[Lxc-users] LXC in production envivroment

[Fajar A. Nugraha]

On Fri, Aug 24, 2012 at 8:27 PM, István Király - LaKing <d250 at yahoo.com> wrote:
> I would rather like to have a virtual-server farm or better said lxc container-farm, as soon as possible. ..

If you control all the VPS in the farm, lxc might be usable.
Otherwise, openvz might be a better choice. And who knows, later
versions of openvz might use lxc at its core.


> http://me.veekun.com/blog/2012/04/09/php-a-fractal-of-bad-design/
> .. felt that something is not right with PHP, and this post nailed it to the point. I realized PHP is, .. how to say gently, not right for me .. ( + I use weird scripting techniques if the language allows)

Hey, for me, if it works, use it :)

> Should LXC be used directly,

You could.

> or is there an API like libvirt necessery / handy in setting up networking for example?

IIRC libvirt only has limited lxc support. Definitely no GUI
(virt-manager) support (yet).

Try http://www.mail-archive.com/lxc-users@lists.sourceforge.net/msg03736.html

> Got also hacked once or twice (via PHP) and I really want a stable isolated environment,

Well, php now has php-fpm. IIRC you can have multiple application
pools (e.g. one for each user), each can run in a chroot environment,
with unique user for each pool.

> I don't really see a major difference between Ubuntu and Fedora, ..
> however if you say that Ubuntu is probably more stable or secure, I may switch to
> it.

Try it :)

Sometimes all it takes is some kernel boot command line to have ubuntu
boot on very new hardware. Also note that latest stable is now at
12.04.1, so there might be some changes (e.g. drivers) compared to
12.04 that allows it to work on your hardware now.

> I want to put together the right tool set, the right software environment now, so I can create a container farm, with two or more physical servers, and a nice GUI that I can present even for normal users.

If your users only use php, php-fpm might be less painful.

If you don't trust your users, better stick with known working
solutions (e.g. openvz, xen, whatever). You might find better
frontends for them (even when some frontends are commercial ones)

-- 
Fajar