[lxc-users] Unprivileged containers on Debian Jessie

2015-02-04 Thread Xavier Gendre
Hi, following the hints given by Serge Hallyn on the lxc-devel list, I managed to run an unprivileged container on my Debian Jessie \o/ Now, I want to avoid handlings and get it works on startup. Thus, I set permanently kernel.unprivileged_userns_clone to 1 and I create a systemd service to

[lxc-users] unprivileged container with zfs backing

2015-02-04 Thread Adam Gold
I'm trying to set up an unprivileged container with user lxcd using a zfs filesystem (equivalent of btrfs sub volume) for each container. I'm aware that for unprivilged container creation, zfs has to be manually created. My zfs file system is: zfs (the pool) zfs/lxc zfs/lxc/containers The

Re: [lxc-users] unprivileged container with zfs backing

2015-02-04 Thread Fajar A. Nugraha
On Wed, Feb 4, 2015 at 6:01 PM, Fajar A. Nugraha l...@fajar.net wrote: On Wed, Feb 4, 2015 at 5:46 PM, Adam Gold a...@gmx.com wrote: If so, what's the best way to manually create a template in unprivileged mode to ensure all the subuids and subgids are assigned correctly. Create it

Re: [lxc-users] unprivileged container with zfs backing

2015-02-04 Thread Fajar A. Nugraha
On Wed, Feb 4, 2015 at 4:58 PM, Adam Gold a...@gmx.com wrote: In summary, I would like each unprivileged container to run on top of a new zfs filesystem which I create as root and assign relevant ownership to. Is this possible? should be possible, BUT not with lxc-create. The easiest method

Re: [lxc-users] unprivileged container with zfs backing

2015-02-04 Thread Adam Gold
On 04/02/2015 10:10, Fajar A. Nugraha wrote: On Wed, Feb 4, 2015 at 4:58 PM, Adam Gold a...@gmx.com mailto:a...@gmx.com wrote: In summary, I would like each unprivileged container to run on top of a new zfs filesystem which I create as root and assign relevant ownership to. Is

Re: [lxc-users] [Marketing Mail] Re: unprivileged container with zfs backing

2015-02-04 Thread Jäkel , Guido
Dear Adam, From: lxc-users [mailto:lxc-users-boun...@lists.linuxcontainers.org] On Behalf Of Adam Gold I've only ever created containers using lxc-create. Are you saying that I should manually create a template container at the root of a particular zfs filesystem (e.g. zfs/lxc/containers/c1)

Re: [lxc-users] unprivileged container with zfs backing

2015-02-04 Thread Fajar A. Nugraha
On Wed, Feb 4, 2015 at 5:46 PM, Adam Gold a...@gmx.com wrote: On 04/02/2015 10:10, Fajar A. Nugraha wrote: On Wed, Feb 4, 2015 at 4:58 PM, Adam Gold a...@gmx.com mailto:a...@gmx.com wrote: In summary, I would like each unprivileged container to run on top of a new zfs