<html><body><div style="font-family: arial, helvetica, sans-serif; font-size: 10pt; color: #000000"><div>Hi, </div><div><br data-mce-bogus="1"></div><div>I'm looking to avoid network changes in an LXC container with root access while the system is up and running. </div><div><br data-mce-bogus="1"></div><div>Let's say I have two containers running.</div><div><br data-mce-bogus="1"></div><div>A: 192.168.0.100/24</div><div>B: 192.168.0.200/24</div><div><br data-mce-bogus="1"></div><div>They are both on the same private network but it can be a public network too. </div><div>How can I prevent root user from container B to change his IP address and user the IP address of container A ?</div><div><br data-mce-bogus="1"></div><div>Container network is built on top of Ovs Switch . Maybe there is a way to restrict MAC Address and IP for a specific port ? I did not see any option. </div><div><br>Thanks for you advises ! </div><div><br></div><div data-marker="__SIG_PRE__"><div><span style="color: rgb(51, 51, 51); font-family: times new roman,new york,times,serif;" data-mce-style="color: #333333; font-family: times new roman,new york,times,serif;">Cordialement,</span><span style="color: rgb(51, 51, 51); font-family: times new roman,new york,times,serif; font-weight: bold;" data-mce-style="color: #333333; font-family: times new roman,new york,times,serif; font-weight: bold;"><span style="color: rgb(51, 51, 51); font-family: times new roman,new york,times,serif; font-weight: bold;" data-mce-style="color: #333333; font-family: times new roman,new york,times,serif; font-weight: bold;"><br></span></span></div><div>Benoit G</div></div></div></body></html>