search for: lxd

Hi Patrick, thanks for the pointers. I tried today, and while it was easy to start my first container, I am not really happy with LXD, exactly for the reason St?phane gives in https://stgraber.org/2016/03/11/lxd-2-0-introduction-to-lxd-112/ "How does LXD relate to Docker/Rkt?"... what I really like about docker and docker-compose is, that it encourages to separate code from data and configuration, whereas with LXD you...

On 7/4/19 12:49 PM, Joachim Lindenberg wrote: > * I am not (yet) familiar with LXD or nspawn. Do you have any pointer on how Samba DC works with LXD? > I've only used LXD for containerizing web applications so far.

...orchestrated by a persistent > database that's very sensitive to instances leaving and joining the > domain seems the antithesis to docker's philosophy. > Docker would be a terrible choice for this; Docker is really designed to containerize a single app; for a suite of tools use LXD or nspawn. While I haven't used nspawn, I'm a huge fan of LXD, which is simple, elegant, well maintained, and UNIX-y in feel. If you're on Ubuntu or need to run an Ubuntu container, LXD is a no-brainer choice.

...libvirt-daemon-lxc and libvirt-login-shell " - http://wiki.centos.org/Manuals/ReleaseNotes/CentOS7 And LXC support from linuxcontainers.org is poor for RedHat/CentOS: "... Also Cgmanager which is currently not available on CentOS 7. So cannot support unprivileged containers and thus LXD. Systemd based containers need at least LXC 1.1, lxcfs and related dependencies that are not available on CentOS. ... For a stable, seamless and smooth experience we suggest either Debian Wheezy with Flockport packages or Ubuntu Trusty. ..." - https://www.flockport.com/lxc-and-lxd-support...

Dear all, I'm moving my first baby steps with libvirt-lxc trying to convert over from an LXD installation and one of the hurdles is putting together an image. All the examples I found about libvirt-lxc refer to running /bin/sh in a container, almost as if it was docker, as opposed to run a "full system" like I've been doing with lxd. Also virt-install, often referred in libv...

After reading the instructions at https://wiki.samba.org/index.php/Time_Synchronisation, I still have questions about how samba interacts with nptd. The issue is that LXD doesn't want containers setting the time and so won't start ntpd at container startup even though it's enabled in systemd. The host does sync it's time with a national time server, so we can assume that the host's time is good enough for my purposes. I can manually start ntpd,...

...ert & Marco. @Robert - I tried your solution, but couldn't get it to work because my host is ubuntu 16.04 and the chrony version for this is too old to support the ntpsigndsocket option. @Marco - your response got me searching in another direction. I had tried ntpd in the container, which LXD did not like. My research turned up that Ubuntu now strongly favors chrony as of 18.04 AND that chrony has been patched to work as a time_server_ (which is what I need) in containers. I've successfully installed chrony in the container and have setup chrony.conf for ntpsigndsocket (and other s...

..., but couldn't get it to work because my > > host is ubuntu 16.04 and the chrony version for this is too old to support > > the ntpsigndsocket option. > > > > @Marco - your response got me searching in another direction. I had tried > > ntpd in the container, which LXD did not like. My research turned up that > > Ubuntu now strongly favors chrony as of 18.04 AND that chrony has been > > patched to work as a time_server_ (which is what I need) in containers. > > > > I've successfully installed chrony in the container and have setup >...

...>> persistent database that's very sensitive to instances leaving and >> joining the domain seems the antithesis to docker's philosophy. >> >Docker would be a terrible choice for this; Docker is really designed to containerize a single app; for a suite of tools use LXD or nspawn. >While I haven't used nspawn, I'm a huge fan of LXD, which is simple, elegant, well maintained, and UNIX-y in feel. If you're on Ubuntu or need to run an Ubuntu container, LXD is a no-brainer choice. I am aware that Docker is criticized for deviating or extending the con...

...t - I tried your solution, but couldn't get it to work because my > host is ubuntu 16.04 and the chrony version for this is too old to support > the ntpsigndsocket option. > > @Marco - your response got me searching in another direction. I had tried > ntpd in the container, which LXD did not like. My research turned up that > Ubuntu now strongly favors chrony as of 18.04 AND that chrony has been > patched to work as a time_server_ (which is what I need) in containers. > > I've successfully installed chrony in the container and have setup > chrony.conf for ntp...

...ters [Shared] path = /home/shared read only = No acl_xattr:default acl style = windows (tried with and without - could not tell a difference) acl_xattr:ignore system acls = yes (tried with and without - could not tell a difference) Environment: Ubuntu 18.04 in an LXD privileged container on a Ubuntu 16.04 host Samba Version = 4.7.6 (what ships with Ubuntu 18.04 by default) AD DC = Samba 4.3.11 on Ubuntu 16.04 LTS inside a LXD privileged container on the same host as above. Second AD DC = Samba 4.7.6-Ubuntu on Ubuntu 18.04 inside a privileged container on same h...

https://bugzilla.netfilter.org/show_bug.cgi?id=1064 Bug ID: 1064 Summary: iptables-save fails silently in unprivileged lxc/lxd container Product: iptables Version: unspecified Hardware: x86_64 OS: All Status: NEW Severity: enhancement Priority: P5 Component: iptables-save Assignee: netfilter-buglog at list...

Hi Marco, anybody, > + must be 'privileged' container (no unprivileged ones) I have seen containers with and without calling for being privileged, but you never know without trying and testing carefully... Googling I found https://github.com/lxc/lxd/issues/3442#issuecomment-312560949 but I am not really clear about the conclusion. Does it really have to be privileged? Thanks & Best Regards, Joachim

...virt-login-shell " - > http://wiki.centos.org/Manuals/ReleaseNotes/CentOS7 > > And LXC support from linuxcontainers.org is poor for RedHat/CentOS: > > "... Also Cgmanager which is currently not available on CentOS 7. So cannot > support unprivileged containers and thus LXD. Systemd based containers need > at least LXC 1.1, lxcfs and related dependencies that are not available on > CentOS. ... For a stable, seamless and smooth experience we suggest either > Debian Wheezy with Flockport packages or Ubuntu Trusty. ..." - > https://www.flockport.com/lxc-...

...nd libvirt-login-shell " - >http://wiki.centos.org/Manuals/ReleaseNotes/CentOS7 > >And LXC support from linuxcontainers.org is poor for RedHat/CentOS: > >"... Also Cgmanager which is currently not available on CentOS 7. So >cannot support unprivileged containers and thus LXD. Systemd based >containers need at least LXC 1.1, lxcfs and related dependencies that >are not available on CentOS. ... For a stable, seamless and smooth >experience we suggest either Debian Wheezy with Flockport packages or >Ubuntu Trusty. ..." - >https://www.flockport.com/lxc-...

I have a container rootfs that I use to keep all work-related stuff. This container was originally created by lxd (which creates all containers for use with user namespacing), but now I decided to start using libvirt for container management since I already use it for virtual machines, which will spare me from dealing with multiple hypervisor technologies. I managed to create a working domain xml for the cont...

...} chain input { type filter hook input priority filter + 10; policy accept jump allow reject with icmpx type port-unreachable } } which, at a first glance, worked like expected. But then I noticed that the virtual guest machine in LXD virtualization cannot resolve DNS queries anymore. The reason: LXD itself installs a ruleset like (again, just an excerpt to show the problem) table inet lxd { chain in.lxdbr0 { type filter hook input priority filter; policy accept; iifname "lxdbr0&quo...

...- > >http://wiki.centos.org/Manuals/ReleaseNotes/CentOS7 > > > >And LXC support from linuxcontainers.org is poor for RedHat/CentOS: > > > >"... Also Cgmanager which is currently not available on CentOS 7. So > >cannot support unprivileged containers and thus LXD. Systemd based > >containers need at least LXC 1.1, lxcfs and related dependencies that > >are not available on CentOS. ... For a stable, seamless and smooth > >experience we suggest either Debian Wheezy with Flockport packages or > >Ubuntu Trusty. ..." - > >https...

On Mon, Apr 03, 2017 at 05:52:33PM +0000, Spike wrote: > Dear all, > > I'm moving my first baby steps with libvirt-lxc trying to convert over from > an LXD installation and one of the hurdles is putting together an image. > > All the examples I found about libvirt-lxc refer to running /bin/sh in a > container, almost as if it was docker, as opposed to run a "full system" > like I've been doing with lxd. Also virt-install, of...

...: unassigned-bugs at mindrot.org Reporter: andreas at canonical.com openssh portable 8.0p1-4 from debian/ubuntu Hi, sftp can't fetch files that are inside a directory with [ or ] characters. It can "cd" just fine into them, but fetching the file fails: $ sftp squid-ds216.lxd Connected to squid-ds216.lxd. sftp> ls -l drwxrwxr-x 2 ubuntu ubuntu 3 Sep 10 13:21 [pub] drwxr-xr-x 2 ubuntu ubuntu 2 Sep 5 20:40 bzr sftp> cd \[pub\] sftp> ls -l -rw-rw-r-- 1 ubuntu ubuntu 12 Sep 10 13:21 hello.txt sftp> get hello.txt File &qu...