[Lxc-users] fedora template

[Serge E. Hallyn]

Quoting Justin Cormack (justin at specialbusservice.com):
> On Wed, 2011-03-30 at 08:20 -0500, Serge E. Hallyn wrote:
> > Quoting Justin Cormack (justin at specialbusservice.com):
> > > On Tue, 2011-03-29 at 18:19 -0500, Serge E. Hallyn wrote:
> > > 
> > > > As for trouble with init - is your fedora using systemd?  How does it
> > > > actually start runlevel changes?  Upstart uses dbus over abstract unix
> > > > socket (which is containerized with netns), sysvinit uses ioctl over
> > > > /dev/init which is a distinct file from the one in the container...
> > > > Does systemd do something we're not containerizing right now?
> > > 
> > > When I tried Ubuntu on Ubuntu (using upstart), the abstract socket was
> > > not containerized, and it was changing runlevels on the host, which was
> > > a complete pain. How do I make sure that it is? Is it an lxc version
> > > issue (I was using the lxc that ships with Ubuntu 10.10, 0.7.2)?
> > 
> > No, you must have created a container without private network namespace.
> > Since upstart uses an abstact unix domain socket, you can only keep
> > root in a container from being able to reboot by either (1) starting
> > the container as a user who is not root and having a private user
> > namespace (which is not currently recommended since userns is going
> > through churn), or (2) having a private network namespace.
> 
> How do I make sure my container does have a private network namespace?
> Network namespaces are enabled on my system, but I cant find the
> documentation anywhere about how to turn this on when I create a
> container (only the clone flags documentation...)
> 
> Sorry to be dumb about this....

Not dumb, I'm not sure either - I suspect you just have to define a
lxc.network.type in your config file.  Can you send us the config
file for the container that didn't work?

-serge
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 490 bytes
Desc: Digital signature
URL: <http://lists.linuxcontainers.org/pipermail/lxc-users/attachments/20110330/d09c4613/attachment.pgp>