Difference between revisions of "Linux Containers"

From Bobs Projects
Jump to: navigation, search
(External links)
 
(4 intermediate revisions by one user not shown)
Line 12: Line 12:
  
 
to /etc/apparmor.d/lxc/lxc-default
 
to /etc/apparmor.d/lxc/lxc-default
 +
 +
== Converting disk image to LXC ==
 +
Some tips on converting a raw bootable disk image to a linux container
 +
* remove all disk mounts from /etc/fstab (but need to keep even just a comment in /etc/fstab)
 +
* for SSH to work, make sure that /dev/urandom exists (mknod dev/urandom c 1 9)
  
 
== See also ==
 
== See also ==
 
* [[Chopchop]]
 
* [[Chopchop]]
 
* [[Gnosia]]
 
* [[Gnosia]]
 +
* [[Bobs LXC Build V3]]
  
 
== External links ==
 
== External links ==
Line 30: Line 36:
 
* [https://wiki.ubuntu.com/LxcSecurity LxcSecurity] at ubunut.com
 
* [https://wiki.ubuntu.com/LxcSecurity LxcSecurity] at ubunut.com
 
* [http://wiki.gentoo.org/wiki/Lxc#lxc-console LXC] at gentoo.org
 
* [http://wiki.gentoo.org/wiki/Lxc#lxc-console LXC] at gentoo.org
 +
* [https://www.howtoforge.com/tutorial/how-to-setup-virtual-containers-with-lxc-and-quota/ How to setup virtual containers with LXC and quota support on Debian 8]
 +
* [http://domino.research.ibm.com/library/cyberdig.nsf/papers/0929052195DD819C85257D2300681E7B/$File/rc25482.pdf An Updated Performance Comparison of Virtual Machines and Linux Containers] from IBM Research (2014)

Latest revision as of 11:10, 14 September 2017

Linux Containers (LXC) is a form of OS-level virtualisation now native to the Linux kernel.

Contents

Ubuntu

LXC in Ubuntu makes use of AppArmor to restrict container access to host services.

Enabling NFS mounts

(see How to enable bind mount inside lxc container)

Basically, add:

 mount options=(rw, bind, ro),

to /etc/apparmor.d/lxc/lxc-default

Converting disk image to LXC

Some tips on converting a raw bootable disk image to a linux container

  • remove all disk mounts from /etc/fstab (but need to keep even just a comment in /etc/fstab)
  • for SSH to work, make sure that /dev/urandom exists (mknod dev/urandom c 1 9)

See also

External links