<html><body><div style="font-family: arial, helvetica, sans-serif; font-size: 10pt; color: #000000"><div>Thanks for your answer.</div><div>Looks like profiles will be the best way to keep LXD in the loop :) <br></div><div><br></div><div>About nesting containers, that would not be needed if multiple LXD daemon could run at the same time as normal system user. Not sure if possible.<br>So each system user could have their own LXD to tallk to. </div><div><br></div><div data-marker="__SIG_PRE__"><div><span style="color: rgb(51, 51, 51); font-family: times new roman,new york,times,serif;" data-mce-style="color: #333333; font-family: times new roman,new york,times,serif;">Cordialement,</span><span style="color: rgb(51, 51, 51); font-family: times new roman,new york,times,serif; font-weight: bold;" data-mce-style="color: #333333; font-family: times new roman,new york,times,serif; font-weight: bold;"><span style="color: rgb(51, 51, 51); font-family: times new roman,new york,times,serif; font-weight: bold;" data-mce-style="color: #333333; font-family: times new roman,new york,times,serif; font-weight: bold;"><br></span></span></div><div><br></div><div><span style="color: rgb(51, 51, 51); font-family: times new roman,new york,times,serif; font-weight: bold;" data-mce-style="color: #333333; font-family: times new roman,new york,times,serif; font-weight: bold;">Benoît </span><span style="color: rgb(51, 51, 51); font-family: times new roman,new york,times,serif; font-weight: bold;" data-mce-style="color: #333333; font-family: times new roman,new york,times,serif; font-weight: bold;"><br></span></div></div><br><hr id="zwchr" data-marker="__DIVIDER__"><div data-marker="__HEADERS__"><b>De: </b>"Mark Constable" <markc@renta.net><br><b>À: </b>"lxc-users" <lxc-users@lists.linuxcontainers.org><br><b>Envoyé: </b>Mardi 1 Mars 2016 18:34:29<br><b>Objet: </b>Re: [lxc-users] lxc / lxd I'm lost somewhere<br></div><br><div data-marker="__QUOTED_TEXT__">On 02/03/16 01:34, Benoit GEORGELIN - Association Web4all wrote:<br>> User A will have his own space for containers<br>> User B will have his own space for containers<br>><br>> They should do "lxc-ls -f" or "lxc list" and see only their own containers<br>><br>> Maybe this is not a typical use case ?<br><br>I think the best way to achieve this level of user isolation would be to<br>use nested containers so that each user is assigned to and logged into<br>a "parent" container and then they have full control of and can only view<br>their own (nested) containers. I'm not sure how well containers within<br>containers is supported these days but it does work to some degree.<br><br>As for a LXD version of this...<br><br>lxc-create -n test -t ubuntu -B lvm --lvname test --vgname vg_node1 --fstype ext4 --fssize 1GB<br><br>it could be as simple as...<br><br>lxc launch unbuntu test<br><br>where extra settings may need a custom profile according to...<br><br>https://github.com/lxc/lxd/blob/master/specs/configuration.md<br><br>_______________________________________________<br>lxc-users mailing list<br>lxc-users@lists.linuxcontainers.org<br>http://lists.linuxcontainers.org/listinfo/lxc-users<br></div></div></body></html>