[lxc-users] Router inside LXC with "lxc.network.type = phys" to the WAN-port

[Leonid Isaev]

On Fri, 31 Jan 2014 12:26:30 +0100
Thomas Huber <miraculli at gmail.com> wrote:

> [...]
> 
> I see your point and thats why I´m asking.
> The Idea was not only to protect the host but also the other running
> service / VMs:

Right.

> - KVM with Window2008R2 an MS-SQL running inside
> - a service for Wifi-Managment with multiple accesspoint running inside JVM

So, the host is also an AP, i.e. there are wireless NICs? 

> - samba
> 
> would your start the services just with lxc-execute or setup a complete
> container?

I'd create a standalone container for each group of services. The idea is to
have a maximally slim host installation and "vanilla" containers which hence do
not need to be backed up (it is easier to recreate the container than to
recover it). For example, samba and cups can go to one container.

The problem which I see with using lxc-execute is that you can't have a
minimal host. Indeed, in the same example of samba, you'll need all its
dependencies installed.

Cheers,
L.

-- 
Leonid Isaev
GnuPG key: 0x164B5A6D
Fingerprint: C0DF 20D0 C075 C3F1 E1BE  775A A7AE F6CB 164B 5A6D
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 490 bytes
Desc: not available
URL: <http://lists.linuxcontainers.org/pipermail/lxc-users/attachments/20140131/716c0ff4/attachment.pgp>