Home / user-156542

HRJ's questions

Martin Hope
HRJ
Asked: 2014-08-21 05:30:47 +0800 CST
  • 0

I have successfully created unprivileged lxc containers for one user on a system. All of those containers use the default lxcbr0 bridge.

Now I want to allow other users on the system to create unprivileged lxc containers.

How do I create more bridges, one for each of the users? And is it a good idea to do this?

One reason for separate bridges is: keeping the ip-address range separate, so that one user can't hijack the ip addresses allocated to another user's lxc.

bridge
Martin Hope
HRJ
Asked: 2014-08-20 21:01:55 +0800 CST
  • 5

My host filesystem is ext4 mounted with the noatime flag. But inside an lxc-container, the flag is absent.

Here's the output of mount on the host: /dev/sdb1 on /home type ext4 (rw,noatime)

And here's the output of mount in the container: /dev/sdb1 on / type ext4 (rw)

I now have two questions:

1. Does it make a difference if noatime is set in the container?

My guess is yes.

2. What is the best way to set noatime for the container?

Ideally, I would like to configure such a way, that it honors the host's file system flags always.

Update The /proc/mounts shows slightly different entries:

rootfs / rootfs rw 0 0
/dev/sdb1 /home ext4 rw,noatime 0 0
virtualization
Martin Hope
HRJ
Asked: 2014-08-16 06:17:58 +0800 CST
  • 12

On Ubuntu 14.04, I have created an unprivileged container that I can manually start and stop.

But I would like this to start and stop along with the system.

I have added the following to the container's configuration: lxc.start.auto = 1 lxc.start.delay = 5

However, the system scripts don't seem to pick unprivileged containers.

There is a thread related to this on linuxcontainers.org, but the solution seems to be restricted to root user.

Is there a clean way to do this for a non-root user (with root user's consent)?

lxc