Questions tagged [lxc]

LXC short for (Linux Containers) LXC is an operating system-level virtualization method for running multiple isolated Linux systems (containers) on a single control host. LXC is the userspace control package for Linux Containers, a lightweight virtual system mechanism sometimes described as “chroot on steroids”.

LXC provides operating system-level virtualization not via a full blown virtual machine, but rather provides a virtual environment that has its own process and network space. LXC relies on the Linux kernel cgroups functionality that became available in version 2.6.29 and is now available in all newer kernel versions. Cgroups was developed as part of LXC. It also relies on other kinds of namespace-isolation functionality, which were developed and integrated into the mainline Linux kernel. LXC is similar to other OS-level virtualization technologies on Linux such as OpenVZ and Linux-VServer, as well as those on other operating systems such as FreeBSD jails. LXC Containers can define various cpu limits, memory limits etc. (In short all parameters that can be set via CGROUPS) to prevent any one container from interfering with all other containers running on the same LXC host. LXC uses the linux bridge-utils commands to create local VLANs, and attach containers and physical interfaces to them. With containers the physical overhead (ram, swap space, one kernel per VM, plus hypervisor) that is present in virtualization methods is reduced. With containers, one kernel and one virtual memory space is shared between all the containers running on that host. For a comparison of other Operating System virtualization techniques, see this link

99 questions
1
vote
0 answers

Is an unprivileged LXC where the host user itself is mapped to 0 less secure of one where one of its subids is mapped to 0, and why?

Instead of creating "common" LXC unprivileged containers where all the users are mapped to (unprivileged) subuid/gid of my host user, I'm considering a mapping where my host user itself will be mapped to user 0 (root). They'd be very slim single-app…
1
vote
1 answer

How to save the state of a running LXC container?

Using VirtualBox or KVM, I can save the state of the guest VM, reboot the host and then resume the guest.How can I do that if my guest is only a container and not a VM ?
Juergen
  • 578
  • 6
  • 24
1
vote
1 answer

reboot command in a Linux Container, does it just reboot the container?

I am using several remote Linux Containers that I access with SSH (PlanetLab to be specific). Sometimes they work unreliably so then I issue the command sudo reboot . What I wonder, will this restart just my container, or will it restart all…
1
vote
1 answer

LXC container: mktemp: failed to create file via template

On a fresh new container, I do: lxc-attach -n mycontainer -- apt-get install -y wget But the installation of wget fails partially with the following message ... Processing triggers for ca-certificates (20160104) ... mktemp: failed to create file…
0
votes
0 answers

How to find rootfs disk file of lxc when it's running

It's a terrible mistake, I remove the disk file of lxc. I know linux rm will not remove file when it's open by other processes. So I login ssh of that lxc, it's running, and the files in that disk is still there. That means the disk file is still at…
yhz
  • 1
  • 1