Re: [lxc-users] Network isolation in unprivileged containers

2015-10-19 Thread Andrey Repin
Greetings, Akshay Karle! > I've been looking at ways to isolate the network of each unprivileged > container that I create. I was thinking of putting each container in it's > own vlan or creating a macvlan in private mode. I haven't had success with > either. I also tried creating bridges for ever

[lxc-users] Network isolation in unprivileged containers

2015-10-19 Thread Akshay Karle
Hello, I've been looking at ways to isolate the network of each unprivileged container that I create. I was thinking of putting each container in it's own vlan or creating a macvlan in private mode. I haven't had success with either. I also tried creating bridges for every container and attaching

Re: [lxc-users] Something changed between 1.1.2 and 1.1.4 for unprivileged containers?

2015-10-19 Thread Dirk Geschke
Hi Fajar, > > $ grep -v ^# .local/share/lxc/lxc-geschke/config > > > > lxc.include = /usr/local/share/lxc/config/debian.common.conf > > lxc.include = /usr/local/share/lxc/config/debian.userns.conf > > lxc.arch = x86_64 > > > > lxc.include = /usr/local/share/lxc/config/debian.common.conf > > lxc.in

Re: [lxc-users] docker in lxc

2015-10-19 Thread Tamas Papp
Whooo. Thanks in advance, guys! I'm not a programmer, cannot work by myself on this, but look forward the feature. Please keep the list posted, I'm sure many of us are interested and also willing to test the code. Cheers, tamas On 10/16/2015 07:08 PM, Serge Hallyn wrote: Absolutely! I've n

Re: [lxc-users] Raw socket works not right in lxc

2015-10-19 Thread Bostjan Skufca
This seems like NAT issue on the host. Did you do "iptables -t nat -I -o lxcbrX -o phyY -j MASQUERADE"? b. On 14 October 2015 at 11:25, wrote: > I use raw socket to send an ip packet and fill the source ip 5.5.5.5. I > use tcpdump to capture it: > > * 15:01:29.385061 IP 5.5.5.5 > 224.0.0.18