Re: [libvirt-users] [libvirt] LXC, user namespaces and systemd

2014-02-27 Thread Stephan Sachse
On Thu, Feb 27, 2014 at 3:07 PM, Dariusz Michaluk wrote: > On 26.02.2014 17:59, Stephan Sachse wrote: >>> >>> # chown -R foo:foo /var/lib/libvirt/filesystems/mycontainer >> >> you must "shift" the uids for the container 0 -> 666, 1 -> 667, 2 ->

Re: [libvirt-users] [libvirt] LXC, user namespaces and systemd

2014-02-26 Thread Stephan Sachse
> # chown -R foo:foo /var/lib/libvirt/filesystems/mycontainer you must "shift" the uids for the container 0 -> 666, 1 -> 667, 2 -> 668. there is a tool for this: uidmapshift some tools may not work, because of the missing file capabilities. chown removes all file capabilities! try ping as user i

Re: [libvirt-users] assigning a single IP to the guest with "typical" hosting provider

2014-02-25 Thread Stephan Sachse
"[...] a virtual MAC address needs to be requested for each single IP address via the Hetzner Robot and assigned to the guest NIC [...]" http://wiki.hetzner.de/index.php/Netzkonfiguration_CentOS/en#Bridged /stephan -- Software is like sex, it's better when it's free! __

Re: [libvirt-users] problem with nwfilter direction='out'

2014-02-20 Thread Stephan Sachse
i have opened a bug report https://bugzilla.redhat.com/show_bug.cgi?id=1067441 /stephan -- Software is like sex, it's better when it's free! ___ libvirt-users mailing list libvirt-users@redhat.com https://www.redhat.com/mailman/listinfo/libvirt-users

[libvirt-users] problem with nwfilter direction='out'

2014-02-19 Thread Stephan Sachse
i test the following simple filter ccbd255f-4be5-4f0f-8835-770ea40cb2c9 but i get strange results (look at the attached output of iptables-save) for me it looks like the direction='out' filters are attached to every chain for this domain. additional there are wrong conntrack, stat