<div dir="ltr">On Fri, Jun 15, 2012 at 5:50 PM, Fajar A. Nugraha <span dir="ltr"><<a href="mailto:list@fajar.net" target="_blank">list@fajar.net</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div class="im">On Fri, Jun 15, 2012 at 7:26 PM, John Maclean <<a href="mailto:jayeola@gmail.com">jayeola@gmail.com</a>> wrote:<br>
> Hello all,<br>
><br>
> I have built lxc from the git hub repo and have been able to create<br>
> containers using the stock templates for fedora. However, whenever I<br>
> start a container it always locks the hosts, X session.<br>
><br>
> a - How can i diagnose this?<br>
> b - How can i prevent this?<br>
<br>
</div>The easy way would be just to use ubuntu precise for your host. Seriously :)<br>
<br>
The hard way, I think your guest is accessing your hosts's tty. You<br>
can probably prevent that by something like this on your guests'<br>
config file:<br>
<br>
#==========<br>
lxc.cgroup.devices.deny = a<br>
# Allow any mknod (but not using the node)<br>
lxc.cgroup.devices.allow = c *:* m<br>
lxc.cgroup.devices.allow = b *:* m<br>
# /dev/null and zero<br>
lxc.cgroup.devices.allow = c 1:3 rwm<br>
lxc.cgroup.devices.allow = c 1:5 rwm<br>
# consoles<br>
lxc.cgroup.devices.allow = c 5:1 rwm<br>
lxc.cgroup.devices.allow = c 5:0 rwm<br>
#lxc.cgroup.devices.allow = c 4:0 rwm<br>
#lxc.cgroup.devices.allow = c 4:1 rwm<br>
# /dev/{,u}random<br>
lxc.cgroup.devices.allow = c 1:9 rwm<br>
lxc.cgroup.devices.allow = c 1:8 rwm<br>
lxc.cgroup.devices.allow = c 136:* rwm<br>
lxc.cgroup.devices.allow = c 5:2 rwm<br>
# rtc<br>
lxc.cgroup.devices.allow = c 254:0 rwm<br>
#fuse<br>
lxc.cgroup.devices.allow = c 10:229 rwm<br>
#tun<br>
lxc.cgroup.devices.allow = c 10:200 rwm<br>
#full<br>
lxc.cgroup.devices.allow = c 1:7 rwm<br>
#hpet<br>
lxc.cgroup.devices.allow = c 10:228 rwm<br>
#kvm<br>
lxc.cgroup.devices.allow = c 10:232 rwm<br>
#==================<br>
<span class="HOEnZb"><font color="#888888"><br>
--<br>
Fajar<br>
</font></span><div class="HOEnZb"><div class="h5"><br>
------------------------------------------------------------------------------<br>
Live Security Virtual Conference<br>
Exclusive live event will cover all the ways today's security and<br>
threat landscape has changed and how IT managers can respond. Discussions<br>
will include endpoint security, mobile security and the latest in malware<br>
threats. <a href="http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/" target="_blank">http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/</a><br>
_______________________________________________<br>
Lxc-users mailing list<br>
<a href="mailto:Lxc-users@lists.sourceforge.net">Lxc-users@lists.sourceforge.net</a><br>
<a href="https://lists.sourceforge.net/lists/listinfo/lxc-users" target="_blank">https://lists.sourceforge.net/lists/listinfo/lxc-users</a><br>
</div></div></blockquote><br><br clear="all"><div>here is what i do<br></div><div><br></div><div>i always start the container form a terminalnot frommy x session</div><div>i also use the following script to start the container this fixes all problem</div>
<div><br></div><div>====</div><div># cat /home/rhanna/bin/lxc-start-fedora <br>#! /bin/bash<br>options=$(getopt -o n: -l name: -- "$@")<br>eval set -- "$options"<br>while true<br>do<br> case "$1" in<br>
-n|--name) name=$2; shift 2;;<br> --) shift<br> break;;<br> *) break ;;<br>esac<br>done<br><br>if [ -z $name ]; then<br> echo "container name must be set, use -n|--name"<br>
exit 1<br>fi<br>lxc-ls |grep $name >/dev/null 2>&1<br>if [ $? -ne 0 ]; then <br> echo "Container does not exist"<br> exit 1<br>fi<br>lxc-info -s -n$name|grep RUNNING >/dev/null 2>&1<br>
if [ $? -eq 0 ]; then<br> echo "container already started"<br> exit 1<br>fi<br>mount |grep /tmp/lxc/$name > /dev/null 2>&1<br>if [ $? -eq 0 ]; then <br> umount /tmp/lxc/$name<br>fi<br>rm -rf /tmp/lxc/$name<br>
mkdir -p /tmp/lxc/$name<br>mount none /tmp/lxc/$name -t tmpfs<br>rsync -a /var/lib/lxc/$name/rootfs/dev/ /tmp/lxc/$name<br>mount /tmp/lxc/$name /var/lib/lxc/$name/rootfs/dev/ -obind<br>lxc-start $* -n $name<br></div><div>
=====</div>-- <br><div dir="ltr">BR<br>RH<br><a href="http://informatiq.org" target="_blank">http://informatiq.org</a><br></div>
</div>