<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;font-family:Calibri,Helvetica,sans-serif;" dir="ltr">
<p style="margin-top:0;margin-bottom:0">Thanks Fajar.</p>
<p style="margin-top:0;margin-bottom:0">I am doing this for research purposes.</p>
<p style="margin-top:0;margin-bottom:0">I will report the results.</p>
<p style="margin-top:0;margin-bottom:0">Regards.</p>
<p style="margin-top:0;margin-bottom:0">PAP</p>
<p style="margin-top:0;margin-bottom:0"><br>
</p>
<br>
<br>
<div style="color: rgb(0, 0, 0);">
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>De:</b> lxc-users <lxc-users-bounces@lists.linuxcontainers.org> en nombre de Fajar A. Nugraha <list@fajar.net><br>
<b>Enviado:</b> martes, 30 de enero de 2018 07:16 p.m.<br>
<b>Para:</b> LXC users mailing-list<br>
<b>Asunto:</b> Re: [lxc-users] User Mode Linux within a Linux Container</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt;">
<div class="PlainText">On Wed, Jan 31, 2018 at 2:54 AM, Pablo Pessolani <ppessolani@hotmail.com> wrote:<br>
> Does anybody has run User Mode Linux (UML) within a Linux Container?<br>
><br>
> And several UMLs within several Containers? (one UML by Container)<br>
><br>
> Is there any limitation so that this can not be done?<br>
<br>
<br>
If you're doing this for research purposes, I say 'try it and report<br>
the result'. I've had success running openvpn (which use tun/tap<br>
adapter that UML also need) even inside unprivileged container, with<br>
minor changes to the systemd unit to enable autostart. I've also run<br>
virtualbox in privileged containers (although in this case IIRC I had<br>
to disable/modify apparmor/seccomp/dropped capabilities, which would<br>
make it undesirable for 'production' uses). My GUESS is that UML will<br>
behave similar to openvpn (since it doesn't require any special kernel<br>
module other than tun/tap).<br>
<br>
If you're doing this for performance / security / privilege separation<br>
purposes, I suggest don't do that. Possibly look into nested<br>
containers instead.<br>
<br>
-- <br>
Fajar<br>
_______________________________________________<br>
lxc-users mailing list<br>
lxc-users@lists.linuxcontainers.org<br>
<a href="http://lists.linuxcontainers.org/listinfo/lxc-users" id="LPlnk503289" previewremoved="true">http://lists.linuxcontainers.org/listinfo/lxc-users</a></div>
</span></font></div>
</div>
</div>
</body>
</html>