[lxc-users] new lxd user (on Gentoo) - queries about container logging and configuration parameters
Fiedler Roman
Roman.Fiedler at ait.ac.at
Thu Jan 14 09:51:08 UTC 2016
> Von: lxc-users [mailto:lxc-users-bounces at lists.linuxcontainers.org] Im
> Auftrag
>
> Hi all,
>
> I've found lxd recently and jumped on it. I've used vserver before but
> this is a different league of simplicity and compatibility with stock
> kernels. Great work indeed, many thanks to the developers and the
> community for supporting and improving this product.
>
> There are a few issues that I couldn't figure out on my own by looking
> on the Internet, so I'm putting them out to the experts:
>
> - One aspect that drew my attention was the fact that running 'dmesg'
> on the containers shows the host's kernel log. This does not look
> right to me, is it a configuration fault on the container or the lxd
> system?
No, it isn't, see http://seclists.org/fulldisclosure/2015/Mar/89
I find it also strange, that this is not disabled by default. Check
http://unix.stackexchange.com/questions/103576/container-lockdown
for more info on this and similar.
> [Snip]
>
> Any pointers for addressing these issues would be much appreciated.
>
> Best regards,
> Pedro.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6344 bytes
Desc: not available
URL: <http://lists.linuxcontainers.org/pipermail/lxc-users/attachments/20160114/aac8c9f0/attachment.bin>
More information about the lxc-users
mailing list