Re: [libvirt-users] libvirt-lxc: good for production?

2017-04-03 Thread Spike
thank you Michal, appreciate your input, I'll invest some more time and set up a full test system mirroring our prod and see how it works out. I'm gonna start another thread on images/templates because that's another area where I've found a lack of information and could do with some input. thanks.

Re: [libvirt-users] libvirt-lxc: good for production?

2017-04-03 Thread Michal Privoznik
On 04/03/2017 04:02 AM, Spike wrote: Dear all, I'm a happy lxc (lxd) user with a need to add a bunch of KVM images to the mix. More importantly I need to have some simple frontend to give users the ability to quickly run some VMs for testing. Researching the topic brought me to virt-manager and

Re: [libvirt-users] libvirt-lxc capabilities mknod

2016-08-18 Thread jsl6uy js16uy
Very Nice. Will try that path and keep that in mind future forward! Thanks very much Regards On Thu, Aug 18, 2016 at 2:48 AM, Daniel P. Berrange wrote: > On Wed, Aug 17, 2016 at 12:38:10PM -0500, jsl6uy js16uy wrote: > > Hello all, hope all is well > > > > Issue: Any way to give granular mknod c

Re: [libvirt-users] libvirt-lxc capabilities mknod

2016-08-18 Thread Daniel P. Berrange
On Wed, Aug 17, 2016 at 12:38:10PM -0500, jsl6uy js16uy wrote: > Hello all, hope all is well > > Issue: Any way to give granular mknod capabilities to a container? Only > allow creation of specific device? > > bit of background > > Have a laptop running arch and libvirt > loading an arch lxc con

Re: [libvirt-users] Libvirt-lxc packages deprecation

2016-02-24 Thread Daniel P. Berrange
On Tue, Feb 23, 2016 at 11:41:41AM -0800, syed muhammad wrote: > Folks, > > I found this thread > that > talks about deprecating libvirt-lxc packages [1] [2] [3] in RHEL7.1. > > I am using [1] as a dependency for my applicat

Re: [libvirt-users] Libvirt-lxc packages deprecation

2016-02-24 Thread Peter Steele
I'd like to hear the latest on this as well. We're considering moving to the "other" LXC framework if libvirt LXC truly is being dropped in RHEL. On 02/23/2016 11:41 AM, syed muhammad wrote: Folks, I foundthis thread tha

Re: [libvirt-users] libvirt-lxc

2015-08-13 Thread Daniel P. Berrange
On Thu, Aug 13, 2015 at 11:22:07AM +0100, Mark Clarkson wrote: > On 11/08/2015 08:28, Kashyap Chamarthy wrote: > > Just as an addendum, the said RPMs should be available in standard > > Fedora repositories, too. Not to mention, one could file issues in the > > upstream libvirt bug tracker. > > I

Re: [libvirt-users] libvirt-lxc

2015-08-13 Thread Mark Clarkson
On 11/08/2015 08:28, Kashyap Chamarthy wrote: > Just as an addendum, the said RPMs should be available in standard > Fedora repositories, too. Not to mention, one could file issues in the > upstream libvirt bug tracker. I just filed a bug against libvirt 1.2.18 in bugzilla, but for the future, fo

Re: [libvirt-users] Libvirt LXC vcpu doesn't seem to work

2015-08-13 Thread Michal Privoznik
On 12.08.2015 18:26, Dave Riches wrote: > Hi, > > I seem to have a problem when creating a LXC container through virsh. > > While virsh -c lxc:/// dominfo shows up (for example) 2 > VCPUs as defined, if I run a CPU intensive task (such as stress --cpu > 10) it will max out 10 CPU cores on the ho

Re: [libvirt-users] libvirt-lxc

2015-08-11 Thread Mark Clarkson
On 11/08/2015 09:22, Daniel P. Berrange wrote: On Tue, Aug 11, 2015 at 08:25:30AM +0100, Mark Clarkson wrote: On 11/08/2015 07:31, Martin Kletzander wrote: The fact that it's deprecated in some distributions doesn't mean we're dropping it. So, just to be clear, there are no plans to drop the

Re: [libvirt-users] libvirt-lxc

2015-08-11 Thread Mark Clarkson
On 11/08/2015 09:21, Daniel P. Berrange wrote: > In addition we have a > GSoC project developing the ability to let you run Docker containers > using libvirt-lxc and also libvirt-kvm ! Er. Wow! Very exciting. ___ libvirt-users mailing list libvirt-users

Re: [libvirt-users] libvirt-lxc

2015-08-11 Thread Daniel P. Berrange
On Mon, Aug 10, 2015 at 09:50:04PM +0100, Mark Clarkson wrote: > Hi, > I noticed that libvirt-lxc will be deprecated for RedHat: > > "Future development on the Linux containers framework is now based on the > docker command-line interface. libvirt-lxc tooling may be removed in a > future release o

Re: [libvirt-users] libvirt-lxc

2015-08-11 Thread Daniel P. Berrange
On Tue, Aug 11, 2015 at 08:25:30AM +0100, Mark Clarkson wrote: > On 11/08/2015 07:31, Martin Kletzander wrote: > > The fact that it's deprecated in some distributions doesn't mean > > we're dropping it. > > So, just to be clear, there are no plans to drop the lxc driver from > libvirt? Absolutel

Re: [libvirt-users] libvirt-lxc

2015-08-11 Thread Kashyap Chamarthy
On Tue, Aug 11, 2015 at 08:31:02AM +0200, Martin Kletzander wrote: > On Mon, Aug 10, 2015 at 09:50:04PM +0100, Mark Clarkson wrote: > >Hi, > >I noticed that libvirt-lxc will be deprecated for RedHat: > > > >"Future development on the Linux containers framework is now based on > >the docker command-

Re: [libvirt-users] libvirt-lxc

2015-08-11 Thread Mark Clarkson
On 11/08/2015 07:31, Martin Kletzander wrote: > The fact that it's deprecated in some distributions doesn't mean > we're dropping it. So, just to be clear, there are no plans to drop the lxc driver from libvirt? ___ libvirt-users mailing list libvirt-u

Re: [libvirt-users] libvirt-lxc

2015-08-10 Thread Martin Kletzander
On Mon, Aug 10, 2015 at 09:50:04PM +0100, Mark Clarkson wrote: Hi, I noticed that libvirt-lxc will be deprecated for RedHat: "Future development on the Linux containers framework is now based on the docker command-line interface. libvirt-lxc tooling may be removed in a future release of Red Hat

Re: [libvirt-users] Libvirt LXC hostname

2015-06-15 Thread Michal Privoznik
On 13.06.2015 00:21, Anu Mercian wrote: > Hello, > > I am trying to bring up an lxc with Centos 6.6 using libvirt command: > > "virsh -c lxc:/// create vm.xml" > > When I do the above, the new VM created gets the hostname of the host where > libvirt is installed. When I looked up help on the pas

Re: [libvirt-users] [libvirt] LXC, user namespaces and systemd

2014-03-04 Thread Dariusz Michaluk
On 03.03.2014 16:26, Daniel P. Berrange wrote: That looks really bizarre. The same two directory names nested over and over again. I can't reproduce this kind of thing on my own host. Libvirt only ever creates the first two levels as expected /sys/fs/cgroup/systemd/machine.slice /sys/fs/cgroup/

Re: [libvirt-users] [libvirt] LXC, user namespaces and systemd

2014-03-04 Thread Daniel P. Berrange
On Tue, Mar 04, 2014 at 05:16:42PM +0100, Dariusz Michaluk wrote: > On 03.03.2014 16:26, Daniel P. Berrange wrote: > > >That looks really bizarre. The same two directory names nested over > >and over again. I can't reproduce this kind of thing on my own host. > >Libvirt only ever creates the first

Re: [libvirt-users] [libvirt] LXC, user namespaces and systemd

2014-03-03 Thread Daniel P. Berrange
On Mon, Mar 03, 2014 at 03:52:01PM +0100, Dariusz Michaluk wrote: > Hi. > > Another week, another experiment ;) I was trying to run systemd user > session for non-root user, for example darek (uid=1000), operation > failed with error: > > systemd[26]: pam_unix(systemd-user:session): session opene

Re: [libvirt-users] [libvirt] LXC, user namespaces and systemd

2014-03-03 Thread Dariusz Michaluk
Hi. Another week, another experiment ;) I was trying to run systemd user session for non-root user, for example darek (uid=1000), operation failed with error: systemd[26]: pam_unix(systemd-user:session): session opened for user darek by (uid=0) systemd[1]: Started Login Service. systemd[26]

Re: [libvirt-users] [libvirt] LXC, user namespaces and systemd

2014-02-28 Thread Dariusz Michaluk
On 27.02.2014 16:32, Stephan Sachse wrote: On Thu, Feb 27, 2014 at 3:07 PM, Dariusz Michaluk wrote: On 26.02.2014 17:59, Stephan Sachse wrote: # chown -R foo:foo /var/lib/libvirt/filesystems/mycontainer you must "shift" the uids for the container 0 -> 666, 1 -> 667, 2 -> 668. there is a to

Re: [libvirt-users] [libvirt] LXC, user namespaces and systemd

2014-02-27 Thread Stephan Sachse
On Thu, Feb 27, 2014 at 3:07 PM, Dariusz Michaluk wrote: > On 26.02.2014 17:59, Stephan Sachse wrote: >>> >>> # chown -R foo:foo /var/lib/libvirt/filesystems/mycontainer >> >> you must "shift" the uids for the container 0 -> 666, 1 -> 667, 2 -> >> 668. there is a tool for this: uidmapshift > > I

Re: [libvirt-users] [libvirt] LXC, user namespaces and systemd

2014-02-27 Thread Dariusz Michaluk
On 27.02.2014 11:43, Kashyap Chamarthy wrote: IIUC, this is no longer needed with systemd 209 and above. I just did a quick test[1] with systemd-210-2.fc21.x86_64 3.14.0-0.rc4.git0.1.fc21.x86_64 and audit subsystem enabled: $ auditctl -s AUDIT_STATUS: enabled=1 flag=1 pid=816 rate

Re: [libvirt-users] [libvirt] LXC, user namespaces and systemd

2014-02-27 Thread Dariusz Michaluk
On 26.02.2014 17:59, Stephan Sachse wrote: # chown -R foo:foo /var/lib/libvirt/filesystems/mycontainer you must "shift" the uids for the container 0 -> 666, 1 -> 667, 2 -> 668. there is a tool for this: uidmapshift I prepared two containers, the first I used chown, in the second uidmapshift

Re: [libvirt-users] [libvirt] LXC, user namespaces and systemd

2014-02-27 Thread Kashyap Chamarthy
On Wed, Feb 26, 2014 at 05:24:03PM +0100, Dariusz Michaluk wrote: [. . .] > If all login attempts are rejected, please boot host machine with audit=0 > > # vi /etc/default/grub > GRUB_CMDLINE_LINUX=" [...] audit=0 [...]" IIUC, this is no longer needed with systemd 209 and above. I just did a qu

Re: [libvirt-users] [libvirt] LXC, user namespaces and systemd

2014-02-26 Thread Stephan Sachse
> # chown -R foo:foo /var/lib/libvirt/filesystems/mycontainer you must "shift" the uids for the container 0 -> 666, 1 -> 667, 2 -> 668. there is a tool for this: uidmapshift some tools may not work, because of the missing file capabilities. chown removes all file capabilities! try ping as user i

Re: [libvirt-users] libvirt lxc /dev/null

2014-02-26 Thread Nerijus Baliunas
Daniel P. Berrange writes: > Libvirt will pre-populate the /dev filesystem with any permitted > devices, creation is denied by cgroups. > > That you have a plain file for /dev/null suggests something in > your container has deleted the original character device and > replaced it by a plain file.

Re: [libvirt-users] libvirt lxc /dev/null

2014-02-26 Thread Daniel P. Berrange
On Tue, Feb 25, 2014 at 08:58:43PM +, Nerijus Baliunas wrote: > Hello, > > I created lxc container on F19 with virt-manager and it starts OK. The only > problem is that sshd does not run complaining "/dev/null is not a character > device". > # ls -l /dev/null > -rw-r--r-- 1 root root 0 2014-02

Re: [libvirt-users] Libvirt-LXC + systemd + user namespace

2014-01-29 Thread Daniel P. Berrange
On Wed, Jan 29, 2014 at 12:35:25PM +0100, Piotr Bartosiewicz wrote: > > On 28.01.2014 12:46, Daniel P. Berrange wrote: > >On Tue, Jan 28, 2014 at 12:32:41PM +0100, Jan Olszak wrote: > >>Hi there! > >> > >>I am trying to turn on user namespace by adding following lines to the > >>config: > >> > >>

Re: [libvirt-users] Libvirt-LXC + systemd + user namespace

2014-01-29 Thread Piotr Bartosiewicz
On 28.01.2014 12:46, Daniel P. Berrange wrote: On Tue, Jan 28, 2014 at 12:32:41PM +0100, Jan Olszak wrote: Hi there! I am trying to turn on user namespace by adding following lines to the config: As you can see the root in container is mapped to the root

Re: [libvirt-users] Libvirt-LXC + systemd + user namespace

2014-01-28 Thread Daniel P. Berrange
On Tue, Jan 28, 2014 at 12:32:41PM +0100, Jan Olszak wrote: > Hi there! > > I am trying to turn on user namespace by adding following lines to the > config: > > > > > > > > > > > > > > As you can see the root in container is mapped to the root outside. I was > expect

Re: [libvirt-users] libvirt-lxc driver on armv7l

2013-10-31 Thread Daniel P. Berrange
On Thu, Oct 31, 2013 at 03:55:54PM +0100, Jan Olszak wrote: > Oh, sorry. I try to build libvirt on Tizen, with gbs. > Unfortunately Tizen doesn't have the packages from the "snip list of rpms":) > > I tried to install dependencies from > http://ftp.pbone.net/pub/fedora/linux/development/20/armhfp

Re: [libvirt-users] libvirt-lxc without libvirt

2013-10-31 Thread Daniel P. Berrange
On Thu, Oct 31, 2013 at 04:00:24PM +0100, Jan Olszak wrote: > Hi there! > > 1. Is it possible to build libvirt-lxc driver without building > libvirt? How do I do it? That question doesn't make any sense. It is like asking whether you can build the Linux networking stack without building Lin

Re: [libvirt-users] libvirt-lxc driver on armv7l

2013-10-31 Thread Jan Olszak
work... Thanks! Jan -Original Message- From: Daniel P. Berrange [mailto:berra...@redhat.com] Sent: Wednesday, October 30, 2013 8:13 PM To: Jan Olszak Cc: libvirt-users@redhat.com Subject: Re: [libvirt-users] libvirt-lxc driver on armv7l On Wed, Oct 30, 2013 at 07:38:01PM +0100, Jan Olszak wrote:

Re: [libvirt-users] libvirt-lxc driver on armv7l

2013-10-30 Thread Daniel P. Berrange
On Wed, Oct 30, 2013 at 07:38:01PM +0100, Jan Olszak wrote: > Hi there, > > I'm interested in using libvirt-lxc on armv7l architecture and I have a hard > time building libvirt. > > 1. Are there any prebuild rpms for ARM? > > 2. I have many dependency issues during build: > > error: *

Re: [libvirt-users] Libvirt-lxc and systemd question

2013-07-22 Thread Daniel P. Berrange
On Mon, Jul 22, 2013 at 11:08:07AM -0400, Matt Hicks wrote: > Warning - I'm fairly new to libvirt, lxc and systemd so there is a > good chance I'm doing something terribly wrong here. However, > instead of continuing to struggle, I figured I would mail the list > for some advice. What I'm trying

Re: [libvirt-users] Libvirt-lxc and systemd question

2013-07-22 Thread Daniel P. Berrange
On Mon, Jul 22, 2013 at 11:43:02AM -0400, Matt Hicks wrote: > One note, when I first ran that (using sudo), I received the > following SELinux denials: > > type=AVC msg=audit(1374507059.429:625): avc: denied { transition } > for pid=8600 comm="virsh" path="/usr/bin/bash" dev="dm-3" > ino=184287

Re: [libvirt-users] Libvirt-lxc and systemd question

2013-07-22 Thread Matt Hicks
On 07/22/2013 11:12 AM, Daniel P. Berrange wrote: On Mon, Jul 22, 2013 at 11:08:07AM -0400, Matt Hicks wrote: Warning - I'm fairly new to libvirt, lxc and systemd so there is a good chance I'm doing something terribly wrong here. However, instead of continuing to struggle, I figured I would mai

Re: [libvirt-users] Libvirt LXC and VCPU?

2012-05-06 Thread Alex Jia
On 05/04/2012 04:45 PM, Samuel Hassine wrote: Hi, We are using Openstack and Libvirt/LXC as our virtualization endpoint. Here is an example of one of our libvirt domain: http://paste.debian.net/167276/ So we have 4. But the command : root@PAR-SRV-02-MASTER:/etc/libvirt/lxc# virsh --connect

Re: [libvirt-users] Libvirt-LXC bug/error

2012-01-17 Thread Daniel P. Berrange
On Tue, Jan 17, 2012 at 12:21:22PM +0100, Samuel Hassine, Another Service wrote: > Hi, > > I tried to create a fresh container with a minimal configuration : > > Here is the configuration: http://paste.debian.net/152553/ > > I built a minimal rootfs with busybox as descriped in: > http://berrang

Re: [libvirt-users] Libvirt-LXC bug/error

2012-01-17 Thread Samuel Hassine, Another Service
Hi, I tried to create a fresh container with a minimal configuration : Here is the configuration: http://paste.debian.net/152553/ I built a minimal rootfs with busybox as descriped in: http://berrange.com/posts/2011/09/27/getting-started-with-lxc-using-libvirt/ And I also have the same problem:

Re: [libvirt-users] [libvirt] [LXC] Tyring to locate livbvirt operations for LXC relocation

2010-04-11 Thread Avi Weit
iel P. Berrange" > > To: > > Avi Weit/Haifa/i...@ibmil > > Cc: > > libvirt-users@redhat.com > > Date: > > 04/02/2010 03:45 PM > > Subject: > > Re: [libvirt-users] [libvirt] [LXC] Tyring to locate livbvirt > operations for LXC relocation > >

Re: [libvirt-users] [libvirt] [LXC] Tyring to locate livbvirt operations for LXC relocation

2010-02-04 Thread Daniel P. Berrange
On Wed, Feb 03, 2010 at 04:03:10PM +0200, Avi Weit wrote: > > Hello, > > I am searching for the libvirt operations for relocating LXC (system or > application) containers. LXC relocation mechanism is done by checkpoint / > restart. I went over libvirt API documentation and found the following > m