Re: [Lxc-users] Disable write access to /dev/rtc in templates

= sys_time I think both the write permission for /dev/rtc and the sys_time capability should be removed in the templates! Regards, Christoph - Ursprüngliche Mail - Von: Serge Hallyn serge.hal...@ubuntu.com An: Christoph Mitasch cmita...@thomas-krenn.com CC: lxc-users

[Lxc-users] Disable write access to /dev/rtc in templates

Hello, we recently discovered that a container was able to modify the hardware clock of a server. When checking the lxc configuration I found out that rwm access to /dev/rtc was granted. Unfortunately most lxc templates allow write access per default.

[Lxc-users] Ubuntu 12.04 LTSEnablementStack: missing user namespace

Hello, I'm running a Ubuntu 12.04 system with LXC system containers. Ubuntu 12.04.2 offers a 3.5 kernel through the LTSEnablementStack. https://wiki.ubuntu.com/Kernel/LTSEnablementStack This 3.5 kernel does apparently NOT support user namespaces. Is this a problem for LXC system containers on

Re: [Lxc-users] lxcbr0 versus virbr0 (Ubuntu)

Hello, I started to run LXC in production with Ubuntu 12.04 a few months ago. Without any problems so far too. See my comments to your questions inline: Reading https://help.ubuntu.com/12.04/serverguide/lxc.html it says one can use lxcbr0 or virbr0 for bridging, but without further

Re: [Lxc-users] lxc_cgroup start error

yes, I was rebooting the server each time. Christoph - Original Message - From: Serge Hallyn serge.hal...@canonical.com To: Christoph Mitasch cmita...@thomas-krenn.com Cc: lxc-users@lists.sourceforge.net Sent: Monday, August 27, 2012 3:34:40 PM Subject: Re: [Lxc-users] lxc_cgroup start

Re: [Lxc-users] lxc_cgroup start error

0.7.5-3ubuntu63~ppa1 Linux containers userspace tools Regards, Christoph - Original Message - From: Serge Hallyn serge.hal...@canonical.com To: Christoph Mitasch cmita...@thomas-krenn.com Cc: lxc-users@lists.sourceforge.net Sent: Friday, August 24, 2012 6:13:47 PM

[Lxc-users] lxc_cgroup start error

Hello, I've built a LXC HA Cluster with Pacemaker and DRBD with Ubuntu 12.04. From time to time I get the following error when a container is startet. lxc-start 1345755927.759 ERRORlxc_cgroup - File exists - failed to create '/sys/fs/cgroup/perf_event//lxc' directory lxc-start

Re: [Lxc-users] lxc_cgroup start error

Thanks for clarification. I currently have two containers and so a race condition is very probable. Can I help with testing something or is it already ready to be fixed? Christoph - Original Message - From: Serge Hallyn serge.hal...@canonical.com To: Christoph Mitasch cmita...@thomas

Re: [Lxc-users] [Pacemaker] ManageLXC Resource Agent

will further test it and contribute back. Regards, Christoph On 05/26/2011 04:04 PM, Florian Haas wrote: Hi Christoph, On 2011-05-26 15:14, Christoph Mitasch wrote: Hello, I just ported the ManageVE Resource Agent for OpenVZ to work with LXC System Containers. The result is ManageLXC, you can

[Lxc-users] ManageLXC Resource Agent

. The RA does not support migration at the moment, since the LXC Checkpoint/Restore feature is not in mainline so far. Regards, Christoph #!/bin/bash # # ManageLXC OCF RA. Manages LXC Containers (CT) # # (c) 2011 Christoph Mitasch # based on MangeVE RA 1.00.4 # 2006-2010 Matthias

Re: [Lxc-users] LXC vs ESX

Hello Ulli, thanks for the interesting numbers. What kind of networking did you use in LXC. Veth? Regards, Christoph On 05/23/2011 01:22 PM, Ulli Horlacher wrote: A small network application benchmark between LXC and VMware ESX: ESX: framstag@diaspora:~: fexsend -i unifex

Re: [Lxc-users] LXC vs ESX

Hi again, I was just thinking about another test case. The native network performance of the host system (not inside the container). Regards, Christoph On 05/23/2011 01:32 PM, Ulli Horlacher wrote: On Mon 2011-05-23 (13:26), Christoph Mitasch wrote: What kind of networking did you use

Re: [Lxc-users] Lxc-attach status update?

Hi Serge, with the patched kernel lxc-attach works fine! Thanks, Christoph On 04/28/2011 08:03 PM, Serge Hallyn wrote: Quoting Christoph Mitasch (cmita...@thomas-krenn.com): Hi Serge, great if you can create packages for Natty. Kernel is built in ppa:serge-hallyn/lxc-natty (https

Re: [Lxc-users] Cluster Resource Agent

Hi Brian, I'm using the init script supplied with Ubuntu Natty. Regards, Christoph On 04/06/2011 07:55 PM, Brian K. White wrote: On 4/6/2011 4:56 AM, Christoph Mitasch wrote: Hi, I'm wondering if anybody is using LXC in a high availability cluster. I tried to use it in a Pacemaker Cluster

[Lxc-users] Cluster Resource Agent

Hi, I'm wondering if anybody is using LXC in a high availability cluster. I tried to use it in a Pacemaker Cluster together with DRBD. In theory there would be the VirtualDomain Resource Agent supporting libvirt. But since my libvirt experience together with LXC was not promising, I think the

[Lxc-users] Bind9/named does not work with Debian Lenny

Hi, I recently tried to run the bind9 package inside a Debian Lenny container. It fails to start with the following message in /var/log/syslog: Mar 23 14:28:37 blub named[831]: couldn't open pid file '/var/run/bind/run/named.. pid': Permission denied Mar 23 14:28:37 blub named[831]: exiting (due