[lxc-users] macvlan-based networking for unprivileged containers

[Serge Hallyn]

Quoting Fajar A. Nugraha (list at fajar.net):
> On Wed, Feb 18, 2015 at 12:27 AM, Serge Hallyn <serge.hallyn at ubuntu.com> wrote:
> > Quoting Fajar A. Nugraha (list at fajar.net):
> >> # c1's veth name on host side
> >> auto v-c1-0
> >> iface v-c1-0 inet static
> >
> > I'm probably just ignorant here, but - does this not cause 'ifup -a' to
> > fail when the containers are not up?
> 
> ifup throws an error message, but still exit with code 0, so it should
> be safe. udev and network-interface service will kick in to
> automatically activate it when the interface becomes available (i.e.
> when the container is started)
> 
> # ifup -a;echo $?
> Cannot find device "v-c1-0"
> Failed to bring up v-c1-0.
> 0
> 
> # ifup v-c1-0;echo $?
> Cannot find device "v-c1-0"
> Failed to bring up v-c1-0.
> 0

Agreed it sounds like a very useful setup.

Any chance you would have time to write the needed extensions for
lxc-user-nic?