[lxc-devel] [lxd/master] README.md update docker instructions

techtonik on Github lxc-bot at linuxcontainers.org
Tue May 9 13:13:45 UTC 2017


A non-text attachment was scrubbed...
Name: not available
Type: text/x-mailbox
Size: 401 bytes
Desc: not available
URL: <http://lists.linuxcontainers.org/pipermail/lxc-devel/attachments/20170509/fc1ac096/attachment.bin>
-------------- next part --------------
From 50080717a01646e403cd3dbf6b5b27cb4a229444 Mon Sep 17 00:00:00 2001
From: anatoly techtonik <techtonik at gmail.com>
Date: Tue, 9 May 2017 16:13:20 +0300
Subject: [PATCH] README.md update docker instructions

See https://github.com/lxc/lxd/issues/3299

Signed-off-by: anatoly techtonik <techtonik at gmail.com>
---
 README.md | 15 ++-------------
 1 file changed, 2 insertions(+), 13 deletions(-)

diff --git a/README.md b/README.md
index dd9fbdc..48ad659 100644
--- a/README.md
+++ b/README.md
@@ -283,17 +283,6 @@ Yes. The easiest way to do that is using a privileged container:
 
 #### How can I run docker inside a LXD container?
 
-To run docker inside a lxd container, you must be running a kernel with cgroup
-namespaces (Ubuntu 4.4 kernel or newer, or upstream 4.6 or newer), and must
-apply the docker profile to your container.
+To run docker inside a lxd container, you must allow security nesting.
 
-    lxc launch ubuntu:xenial my-docker-host -p default -p docker
-
-Note that the docker profile does not provide a network interface, so the
-common case will want to compose the default and docker profiles.
-
-Also note that Docker coming from [upstream](https://apt.dockerproject.org/repo) doesn't currently run as is inside the lxd container. Look at issue [#2621](https://github.com/lxc/lxd/issues/2621) for more details. You need to download the docker coming from Ubuntu (docker.io package) to get this working. So once you are in the lxd container run
-
-    sudo apt-get install -y docker.io runc containerd
-
-The container must be using the Ubuntu 1.10.2-0ubuntu4 or newer docker package.
+    lxc config set <container> security.nesting true


More information about the lxc-devel mailing list