel

Re: [lxc-users] Running unprotected system container

2020-06-16 Thread Koehler, Yannick
Hi Fajar, If I use a Ubuntu image it works fine and I can run bash within the container. So I know the issue is somehow related to my imported image but I fail to understand why at this time. All the files in the imported tarball were uid/gid 0, I can run the /sbin/init and that script can

Re: [lxc-users] Running unprotected system container

2020-06-15 Thread Fajar A. Nugraha
On Mon, Jun 15, 2020 at 9:23 PM Koehler, Yannick wrote: > > I am still faced with the situation where if I run sh inside my container > then any command I try to execute such as /bin/ls returns permission denied. > > Any clue as to what I need to adjust to enable me to get inside my container >

Re: [lxc-users] Running unprotected system container

2020-06-15 Thread Koehler, Yannick
any security and such, yet, as seen in the thread I am not alone, but very few. -- Yannick Koehler From: lxc-users on behalf of Andrey Repin Sent: June 15, 2020 7:11 PM To: Yannick Koehler ; All Subject: Re: [lxc-users] Running unprotected system container

Re: [lxc-users] Running unprotected system container

2020-06-15 Thread Andrey Repin
Greetings, Koehler! > I am unclear how this answers my current questions. System containers are > marketed as being very close to a faster VM, as such, since I do have > control over the OS I am trying to run on top, I would need more details as > to why and which areas would cause the

Re: [lxc-users] Running unprotected system container

2020-06-15 Thread Saint Michael
t it makes sense from my viewpoint given my > requirements. > > -- > Yannick Koehler > -- > *From:* lxc-users on behalf > of Andrey Repin > *Sent:* June 15, 2020 10:51 AM > *To:* Saint Michael ; All < > lxc-users@lists.linuxcontainers.org>

Re: [lxc-users] Running unprotected system container

2020-06-15 Thread Koehler, Yannick
on behalf of Andrey Repin Sent: June 15, 2020 10:51 AM To: Saint Michael ; All Subject: Re: [lxc-users] Running unprotected system container Greetings, Saint Michael! > I need to load kernel modules, etc. It has to be on equal footing with the > host > .. See my other reply to t

Re: [lxc-users] Running unprotected system container

2020-06-15 Thread Andrey Repin
Greetings, Saint Michael! > I need to load kernel modules, etc. It has to be on equal footing with the > host > .. See my other reply to the thread. "I need to load kernel modules" is a direct contradiction to kernel-agnostic premise of containers. -- With best regards, Andrey Repin Monday,

Re: [lxc-users] Running unprotected system container

2020-06-15 Thread Koehler, Yannick
ent: June 15, 2020 10:49 AM To: Yannick Koehler ; All Subject: Re: [lxc-users] Running unprotected system container Greetings, Koehler! > As indicated, the code that will run inside that container is our previous > OS and if it does bad things, well, that means it was doing so prev

Re: [lxc-users] Running unprotected system container

2020-06-15 Thread Andrey Repin
Greetings, Koehler! > As indicated, the code that will run inside that container is our previous > OS and if it does bad things, well, that means it was doing so previously so > not a "bigger" issue than it was before. Since if that works, we will move > more towards snap we will then have a

Re: [lxc-users] Running unprotected system container

2020-06-15 Thread Koehler, Yannick
From: lxc-users on behalf of Saint Michael Sent: June 15, 2020 8:58 AM To: LXC users mailing-list Subject: Re: [lxc-users] Running unprotected system container I have the same issue with plain LXC. Can somebody please post a container config that would have the same

Re: [lxc-users] Running unprotected system container

2020-06-15 Thread Saint Michael
; -- > *From:* lxc-users on behalf > of Fajar A. Nugraha > *Sent:* June 13, 2020 12:53 AM > *To:* LXC users mailing-list > *Subject:* Re: [lxc-users] Running unprotected system container > > On Sat, Jun 13, 2020 at 9:41 AM Koehler, Yannick > wrot

Re: [lxc-users] Running unprotected system container

2020-06-12 Thread Fajar A. Nugraha
On Sat, Jun 13, 2020 at 9:41 AM Koehler, Yannick wrote: > > Hi, > > I am in a situation where we desire to run our old OS environment inside > Ubuntu Core. So far we have identified LXD as being a candidate to enable us > to run our past Linux OS environment within the new one. > > At this