[lxc-users] Running unprotected system container

jjs - mainphrame jjs at mainphrame.com
Mon Jun 22 18:26:22 UTC 2020


I understand his point, he knows what a container is, and wants to use a
container for this.

Being told he should use a VM instead is not helping him towards the goal.

Just my $.02

J

On Mon, Jun 22, 2020 at 10:35 AM Andrey Repin <anrdaemon at yandex.ru> wrote:

> Greetings, Koehler!
>
> > Ok you are not helpful, not sure why you are replying.
>
> "Your answer is invalid, you should give me the answers I expect,
> everything
> else is useless."
>
> Sorry, but with such attitude, you get what you deserve.
>
> >  My os already provides kernel modules and script within init to load
> them
> > up and that actually works already.  And yes I want those modules loaded
> by
> > my os in the container and made available to host as well.  I have no
> issue
> > with that, I am fine with my os  container altering the shared kernel
> aspect.
> >
> >  I am facing an issue where I can’t sgare eth0/eth1 since lxd is unable
> to
> > add macvlan, getting “operation not supported” which I am trying to
> figure
> > out is likely related to my linux kernel optiona, even thought
> > CONFIG_MACVLAN os set to y, likely some other  options are missing.
> >
> >  Anyway thanks for you opinion but so far things are very close to
> working.
> >
> > On Jun 17, 2020, 9:35 AM -0400, Andrey Repin <anrdaemon at yandex.ru>,
> wrote:
> >
> >  Greetings, Koehler!
> >
> >
> > But I do not want kernel virtualization, not sure where you saw me ask
> for
> >  that, I want the exact opposite, I want the kernel to be share, meaning
> same
> >  kernel, same instance, with just layers on top, exactly as system
> containers do.
> >
> >
> >  Then stop mentioning kernel modules loading. You can't load kernel
> modules, if
> >  you don't drop to the kernel level.
> >
> >
> > It is unconventional to run a system container without any security and
> >  such, yet, as seen in the thread I am not alone, but very few.
> >
> >
> >  Load kernel modules on the host and run your applications where they
> should
> >  run.
> >  Or use proper VM already.
> >
> >
> >  --
> >  With best regards,
> >  Andrey Repin
> >  Wednesday, June 17, 2020 16:23:01
> >
> >  Sorry for my terrible english...
> >
> >  _______________________________________________
> >  lxc-users mailing list
> >  lxc-users at lists.linuxcontainers.org
> >  http://lists.linuxcontainers.org/listinfo/lxc-users
> >
> >
>
>
> --
> With best regards,
> Andrey Repin
> Monday, June 22, 2020 20:23:31
>
> Sorry for my terrible english...
> _______________________________________________
> lxc-users mailing list
> lxc-users at lists.linuxcontainers.org
> http://lists.linuxcontainers.org/listinfo/lxc-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.linuxcontainers.org/pipermail/lxc-users/attachments/20200622/ad01a984/attachment.htm>


More information about the lxc-users mailing list