<html><body><div style="font-family: arial, helvetica, sans-serif; font-size: 10pt; color: #000000"><div>I'm currently switching from pure LXC to LXD </div><div>I have few questions :)<br></div><div><br>1- subuid /subgid </div><div>Can LXD use different uid/gid from container configuration ?<br>Let's say I have one LXD daemon running . This daemon is using suidui/gid from the user who launch de container. Can I have different id/gid mapping for this daemon ?</div><div><br data-mce-bogus="1"></div><div>Exemple : </div><div>Container A: 100000:65536</div><div>Container B: 165536:65536</div><div><br></div><div>If the user from conainter A escape from namespace he will be as uig/gid A , container B stay "safe" from user container A access. </div><div><br data-mce-bogus="1"></div><div>2- IP address and mac address</div><div>Is the only way to get the mac address assigne to the container is to go inside de container ? No lxc command to get the info ? <br>lxc info container retrieve the IP address , not the mac address</div><div>So the only way will be to set static mac address in configuration file then show the configuration of the container and parse it to get the mac :( <br><br>To set and configure Openvwitch, I need the interface name, ip and mac </div><div><br data-mce-bogus="1"></div><div><br data-mce-bogus="1"></div><div>3- config vs profile</div><div>what it the best option to set container configuration ?</div><div>Can I keep the config file as generated by the first launch and make my own profile configuration or should I edit the config of the container and only apply profile to share same custom configuration ?<br></div><div><br></div><div>Let's say if I wanna custom container configuration (from script) and add a device type nic (eth0) <br>Should I use "lxc config device add ......." or<br>should I dump the initial configuration to a yml file , add the device information , reload config from stdin </div><div>should I keep the initial configuration file and create a new template , custom the template and finally apply the template ?</div><div><br data-mce-bogus="1"></div><div>4- Veth / Bridged </div><div><br data-mce-bogus="1"></div><div>In LXC i could not have a specific name for the nic in unpriv container. (veth)<br>Looks like now with LXD it's possible (bridged) ? </div><div><br data-mce-bogus="1"></div><div><br data-mce-bogus="1"></div><div>5- Unpriv container</div><div>If the init process from the host point of view is running with specific uid/gid means that the container is well running as unpriv ?<br>lxd monitor process runs as the user who launch lxd daemon right ?</div><div><br data-mce-bogus="1"></div><div><br data-mce-bogus="1"></div><div>6- Any openvswitch integration (or other virtual switch ) sheduled ?<br>Not full integration , just basic settings and some open flow rules for security </div><div><br data-mce-bogus="1"></div><div>7- Quota with btrfs </div><div>I saw LXD support quota with some backend storage. How using it with BTRFS ? </div><div>Is it part from LXD container configuration or does it rely on FS configuration . No information about it on the doc https://github.com/lxc/lxd/blob/master/specs/configuration.md</div><div><br data-mce-bogus="1"></div><div><br></div><div>Thanks a lot for your time and help (again) :)</div><div><br data-mce-bogus="1"></div><div><br></div><div data-marker="__SIG_PRE__"><div><span style="color: rgb(51, 51, 51); font-family: times new roman,new york,times,serif;" data-mce-style="color: #333333; font-family: times new roman,new york,times,serif;">Cordialement,</span><span style="color: rgb(51, 51, 51); font-family: times new roman,new york,times,serif; font-weight: bold;" data-mce-style="color: #333333; font-family: times new roman,new york,times,serif; font-weight: bold;"><span style="color: rgb(51, 51, 51); font-family: times new roman,new york,times,serif; font-weight: bold;" data-mce-style="color: #333333; font-family: times new roman,new york,times,serif; font-weight: bold;"><br></span></span></div><div><br></div><div><span style="color: rgb(51, 51, 51); font-family: times new roman,new york,times,serif; font-weight: bold;" data-mce-style="color: #333333; font-family: times new roman,new york,times,serif; font-weight: bold;">Benoît </span><span style="color: rgb(51, 51, 51); font-family: times new roman,new york,times,serif; font-weight: bold;" data-mce-style="color: #333333; font-family: times new roman,new york,times,serif; font-weight: bold;"><br></span></div></div><div><br></div><hr id="zwchr" data-marker="__DIVIDER__"><div data-marker="__HEADERS__"><b>De: </b>"Serge Hallyn" <serge.hallyn@ubuntu.com><br><b>À: </b>"lxc-users" <lxc-users@lists.linuxcontainers.org><br><b>Envoyé: </b>Mardi 1 Mars 2016 20:05:35<br><b>Objet: </b>Re: [lxc-users] lxc / lxd I'm lost somewhere<br></div><div><br></div><div data-marker="__QUOTED_TEXT__">Quoting Mark Constable (markc@renta.net):<br>> On 02/03/16 04:55, Serge Hallyn wrote:<br>> >For instance I have my local laptop and a (very) remote server.<br>> <br>> Thanks for this example usage.<br>> <br>> >I can 'lxc launch xenial h:x1; lxc file push my.tar.gz h:x1/; lxc<br>> >shell h:x1' and the fact that x1 is running on 'h' on a different<br>> >continent really doesn't matter a lick. it's the same thing I'd<br>> >do locally - 'lxc launch xenial x1; lxc file push my.tar.gz x1;<br>> >lxc shell x1'.<br>> <br>> Is the above "shell" command available in the RCs perhaps?<br>> <br>> It's not available in 2.0.0~beta4-0ubuntu7.<br><br>No, my ~/.config/lxc/config.yml has<br><br>aliases:<br> shell: exec @ARGS@ -- bash<br><br>_______________________________________________<br>lxc-users mailing list<br>lxc-users@lists.linuxcontainers.org<br>http://lists.linuxcontainers.org/listinfo/lxc-users<br></div></div></body></html>