Re: [lxc-users] No Redhat template

2014-02-20 Thread Fajar A. Nugraha
On Thu, Feb 20, 2014 at 3:25 PM, Daniel Veillard veill...@redhat.comwrote: On Wed, Feb 19, 2014 at 12:01:24AM +, Jon Brinkmann wrote: I'm not familiar with Oracle's policies, but I found differences between their lxc instructions and Centos'. I'll work on a SL template, which uses the

Re: [lxc-users] Best practice for sharing folder between lxc-guests?

2014-02-27 Thread Fajar A. Nugraha
On Thu, Feb 27, 2014 at 5:14 PM, Andreas Laut andreas.l...@spark5.de wrote: Is the mount bind really working on first guest? In ubuntu lxc version your config entry wont work. lxc-start needs the whole path to the directory from host sight of view. That's not true. At least, not in newer

Re: [lxc-users] Will LXC 1.0 end up in backports repo?

2014-03-01 Thread Fajar A. Nugraha
On Sat, Mar 1, 2014 at 8:07 PM, Jeremiah Snapp jeremiah.sn...@gmail.comwrote: Hi, I was wondering if/when LXC 1.0 would end up in the older backports repos. Like Ubuntu 12.04 for example. My guess is yes, considering the backport already has 1.0-alpha: http://packages.ubuntu.com/lxc

Re: [lxc-users] open files limit

2014-03-04 Thread Fajar A. Nugraha
On Mon, Mar 3, 2014 at 9:36 PM, Tamas Papp tom...@martos.bme.hu wrote: hi All, What is the status of open files thing? I see too many open files in a container, but everything works properly outside of the container but sysctl fs.file-nr shows values from the host. Have you checked ulimit

Re: [lxc-users] Fail to convert LXC container configuration into a domain XML fragment

2014-03-05 Thread Fajar A. Nugraha
On Thu, Mar 6, 2014 at 1:26 PM, Du Jun dj199...@gmail.com wrote: Hi, all, I used lxc-tools to create a linux container. I am trying to transfrom LXC container configuration into a domain XML fragment using the following command: *$ virsh -c lxc:/// domxml-from-native lxc

Re: [lxc-users] LXC with X, specifically KDE v. VM

2014-05-06 Thread Fajar A. Nugraha
On Tue, May 6, 2014 at 7:16 PM, TuxRaiderPen tuxraider...@wpascanner.comwrote: On Tuesday, May 06, 2014 04:49:06 Dirk Geschke wrote: Any views, opinions, comments in re that LXC might be better, worse, even v. a VM??? Just curious, as I probably am going the LXC route, as it gives me

Re: [lxc-users] LXC with X, specifically KDE v. VM

2014-05-06 Thread Fajar A. Nugraha
On Tue, May 6, 2014 at 8:40 PM, Michael H. Warfield m...@wittsend.comwrote: One gotcha. I haven't tried this in the last year or so but, at one point, NX was broken on Ubuntu due to dependency failures in some multimedia packages and libraries that I was never able to resolve at the time.

Re: [lxc-users] Older Ubuntu Template - Natty 11.04

2014-05-06 Thread Fajar A. Nugraha
On Wed, May 7, 2014 at 7:30 AM, TuxRaiderPen tuxraider...@wpascanner.com wrote: In looking at my option to use LXC for my email system.. I've run into a snag...which may force the issue to a full VM.. I need to get a template for 11.04 Natty Doing: r@rBox:~$ sudo lxc-create -n mailtest -t

Re: [lxc-users] Is it possible to change memory limits without restarting container?

2014-05-09 Thread Fajar A. Nugraha
On Fri, May 9, 2014 at 6:11 PM, CDR vene...@gmail.com wrote: I just tested and in fact, the memory restriction does not work. a) set a 5G limit for the container b) started the container c) gave 16 G memory to mysql D) restarted mysql it works fine and it also shows the memory on show

Re: [lxc-users] Older Ubuntu Template - Natty 11.04

2014-05-10 Thread Fajar A. Nugraha
On Sun, May 11, 2014 at 8:19 AM, TuxRaiderPen tuxraider...@wpascanner.com wrote: On Tuesday, May 06, 2014 20:47:24 Fajar A. Nugraha wrote: The root cause of the problem is not the template. You'll have the same proble installing on a VM (e.g. using CD image). See http://askubuntu.com

Re: [lxc-users] Older Ubuntu Template - Natty 11.04

2014-05-10 Thread Fajar A. Nugraha
On Sun, May 11, 2014 at 12:22 PM, Fajar A. Nugraha l...@fajar.net wrote: On Sun, May 11, 2014 at 8:19 AM, TuxRaiderPen tuxraider...@wpascanner.com wrote: On Tuesday, May 06, 2014 20:47:24 Fajar A. Nugraha wrote: The root cause of the problem is not the template. You'll have the same proble

Re: [lxc-users] Howto/Tutorial wanted: Running an application inside a container

2014-05-11 Thread Fajar A. Nugraha
On Mon, May 12, 2014 at 12:38 AM, Johannes Kastl m...@ojkastl.de wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Fajar, On 11.05.2014 07:10 Fajar A. Nugraha wrote: On Sun, May 11, 2014 at 1:18 AM, Johannes Kastl m...@ojkastl.de wrote: https://www.stgraber.org/2014/02/09/lxc-1-0

Re: [lxc-users] Question about Ubuntu Server

2014-05-11 Thread Fajar A. Nugraha
On Mon, May 12, 2014 at 7:04 AM, CDR vene...@gmail.com wrote: I just tried and they cannot. In other distributions, there a file under /etc/X11/ where you need to add AllowRemoteRoot=true But I cannot find it in Ubuntu. Has anybody ever used virt-manager from a vnc-client I am sure there is

Re: [lxc-users] Older Ubuntu Template - Natty 11.04

2014-05-12 Thread Fajar A. Nugraha
On Mon, May 12, 2014 at 3:34 PM, TuxRaiderPen tuxraider...@wpascanner.com wrote: On Sunday, May 11, 2014 01:57:29 Fajar A. Nugraha wrote: Scratch that. The current template should work without any changes if you specify --mirror. # lxc-create -n natty-test -t ubuntu -- -r natty --mirror

Re: [lxc-users] Hotplug new network interfaces not working

2014-05-13 Thread Fajar A. Nugraha
On Wed, May 14, 2014 at 5:13 AM, CDR vene...@gmail.com wrote: Dear Mike You are right, I only see one line. ls rootfs/etc/systemd/system/getty.target.wants -l total 0 lrwxrwxrwx 1 root root 38 Apr 30 11:16 getty@tty1.service - /usr/lib/systemd/system/getty@.service You wouldn't have the

Re: [lxc-users] Howto/Tutorial wanted: Running an application inside a container

2014-05-14 Thread Fajar A. Nugraha
On Wed, May 14, 2014 at 1:59 PM, Johannes Kastl m...@ojkastl.de wrote: Just one thing, you overlayed the hosts / with another directory (/opt/container/data), On further consideration, it might be better to set it as /var/lib/lxc/host/rootfs as the overlay mountpoint (to make it consistent

Re: [lxc-users] Ubuntu (maverick) container hangs at init

2014-05-15 Thread Fajar A. Nugraha
On Thu, May 15, 2014 at 2:56 PM, Stephen Zhang zsrk...@gmail.com wrote: Hi all, I installed a ubuntu maverick (really an old release, but I have to use it) using the following command: lxc-creat -t ubuntu -n ubuntu -f config -- -r maverick the official repository is invalid now,

Re: [lxc-users] Older Ubuntu Template - Natty 11.04

2014-05-15 Thread Fajar A. Nugraha
On Thu, May 15, 2014 at 4:25 PM, TuxRaiderPen tuxraider...@wpascanner.comwrote: On Sunday, May 11, 2014 01:57:29 Fajar A. Nugraha wrote: Scratch that. The current template should work without any changes if you specify --mirror. # lxc-create -n natty-test -t ubuntu -- -r natty --mirror

Re: [lxc-users] Older Ubuntu Template - Natty 11.04

2014-05-15 Thread Fajar A. Nugraha
On Thu, May 15, 2014 at 4:29 PM, TuxRaiderPen tuxraider...@wpascanner.comwrote: On Monday, May 12, 2014 06:59:48 Fajar A. Nugraha wrote: It's a way to make creating containers easier. That part I get... I am just not wrapping my head around the creation and especially the use

Re: [lxc-users] Ubuntu (maverick) container hangs at init

2014-05-15 Thread Fajar A. Nugraha
On Thu, May 15, 2014 at 3:51 PM, Stephen Zhang zsrk...@gmail.com wrote: I corrected the line in fstab none /lxc/rootfs.ubuntu/dev/pts devpts defaults 0 0 to right path, failed. I comment the line above, failed. I change the whole fstab using

Re: [lxc-users] Fedora container thinks it is not running

2014-05-15 Thread Fajar A. Nugraha
On Thu, May 15, 2014 at 9:06 PM, Michael H. Warfield m...@wittsend.comwrote: On Thu, 2014-05-15 at 04:40 -0400, CDR wrote: The container is started, because I am inside it via ssh but I cannot use its console lxc-console -n msterfe msterfe is not running I am uploading the

Re: [lxc-users] Ubuntu (maverick) container hangs at init

2014-05-15 Thread Fajar A. Nugraha
On Fri, May 16, 2014 at 1:24 AM, Fajar A. Nugraha l...@fajar.net wrote: Works for me. Did you do it like I did? root@trusty:~# status tty1 tty1 start/running, process 443 root@trusty:~# status cron cron start/running, process 407 root@trusty:~# status cron root@trusty:~# runlevel N 2

Re: [lxc-users] We need a lxc-top utility

2014-05-20 Thread Fajar A. Nugraha
On Wed, May 21, 2014 at 7:07 AM, CDR vene...@gmail.com wrote: Dear Friends I have 20+ containers with the same programs running. All of them are cpu-intensive. But one of them is eating way more CPU than the average. With top I have no idea which container owns that program. Perhaps we need a

Re: [lxc-users] venet like networking in LXC possible ?

2014-05-21 Thread Fajar A. Nugraha
On Wed, May 21, 2014 at 9:19 PM, Marc MAURICE marc.maur...@objectif-libre.com wrote: I finally made it work with veth mode, and a bridge on the host, but it's frustrating. And I have to manually generate and allow all mac adresses (required by my server hoster). I'd just comment on this

Re: [lxc-users] venet like networking in LXC possible ?

2014-05-21 Thread Fajar A. Nugraha
On Wed, May 21, 2014 at 10:34 PM, Marc MAURICE marc.maur...@objectif-libre.com wrote: Thanks a lot. I tried the config and it's *almost* working. When pinging the output from the container : packets are going out with the good MAC. However, nothing in return. From tcpdumps I figured out

Re: [lxc-users] Fedory 20 LXC fails to start on Ubuntu 14.04 host?

2014-05-26 Thread Fajar A. Nugraha
On Mon, May 26, 2014 at 2:03 PM, Timotheus Pokorra timoth...@pokorra.dewrote: Hello Federico, that is strange. I tried now on my old Laptop which runs Ubuntu 14.04, and got the same error: 30systemd[1]: Listening on /dev/initctl Compatibility Named Pipe. 30systemd[1]: Starting Root Slice.

Re: [lxc-users] Fedora container thinks it is not running

2014-05-27 Thread Fajar A. Nugraha
On Mon, May 26, 2014 at 10:22 PM, Michael H. Warfield m...@wittsend.com wrote: Serge, On Thu, 2014-05-15 at 15:31 +, Serge Hallyn wrote: Quoting Michael H. Warfield (m...@wittsend.com): On Thu, 2014-05-15 at 22:04 +0700, Fajar A. Nugraha wrote: [SNIP] With the unconfied apparmor

Re: [lxc-users] Fedora container thinks it is not running

2014-05-27 Thread Fajar A. Nugraha
On Tue, May 27, 2014 at 2:20 PM, Fajar A. Nugraha l...@fajar.net wrote: On Mon, May 26, 2014 at 10:22 PM, Michael H. Warfield m...@wittsend.com wrote: Serge, On Thu, 2014-05-15 at 15:31 +, Serge Hallyn wrote: Quoting Michael H. Warfield (m...@wittsend.com): On Thu, 2014-05-15 at 22:04

[lxc-users] apparmor profile for systemd containers (WAS: Fedora container thinks it is not running)

2014-05-27 Thread Fajar A. Nugraha
(changed subject to match content) On Tue, May 27, 2014 at 11:10 PM, Michael H. Warfield m...@wittsend.com wrote: On Tue, 2014-05-27 at 15:33 +0700, Fajar A. Nugraha wrote: On further test, this seems enough ### # cat lxc-default-with-systemd profile lxc-container-default-with-systemd

Re: [lxc-users] LXC 1.0.0 - lxc-start: command get_cgroup failed to receive response

2014-05-27 Thread Fajar A. Nugraha
On Wed, May 28, 2014 at 12:28 AM, Phiho Hoang hohoang...@gmail.com wrote: The easiest way to build from git reliably is to grab the debian/ tree from the lxc package Where can I grab this debian/ tree ? https://github.com/lxc/lxc has 3 branches: 'master', 'stable-0.74' and 'stable-1.0'

Re: [lxc-users] apparmor profile for systemd containers (WAS: Fedora container thinks it is not running)

2014-05-28 Thread Fajar A. Nugraha
On Thu, May 29, 2014 at 5:08 AM, Serge Hallyn serge.hal...@ubuntu.comwrote: Quoting Fajar A. Nugraha (l...@fajar.net): (changed subject to match content) On Tue, May 27, 2014 at 11:10 PM, Michael H. Warfield m...@wittsend.com wrote: On Tue, 2014-05-27 at 15:33 +0700, Fajar A. Nugraha

Re: [lxc-users] apparmor profile for systemd containers (WAS: Fedora container thinks it is not running)

2014-05-28 Thread Fajar A. Nugraha
On Thu, May 29, 2014 at 10:58 AM, Serge Hallyn serge.hal...@ubuntu.comwrote: Quoting Fajar A. Nugraha (l...@fajar.net): On Thu, May 29, 2014 at 5:08 AM, Serge Hallyn serge.hal...@ubuntu.com wrote: would systemd be happy with it being mounted by lxc using an lxc.mount.entry? I think

Re: [lxc-users] About creating a BTRFS file instead of a BTRFS partition

2014-06-04 Thread Fajar A. Nugraha
On Wed, Jun 4, 2014 at 5:49 PM, Marcel Sánchez Toledano marcelsanch...@gmail.com wrote: Hi all again, Recently I've been asked if it's possible to store LXC containers in a BTRFS filesystem. I know it is possible to do this creating a partition in BTRFS and setting the path in that

Re: [lxc-users] About creating a BTRFS file instead of a BTRFS partition

2014-06-04 Thread Fajar A. Nugraha
On Wed, Jun 4, 2014 at 6:04 PM, Marcel Sánchez Toledano marcelsanch...@gmail.com wrote: Partially yes. Thanks for that. Maybe is a bit offtopic, but.. Do you know any manual or website where I can found information about creating a image file with BRTFS? have you ever created an image file

Re: [lxc-users] Executing a command inside a running container? (ng)

2014-06-09 Thread Fajar A. Nugraha
On Mon, Jun 9, 2014 at 8:47 PM, frodox fro...@zoho.com wrote: yup, lxc-attach starts a process inside a running container. But it can starts only processes/programs that already exists (installed) inside a container. May be I misunderstand Dominik Schulz, Reading at the archive, Dominik

Re: [lxc-users] apparmor profile for systemd containers (WAS: Fedora container thinks it is not running)

2014-06-19 Thread Fajar A. Nugraha
On Thu, Jun 19, 2014 at 9:01 PM, Michael H. Warfield m...@wittsend.com wrote: All concerned participants: Was there any further update on this problem? I'd like to know if we (I) should be updating the templates for either this aa_profile thing or for the mount sets. IIRC Christian was

Re: [lxc-users] Setting a limit on the disk size that a container can use

2014-06-27 Thread Fajar A. Nugraha
On second thought, DON'T use scst/LIO in loopback configuration. Or any other inititator-target configuration in the same host where both initiator and target are in-kernel (this includes nfs). Using these kind of setup can lead to memory allocation deadlock. It should be fine for

Re: [lxc-users] lxc 1.0.4 on ubuntu 14.04 fails starting fedora 20 container

2014-07-01 Thread Fajar A. Nugraha
On Tue, Jul 1, 2014 at 8:14 PM, Flo florian.engelm...@gmail.com wrote: Hi, I created a Fedora 20 Container on a Ubuntu 14.04 (64bit) host like this: lxc-create -t fedora -n f20test -- --release 20 what worked (-B lvm still does not work!) but starting this container fails without any

Re: [lxc-users] lxc-create for ubuntu container fails in Fedora 20

2014-07-01 Thread Fajar A. Nugraha
On Wed, Jul 2, 2014 at 11:37 AM, Ajith Adapa ajith.ad...@gmail.com wrote: Hi, I am trying to create a ubuntu container in Fedora 20 host and it fails as shown below # lxc-create -t ubuntu -n ubuntutest E: Failed getting release file https://mirrors.kernel.org/debian/dists/precise/Release

Re: [lxc-users] lxc-create for ubuntu container fails in Fedora 20

2014-07-02 Thread Fajar A. Nugraha
from. -- Fajar -- Regards, Ajith On Wed, Jul 2, 2014 at 11:12 AM, Fajar A. Nugraha l...@fajar.net wrote: On Wed, Jul 2, 2014 at 11:37 AM, Ajith Adapa ajith.ad...@gmail.com wrote: Hi, I am trying to create a ubuntu container in Fedora 20 host and it fails as shown below # lxc-create -t

Re: [lxc-users] lxc-create for ubuntu container fails in Fedora 20

2014-07-02 Thread Fajar A. Nugraha
You should probably file it under debootstrap instead of lxc. On ubuntu 14.04 (debootstrap 1.0.59ubuntu0.1), all ubuntu releases (e.g. precise) script under /usr/share/debootsrap is a symlink to gutsy, which has this case $ARCH in amd64|i386) default_mirror

Re: [lxc-users] Linux containers network bandwidth

2014-07-04 Thread Fajar A. Nugraha
On Fri, Jul 4, 2014 at 5:05 PM, Divya Vyas dv...@mvista.com wrote: Hi All, I am running multiple containers and I want to limit the network bandwidth. But I am not getting the desired output. Here is my method: 1) echo 0x1001 /sys/fs/cgroup/lxc/containerA/net_cls.classid 2) tc qdisc

Re: [lxc-users] Service fails to start due PID checking

2014-07-09 Thread Fajar A. Nugraha
On Thu, Jul 10, 2014 at 5:35 AM, Jimmy Thrasibule jimmy.thrasib...@gmail.com wrote: Hi, I'm using LXC to run multiple Debian instances. For virtualization, we would call that host an hypervisor. no, hypervisor is a different kind of virtualization. we simply call it host So I'm running

Re: [lxc-users] about: Service fails to start due PID checking

2014-07-10 Thread Fajar A. Nugraha
On Thu, Jul 10, 2014 at 4:39 PM, Jimmy Thrasibule jimmy.thrasib...@gmail.com wrote: Hi Guido, that's just a bad-styled init script because the assumption of one PID will fail in every context like Container virtualization Or, iff you even like to run two instances of such an program (using

Re: [lxc-users] The dark side of LXC

2014-07-13 Thread Fajar A. Nugraha
Distros often change things to make it more suitable with their environment, or to fix bugs faster than upstream. For example, Ubuntu's version of mysql uses only upstart, which only tracks the pid of the msyqld process it started. I've also looked at Mariadb's[1] startup script, and it should

Re: [lxc-users] The dark side of LXC

2014-07-14 Thread Fajar A. Nugraha
to MariaDB 10.0.1. It works fine. On Sun, Jul 13, 2014 at 10:30 PM, Fajar A. Nugraha l...@fajar.net wrote: Distros often change things to make it more suitable with their environment, or to fix bugs faster than upstream. For example, Ubuntu's version of mysql uses only upstart, which only

Re: [lxc-users] Question unrelated

2014-07-14 Thread Fajar A. Nugraha
On Tue, Jul 15, 2014 at 11:07 AM, CDR vene...@gmail.com wrote: Dear Friends I am looking, but have not found, a 1U box, rack-mounted, that can accommodate a full-length PCI Express card. Let's see ... http://lmgtfy.com/?q=1u+pcie+full+length leads to a bunch of supermicro models, with

Re: [lxc-users] disk IO limit

2014-07-17 Thread Fajar A. Nugraha
On Thu, Jul 17, 2014 at 3:18 PM, Divya Vyas dv...@mvista.com wrote: Hi , I am using two containers on top of disk /dev/sda and I want to limit a disk IO write speed to 1 mb/sec of one of the containers. I gave this command - echo 8:0 1048576

Re: [lxc-users] disk IO limit

2014-07-17 Thread Fajar A. Nugraha
with dd? probably using oflag=sync (see man dd for details) -- Fajar On Thu, Jul 17, 2014 at 3:41 PM, Divya Vyas dv...@mvista.com wrote: Hi Fajar, Thanks for your reply . Can you please help me how can I test the assigned bandwidth? On Thu, Jul 17, 2014 at 1:54 PM, Fajar A. Nugraha l

Re: [lxc-users] Remounting cgroups and changing namespace.

2014-07-22 Thread Fajar A. Nugraha
/1335418 , last comment. It might give some ideas what's wrong. -- Fajar On 22 July 2014 11:23, Fajar A. Nugraha l...@fajar.net wrote: On Tue, Jul 22, 2014 at 12:46 PM, Medhamsh V medha...@gmail.com wrote: Hello, While working with unprivileged containers in Ubuntu-14.04 I am facing

Re: [lxc-users] Remounting cgroups and changing namespace.

2014-07-22 Thread Fajar A. Nugraha
On Tue, Jul 22, 2014 at 1:41 PM, Medhamsh V medha...@gmail.com wrote: Hello, On 22 July 2014 11:56, Fajar A. Nugraha l...@fajar.net wrote: Try increasing the log verbosity for both lxc-start and cgmanager, as in https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1335418 , last comment

Re: [lxc-users] Remounting cgroups and changing namespace.

2014-07-22 Thread Fajar A. Nugraha
without rebooting. Ah. You could've mentioned it from the start :) This is from the list archive: http://permalink.gmane.org/gmane.linux.kernel.containers.lxc.general/7343 My guess is you simply need to logout and login to get PAM to do its thing. -- Fajar On 22 July 2014 12:19, Fajar A. Nugraha

Re: [lxc-users] lxc and PREROUTING conflict

2014-08-05 Thread Fajar A. Nugraha
On Tue, Aug 5, 2014 at 5:07 PM, Jeroen Ooms jeroen.o...@stat.ucla.edu wrote: I have a little bare-metal ubuntu 14.04 server at home running a web service. The http(s) daemon runs on port 8006 and 8007, and iptables is used to redirect incoming requests. Have been using this setup forever,

Re: [lxc-users] Networking in Ubuntu with 2 ip failover in LXC

2014-08-13 Thread Fajar A. Nugraha
On Wed, Aug 13, 2014 at 10:08 PM, m.byryn1u m.bry...@gmail.com wrote: W dniu 2014-08-13 16:57, Fajar A. Nugraha pisze: On Wed, Aug 13, 2014 at 7:34 PM, Tamas Papp tom...@martos.bme.hu wrote: Resending.. On 08/13/2014 02:27 PM, Tamas Papp wrote: host machine: auto br0 iface br0 inet

Re: [lxc-users] How to bring up a container from rootfs tarball

2014-08-18 Thread Fajar A. Nugraha
From man lxc.container.conf lxc.rootfs specify the root file system for the container. It can be an image file, a directory or a block device. If not specified, the container shares its root file system with the host. Is that what you want? A quick howto on how to create your own

Re: [lxc-users] Run GUI program using lxc-execute

2014-08-30 Thread Fajar A. Nugraha
On Saturday, August 30, 2014, Sun Keqin ke...@nfs.iscas.ac.cn wrote: Hi all, How to run a GUI program (eg. firefox) with lxc-execute? https://www.stgraber.org/2014/02/09/lxc-1-0-gui-in-containers/ -- Fajar ___ lxc-users mailing list

Re: [lxc-users] Run GUI program using lxc-execute

2014-08-31 Thread Fajar A. Nugraha
javascript:_e(%7B%7D,'cvml','m...@wittsend.com'); wrote: On Sat, 2014-08-30 at 21:32 +0700, Fajar A. Nugraha wrote: On Saturday, August 30, 2014, Sun Keqin ke...@nfs.iscas.ac.cn javascript:_e(%7B%7D,'cvml','ke...@nfs.iscas.ac.cn'); wrote: Hi all, How to run a GUI program (eg

Re: [lxc-users] No outgoing traffic with bridged network and public IP address from container

2014-09-11 Thread Fajar A. Nugraha
On Thu, Sep 11, 2014 at 4:05 PM, othiman othi...@gmx.de wrote: Hi everyone, I already posted this to askubuntu.com (http://askubuntu.com/ questions/522457/lxc-container-no-outgoing-traffic- with-bridged-network-and-public-ip-address), but I think this might be a better place to find help.

Re: [lxc-users] No outgoing traffic with bridged network and public IP address from container

2014-09-11 Thread Fajar A. Nugraha
Depends on how your provider set it up. If it WERE intended to work that way, they would've given you full instructions (e.g. use this IP, this netmask, and this gateway) instead of just giving the IP (and probably say add this as a secondary IP on your server). The fact that you say it works

Re: [lxc-users] macvlan networking

2014-09-14 Thread Fajar A. Nugraha
On Mon, Sep 15, 2014 at 7:58 AM, Adam Gold a...@gmx.com wrote: Hello. I'm just starting to learn about containers so apologies for the basic question (I couldn't find an exact answer from my non-exhaustive review of the archives). I'm trying to create a private container network using

Re: [lxc-users] macvlan networking

2014-09-15 Thread Fajar A. Nugraha
On Mon, Sep 15, 2014 at 4:19 PM, Adam Gold a...@gmx.com wrote: The official networking guide for lxc on Ubuntu : https://help.ubuntu.com/14.04/serverguide/lxc.html#lxc-network At first glance your config looks correct, but the most obvious possible source of problem would be -i eth0. You said

Re: [lxc-users] Comparison of used resources between LxC and UML

2014-09-18 Thread Fajar A. Nugraha
On Thu, Sep 18, 2014 at 5:30 PM, Marcel Sánchez Toledano marcelsanch...@gmail.com wrote: Hi, I'm need to make some kind of comparison between the resources (CPU, RAM,...) used when executing 1 LxC container and the resources used when executing 1 SIMCTL (VNUML utility, UML) Virtual Machine.

Re: [lxc-users] Compile fails under Fedora

2014-09-21 Thread Fajar A. Nugraha
For critical line-of-business normally you wouldn't use git snapshot. Unless you're a developer (which you already mentioned you're not). I'd sugest you either: - use whatever released version already packaged, or - learn how to fix it manually, or hire someone to do so (which should be very

Re: [lxc-users] Network configuration for multiple IP adresses

2014-11-11 Thread Fajar A. Nugraha
On Tue, Nov 11, 2014 at 4:02 PM, Moritz Kobel mailingli...@kobelnet.ch wrote: Hello, I would like to configure several IPv4 and IPv6 adresses for one container. This works basically with the configuration below. But it configures only one network interface (eth0) with all addresses. (One

Re: [lxc-users] Unix Sockets communications between containers

2014-11-11 Thread Fajar A. Nugraha
On Wed, Nov 12, 2014 at 9:27 AM, CDR vene...@gmail.com wrote: That is how we do business now, over TCP. By the way, I downloaded a new derivative of Mysql, http://paralleluniverse-inc.com/, and it seems, in my tests, several times faster than any other version, at least for this query

Re: [lxc-users] processes escaped from memory cgroup in container, but CPU group is OK

2014-11-21 Thread Fajar A. Nugraha
On Fri, Nov 21, 2014 at 2:45 PM, Michael R. Hines mrhi...@linux.vnet.ibm.com wrote: Hi All, I am using LXC 1.0.5, and I have container running Redhat 7.0 on a Power7 processor. My host kernel version is 3.10.42. The cgroup for this container located at /cgroup/cpu works very well - I can

Re: [lxc-users] Security question: root w/ subuids vs. unprivileged.

2014-11-27 Thread Fajar A. Nugraha
On Fri, Nov 28, 2014 at 12:08 AM, Raimund Berger raimund.ber...@gmail.com wrote: I'm asking since, as root, I'm guessing it might be easier to map select devices - like OSS audio - into a container, even when mapping uids too, which seems to be pretty much impossible to do with unprivileged

Re: [lxc-users] writeback cache for all container processes?

2015-02-02 Thread Fajar A. Nugraha
On Mon, Feb 2, 2015 at 7:23 PM, Tomasz Chmielewski man...@wpkg.org wrote: On 2015-02-02 21:13, Fajar A. Nugraha wrote: You do know that lxc share the same kernel instance as the host OS, making such settings not applicable? Why not? Perhaps I wasn't very specific when starting the thread

Re: [lxc-users] writeback cache for all container processes?

2015-02-02 Thread Fajar A. Nugraha
On Mon, Feb 2, 2015 at 7:45 PM, Tomasz Chmielewski man...@wpkg.org wrote: On 2015-02-02 21:37, Fajar A. Nugraha wrote: It's certainly possible to do not applicable kinds of things with processes and their page cache, i.e.: https://code.google.com/p/pagecache-mangagement/ [1] Or here

Re: [lxc-users] writeback cache for all container processes?

2015-02-02 Thread Fajar A. Nugraha
You do know that lxc share the same kernel instance as the host OS, making such settings not applicable? -- Fajar On Mon, Feb 2, 2015 at 6:59 PM, Tomasz Chmielewski man...@wpkg.org wrote: Is it possible to start a lxc container with writeback cache, in a way similar to KVM's writeback cache?

Re: [lxc-users] LXC 1.1 on Ubuntu 14.04

2015-02-03 Thread Fajar A. Nugraha
On Sun, Feb 1, 2015 at 12:00 PM, Daniel Miranda danielk...@gmail.com wrote: Hello, I've recently seen the announcement of the 1.1 release, and I'd like to test it out on my 14.04 systems, so I can validate it to use in production (nothing life or money critical, just my college lab). I

Re: [lxc-users] unprivileged container with zfs backing

2015-02-04 Thread Fajar A. Nugraha
On Wed, Feb 4, 2015 at 6:01 PM, Fajar A. Nugraha l...@fajar.net wrote: On Wed, Feb 4, 2015 at 5:46 PM, Adam Gold a...@gmx.com wrote: If so, what's the best way to manually create a template in unprivileged mode to ensure all the subuids and subgids are assigned correctly. Create

Re: [lxc-users] unprivileged container with zfs backing

2015-02-04 Thread Fajar A. Nugraha
On Wed, Feb 4, 2015 at 4:58 PM, Adam Gold a...@gmx.com wrote: In summary, I would like each unprivileged container to run on top of a new zfs filesystem which I create as root and assign relevant ownership to. Is this possible? should be possible, BUT not with lxc-create. The easiest method

Re: [lxc-users] unprivileged container with zfs backing

2015-02-04 Thread Fajar A. Nugraha
On Wed, Feb 4, 2015 at 5:46 PM, Adam Gold a...@gmx.com wrote: On 04/02/2015 10:10, Fajar A. Nugraha wrote: On Wed, Feb 4, 2015 at 4:58 PM, Adam Gold a...@gmx.com mailto:a...@gmx.com wrote: In summary, I would like each unprivileged container to run on top of a new zfs

Re: [lxc-users] TTY Question

2015-02-06 Thread Fajar A. Nugraha
On Fri, Feb 6, 2015 at 1:19 AM, CDR vene...@gmail.com wrote: I need to use TYY=9 in a container, how do I achieve that? You could probably start by NOT using big fonts in html mail when posting to the list. That being said, what do you mean tyy=9? did you mean tty? If yes, try man

Re: [lxc-users] TTY Question

2015-02-06 Thread Fajar A. Nugraha
On Fri, Feb 6, 2015 at 6:05 AM, CDR vene...@gmail.com wrote: a) Sorry about the fonts You're still replying using the same fonts. I find this really annoying, so this will be my last response to you. Hopefully others are willing to help. b) All my containers are unconfined c) My app does

Re: [lxc-users] lxc-console not working on centos 7 container

2015-02-06 Thread Fajar A. Nugraha
On Fri, Feb 6, 2015 at 3:25 AM, CDR vene...@gmail.com wrote: In Ubuntu 14.04 fully updated and lxc latest.1.1, a container with Centos 7 never allows connection via lxc-console. It stays as below. If you start the container with -F, you can see how it boots and indeed you can log in via the

Re: [lxc-users] lxc-console not working on centos 7 container

2015-02-06 Thread Fajar A. Nugraha
On Fri, Feb 6, 2015 at 8:15 PM, CDR vene...@gmail.com wrote: Thanks for the response. I disable selinux and a apparmor routinely. My containers are just a way to separate applications, there are no users accessing them, nothing bad can happen. So basically you are saying that there is no way

Re: [lxc-users] centos guest

2015-02-08 Thread Fajar A. Nugraha
On Mon, Feb 9, 2015 at 12:06 AM, mattias m...@mjw.se wrote: I run centos on my server If I do Lxc-create –name test –t cetos It will install same centos as on my server I understand I can use –r but how? Let’s say I will install centos 5? lxc-create ... -- -r 5 Note the --. Anything

Re: [lxc-users] xserver inside lxc

2015-01-16 Thread Fajar A. Nugraha
On Fri, Jan 16, 2015 at 6:07 PM, Alex Mestiashvili a...@biotec.tu-dresden.de wrote: Hi All, trying to start the xorg server in the container I receive the following messages: [ 61645.425] (II) NVIDIA dlloader X Driver 340.65 Tue Dec 2 08:47:36 PST 2014 What are you trying to achieve?

Re: [lxc-users] Fun with lxc.network.type=phys

2015-01-21 Thread Fajar A. Nugraha
On Wed, Jan 21, 2015 at 3:31 PM, ScrumpyJack scrumpyj...@me.com wrote: On Mon, 19 Jan 2015, ScrumpyJack wrote: I'd like to connect a physical interface from a host to a LXC container guest like so: lxc.network.type=phys And then assign a routable IP/32 address to the LXC container

Re: [lxc-users] Fun with lxc.network.type=phys

2015-01-21 Thread Fajar A. Nugraha
On Wed, Jan 21, 2015 at 7:09 PM, scrumpyjack scrumpyj...@me.com wrote: Yes, i want to give a /32 to a container. If i stick to lxc.network.type = macvlan lxc.network.flags = up lxc.network.link = eth0 lxc.network.name = eth1 lxc.network.ipv4 = 21.45.463.23/32 (fake IP, obvs)

Re: [lxc-users] Can't Start Unprivileged Container in Ubuntu

2015-02-11 Thread Fajar A. Nugraha
On Wed, Feb 11, 2015 at 8:16 PM, jqf...@hotmail.com wrote: jimmy@jimmyscomputer:~$ lxc-start -n p1 -F lxc-start: start.c: print_top_failing_dir: 102 Permission denied - could not access /home/jimmy. Please grant it 'x' access, or add an ACL for the container root. So I should just move

Re: [lxc-users] What's the best way to get stderr from lxc-attach when running a command?

2015-02-18 Thread Fajar A. Nugraha
On Wed, Feb 18, 2015 at 3:33 PM, Dan Shi brui...@gmail.com wrote: I'm trying to run some command in container through lxc-attach. The script is in python 2.7. Apparently, command like following does not raise a subprocess exception: subprocess.check_output('lxc-attach -n c1 -- ls

Re: [lxc-users] lxc-console not working on centos 7 container

2015-02-12 Thread Fajar A. Nugraha
On Thu, Feb 12, 2015 at 5:20 PM, Fajar A. Nugraha l...@fajar.net wrote: OK. So first of all, the steps that I posted above are NOT, in any way, official or supported by lxc. However it works for me. Upon further tests, it seems I missed something. Sorry for the mix up. I actually tried two

Re: [lxc-users] lxc-console not working on centos 7 container

2015-02-11 Thread Fajar A. Nugraha
On Thu, Feb 12, 2015 at 2:41 PM, CDR vene...@gmail.com wrote: I cannot make this solution work. There are a lot of errors. ... which are ...? a copy-paste of the output lxc-start -F -n will help, as well as your final container config. Also, I have cgroupfs-mount installed, so that I have

Re: [lxc-users] lxc-console not working on centos 7 container

2015-02-12 Thread Fajar A. Nugraha
OK. So first of all, the steps that I posted above are NOT, in any way, official or supported by lxc. However it works for me. On Thu, Feb 12, 2015 at 3:23 PM, CDR vene...@gmail.com wrote: mount /dev/sda1 on / type ext4 (rw,errors=remount-ro) proc on /proc type proc (rw,noexec,nosuid,nodev)

Re: [lxc-users] lxc-console not working on centos 7 container

2015-02-12 Thread Fajar A. Nugraha
On Thu, Feb 12, 2015 at 5:56 PM, Fajar A. Nugraha l...@fajar.net wrote: The second scenario was with backported systemd, from f20 + ubuntu That should be with config modifications, mount hook, AND backported systemd ... -- Fajar ___ lxc-users mailing

Re: [lxc-users] lxc 1.0.6 / lvm / snapshot and clone

2015-02-12 Thread Fajar A. Nugraha
On Thu, Feb 12, 2015 at 12:26 AM, Marco foobar.an...@gmail.com wrote: Hi, I've some questions for which I couldn't find good answers online and I'd like your suggestions. OS: Linux/Debian 8 Jessie LXC: 1.0.6-6 Backing store: LVM It seems that snapshot clones cannot be done online :

Re: [lxc-users] macvlan-based networking for unprivileged containers

2015-02-17 Thread Fajar A. Nugraha
On Wed, Feb 18, 2015 at 12:27 AM, Serge Hallyn serge.hal...@ubuntu.com wrote: Quoting Fajar A. Nugraha (l...@fajar.net): # c1's veth name on host side auto v-c1-0 iface v-c1-0 inet static I'm probably just ignorant here, but - does this not cause 'ifup -a' to fail when the containers

Re: [lxc-users] Booting a Freebsd VM inside a container

2015-02-20 Thread Fajar A. Nugraha
On Fri, Feb 20, 2015 at 8:16 PM, Anjali Kulkarni anj...@juniper.net wrote: Thanks, so for networking to work, all you need to do is add the networking links to the config file in /var/lib/lxc/lxc_name and then networking should work in the VM as it would in a normal LXC. Not if by VM you mean

Re: [lxc-users] Fun with lxc.network.type=phys

2015-01-25 Thread Fajar A. Nugraha
On Wed, Jan 21, 2015 at 10:50 PM, ScrumpyJack scrumpyj...@me.com wrote: On Wed, 21 Jan 2015, Fajar A. Nugraha wrote: On Wed, Jan 21, 2015 at 7:09 PM, scrumpyjack scrumpyj...@me.com wrote: Yes, i want to give a /32 to a container. Relevant part of container's /etc/network/interfaces

Re: [lxc-users] loading a file system

2015-01-13 Thread Fajar A. Nugraha
You need to be more clear. More response inline On Wed, Jan 14, 2015 at 11:26 AM, Mohan G mohan...@yahoo.com wrote: Thanks for the reply, now i guess my specific question is. 1) I have my own file system which i can load to the kernel. But i want to restrict the file systems usage as a

Re: [lxc-users] loading a file system

2015-01-13 Thread Fajar A. Nugraha
, Fajar A. Nugraha l...@fajar.net wrote: You need to be more clear. More response inline On Wed, Jan 14, 2015 at 11:26 AM, Mohan G mohan...@yahoo.com wrote: Thanks for the reply, now i guess my specific question is. 1) I have my own file system which i can load to the kernel. But i want

Re: [lxc-users] LXC 1.1 has been released!

2015-02-09 Thread Fajar A. Nugraha
On Mon, Feb 9, 2015 at 5:11 PM, Dirk Geschke d...@lug-erding.de wrote: ah, maybe I should try a newer systemd than jessie, jessie is testing. But this is systemd 215-10, where unstable uses systemd 215-11. So I did not expect a difference here. But maybe I should try experimental, this is

Re: [lxc-users] lxc-console not working on centos 7 container

2015-02-11 Thread Fajar A. Nugraha
PM, CDR vene...@gmail.com wrote: Thanks. I love Ubuntu as a host for LXC. I just got addicted to systemctl and writing *.service files. It is much more sophisticated than the older way of starting and stopping applications. On Fri, Feb 6, 2015 at 8:40 AM, Fajar A. Nugraha l...@fajar.net wrote

Re: [lxc-users] Booting a Freebsd VM inside a container

2015-02-19 Thread Fajar A. Nugraha
On Fri, Feb 20, 2015 at 12:56 AM, Anjali Kulkarni anj...@juniper.net wrote: Hi, The following link mentions booting an Ubuntu VM inside a container: (https://www.stgraber.org/2012/03/04/booting-an-ubuntu-12-04-virtual-machine-in-an-lxc-container/) However I had 2 qs 1. If we do boot a VM

Re: [lxc-users] lxc-security: iptables audit with nflog not working with default settings (insecure)

2015-03-11 Thread Fajar A. Nugraha
On Wed, Mar 11, 2015 at 8:03 PM, Fiedler Roman roman.fied...@ait.ac.at wrote: But the current issue is different: The guest can snoop on the NFLOG messages generated on host and destined for the host and hence can get knowledge of ANY NFLOGed connection of host or any guest, no matter if on

Re: [lxc-users] Advice for running LXC on a Debian host

2015-03-13 Thread Fajar A. Nugraha
On Fri, Mar 13, 2015 at 8:34 PM, Rory Campbell-Lange r...@campbell-lange.net wrote: Dear LXC List I'm looking for advice on running LXC on Debian. I did quite a lot of work on trialling lxc about two years ago but then left it there because of a lack of time and some troublesome issues with

Re: [lxc-users] installation of package fails in container

2015-03-11 Thread Fajar A. Nugraha
lxc.cap.drop definition from included configs (e.g. /usr/share/lxc/config/centos.common.conf) If you know exactly which cap is needed (I'm guessing setfcap), you should be able to copy that line and only remove that particular cap. -- Fajar On Wed, Mar 11, 2015 at 6:13 AM, Fajar A. Nugraha l

  1   2   3   4   5   6   >