wiki:TipAndDoc/Linux/LXC

Context Navigation

Version 35 (modified by mitty, 12 years ago) (diff)
--

Ubuntu 12.04
1. lxcbr0
USE_LXC_BRIDGE="false"
two NICs in one container
1. example
mount bind
1. read-only bind
X11 with VNC
1. common packages
2. GNOME
3. Xfce
4. LXDE
munin plugin
1. lxc_proc
  1. Debian 6.0
  2. Ubuntu 12.04

LinuX Container

Lxc で始めるケチケチ仮想化生活？！
Ubuntu Weekly Recipe：第226回　LXCで軽量仮想環境の活用｜gihyo.jp … 技術評論社
LXC in Ubuntu 12.04 LTS | Stéphane Graber's website
LXC 再入門
LXC入門 - Osc2011 nagoya
- lxcコンテナから(外側の)ホストOSを操作できる点について具体的に解説がある
- https://wiki.ubuntu.com/LxcSecurity Ubuntu 12.04での情報
lxc仮想環境の複製とバックアップ | 素人linux

No tun device in lxc guest for openvpn - Server Fault

# mkdir /dev/net
# mknod /dev/net/tun c 10 200
# chmod 666 /dev/net/tun

Re: (Lxc-users) loop mount inside container
Mounting a network file system inside LXC on Ubuntu 12.10 - Server Fault

SourceForge.net: Linux Containers: Detail: 3595947 - lxc-ip script to get IP addresses of the container

ホスト側のvethデバイス名を指定する
- lxc-chroot-linux-containers - Re: (Lxc-users) veth name - msg#00058 - Recent Discussion OSDir.com
- man 5 lxc.conf
  
  By default lxc choose a name for the network device belonging to the outside of the container, this name is handled by lxc, but if you wish to handle this name yourself, you can tell lxc to set a specific name with the lxc.network.veth.pair option.
- 複数のコンテナで同じ名前のpairを指定すると、二つ目は起動しない(下記の例ではtest1, test2コンテナでlxc.network.veth.pair = testと指定)
- $ sudo lxc-start -n test2
```
lxc-start: failed to create test-vethNdql6o : File exists
lxc-start: failed to create netdev
lxc-start: failed to create the network
lxc-start: failed to spawn 'test2'
lxc-start: No such file or directory - failed to remove cgroup '/sys/fs/cgroup/cpu/sysdefault/lxc/test2'
```
指定しない場合、mktemp("vethXXXXXX")で決定される
- SourceForge - lxc/lxc/blob - src/lxc/conf.c
  
  static int instanciate_veth(struct lxc_handler *handler, struct lxc_netdev *netdev)
- ホスト側の物理NIC(lxc.network.link)とリンクするveth1の名前やifindexを外部から知る手段が無い模様
  - $ sudo lxc-start -d -n test -o test.log -l DEBUG
```
      lxc-start 1356615687.534 DEBUG    lxc_conf - instanciated veth 'vethtgqRWu/vethnwRgNf', index is '99'
```
  - lxc.network.veth.pair = vtest とすると以下の様になる
```
      lxc-start 1356615810.522 DEBUG    lxc_conf - instanciated veth 'vtest/vethA3QwQ9', index is '102'
```

Ubuntu 12.04 の lxc (1) - TenForwardの日記
- コンテナの中にいるかどうかをどうやって判別しているか

mitty@precise:~$ lxc-create -t ubuntu -h

usage: lxc-create -n <name> [-f configuration] [-t template] [-h] -- [template_options]
usage: lxc-create -n <name> [-f configuration] [-t template] [-h] [fsopts] -- [template_options]
   fsopts: -B none
   fsopts: -B lvm [--lvname lvname] [--vgname vgname] [--fstype fstype] [--fssize fssize]
   fsopts: -B btrfs
           flag is not necessary, if possible btrfs support will be used

creates a lxc system object.

Options:
name         : name of the container
configuration: lxc configuration
template     : lxc-template is an accessible template script

The container backing store can be altered using '-B'.  By default it
is 'none', which is a simple directory tree under /var/lib/lxc/<name>/rootfs
Otherwise, the following option values may be relevant:
lvname       : [for -lvm] name of lv in which to create lv,
                container-name by default
vgname       : [for -lvm] name of vg in which to create lv, 'lxc' by default
fstype       : name of filesystem to create, ext4 by default
fssize       : size of filesystem to create, 1G by default

template-specific help follows: (these options follow '--')
/usr/lib/lxc/templates/lxc-ubuntu -h|--help [-a|--arch] [-b|--bindhome <user>] [--trim] [-d|--debug]
   [-F | --flush-cache] [-r|--release <release>] [ -S | --auth-key <keyfile>]
release: the ubuntu release (e.g. precise): defaults to host release on ubuntu, otherwise uses latest LTS
trim: make a minimal (faster, but not upgrade-safe) container
bindhome: bind <user>'s home into the container
          The ubuntu user will not be created, and <user> will have
          sudo access.
arch: the container architecture (e.g. amd64): defaults to host arch
auth-key: SSH Public key file to inject into container

Ubuntu 12.04

http://manpages.ubuntu.com/manpages/precise/man5/lxc.conf.5.html

mitty@precise:~$ sudo aptitude install lxc

The following NEW packages will be installed:
  bridge-utils{a} cgroup-lite{a} cloud-utils{a} debootstrap{a}
  dnsmasq-base{a} euca2ools{a} libapparmor1{a} libcap2-bin{a} libgmp10{a}
  libnetfilter-conntrack3{a} libpam-cap{a} libyaml-0-2{a} lxc
  python-boto{a} python-crypto{a} python-m2crypto{a} python-paramiko{a}
  python-yaml{a}
0 packages upgraded, 18 newly installed, 0 to remove and 0 not upgraded.
Need to get 2,873 kB of archives. After unpacking 16.1 MB will be used.

lxcbr0

mitty@precise:~$ ifconfig lxcbr0

lxcbr0    Link encap:Ethernet  HWaddr 12:5e:23:12:4a:0f
          inet addr:10.0.3.1  Bcast:10.0.3.255  Mask:255.255.255.0
          inet6 addr: fe80::105e:23ff:fe12:4a0f/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:7 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 B)  TX bytes:554 (554.0 B)

/etc/default/lxc

USE_LXC_BRIDGE="true"


LXC_BRIDGE="lxcbr0"
LXC_ADDR="10.0.3.1"
LXC_NETMASK="255.255.255.0"
LXC_NETWORK="10.0.3.0/24"
LXC_DHCP_RANGE="10.0.3.2,10.0.3.254"
LXC_DHCP_MAX="253"

/etc/lxc/lxc.conf

lxc.network.type=veth
lxc.network.link=lxcbr0
lxc.network.flags=up

/etc/dnsmasq.d/lxc

bind-interfaces
except-interface=lxcbr0

/etc/init/lxc-net.conf も参考になる

USE_LXC_BRIDGE="false"

手動でLXCコンテナのNAT設定を行う
eth0 -> br0にブリッジされていて、KVMで使用
- LXCとKVMの共存のテスト

ip forwarding

mitty@precise:~$ cat /etc/sysctl.d/60-ip_forward.conf

net.ipv4.ip_forward=1
net.ipv6.conf.all.forwarding=1

mitty@precise:~$ cat /etc/network/interfaces

# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).

# The loopback network interface
auto lo
iface lo inet loopback

# The primary network interface
auto eth0
iface eth0 inet manual

auto br0
iface br0 inet dhcp
	bridge_ports eth0 eth0
	bridge_maxwait 0

auto lxcbr0
iface lxcbr0 inet static
	bridge_ports none
	bridge_maxwait 0
	address 10.0.0.254
	netmask 255.255.255.0
	post-up iptables -A POSTROUTING -s 10.0.0.0/24 -t nat -j MASQUERADE
	pre-down iptables -D POSTROUTING -s 10.0.0.0/24 -t nat -j MASQUERADE

change apt repository mirror and disable auto start lxcbr0

デフォルトのミラーが遅いので、ftp.tsukubaに変更
lxcの起動スクリプトによるlxcbr0の作成を抑制

mitty@precise:~$ cat /etc/default/lxc

MIRROR="http://ftp.tsukuba.wide.ad.jp/Linux/ubuntu"

USE_LXC_BRIDGE="false"

host settings

mitty@precise:~$ ifconfig -a

br0       Link encap:Ethernet  HWaddr 52:54:00:bc:53:bc
          inet addr:192.168.10.172  Bcast:192.168.10.255  Mask:255.255.255.0
          inet6 addr: fe80::5054:ff:febc:53bc/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:1340 errors:0 dropped:0 overruns:0 frame:0
          TX packets:948 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:116870 (116.8 KB)  TX bytes:111171 (111.1 KB)

eth0      Link encap:Ethernet  HWaddr 52:54:00:bc:53:bc
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:1400 errors:0 dropped:0 overruns:0 frame:0
          TX packets:945 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:150975 (150.9 KB)  TX bytes:110725 (110.7 KB)

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

lxcbr0    Link encap:Ethernet  HWaddr 4a:5a:12:a4:0a:ac
          inet addr:10.0.0.254  Bcast:10.0.0.255  Mask:255.255.255.0
          inet6 addr: fe80::485a:12ff:fea4:aac/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:4 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 B)  TX bytes:408 (408.0 B)

mitty@precise:~$ ip route

default via 192.168.10.254 dev br0  metric 100
10.0.0.0/24 dev lxcbr0  proto kernel  scope link  src 10.0.0.254
192.168.10.0/24 dev br0  proto kernel  scope link  src 192.168.10.172

mitty@precise:~$ brctl show

bridge name     bridge id               STP enabled     interfaces
br0             8000.525400bc53bc       no              eth0
lxcbr0          8000.000000000000       no

iptables on host

mitty@precise:~$ sudo iptables -L -t nat -vx

Chain PREROUTING (policy ACCEPT 30 packets, 10827 bytes)
    pkts      bytes target     prot opt in     out     source               destination

Chain INPUT (policy ACCEPT 4 packets, 323 bytes)
    pkts      bytes target     prot opt in     out     source               destination

Chain OUTPUT (policy ACCEPT 83 packets, 5999 bytes)
    pkts      bytes target     prot opt in     out     source               destination

Chain POSTROUTING (policy ACCEPT 83 packets, 5999 bytes)
    pkts      bytes target     prot opt in     out     source               destination
       0        0 MASQUERADE  all  --  any    any     10.0.0.0/24          anywhere

MASQUERADEが正しく設定されている

make LXC container with ubuntu template

mitty@precise:~$ sudo lxc-create -t ubuntu -n lxc-test

No config file specified, using the default config
debootstrap is /usr/sbin/debootstrap
Checking cache download in /var/cache/lxc/precise/rootfs-amd64 ...
installing packages: vim,ssh
Downloading ubuntu precise minimal ...
I: Retrieving Release
I: Retrieving Release.gpg
I: Checking Release signature

....

I: Checking component main on http://ftp.tsukuba.wide.ad.jp/Linux/ubuntu...

....

Processing triggers for initramfs-tools ...
Download complete
Copy /var/cache/lxc/precise/rootfs-amd64 to /var/lib/lxc/lxc-test/rootfs ...
Copying rootfs to /var/lib/lxc/lxc-test/rootfs ...

##
# The default user is 'ubuntu' with password 'ubuntu'!
# Use the 'sudo' command to run tasks as root in the container.
##

'ubuntu' template installed
'lxc-test' created

set container IP with LXC/config

LXCコンテナのconfigファイルからIPアドレスを指定する
結論としては、デフォルトゲートウェイなどを設定できないので、不便

mitty@precise:~$ sudo vim /var/lib/lxc/lxc-test/config
```
lxc.network.ipv4 = 10.0.0.10/24
```

mitty@precise:~$ sudo lxc-start -n lxc-test -d

mitty@precise:~$ ping 10.0.0.10 -c 1

PING 10.0.0.10 (10.0.0.10) 56(84) bytes of data.
64 bytes from 10.0.0.10: icmp_req=1 ttl=64 time=0.060 ms

--- 10.0.0.10 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.060/0.060/0.060/0.000 ms

mitty@precise:~$ ssh 10.0.0.10 -l ubuntu

ubuntu@lxc-test:~$ ifconfig

eth0      Link encap:Ethernet  HWaddr 00:16:3e:ba:3e:ef
          inet addr:10.0.0.10  Bcast:10.0.0.255  Mask:255.255.255.0

ubuntu@lxc-test:~$ ip route

10.0.0.0/24 dev eth0  proto kernel  scope link  src 10.0.0.10

ubuntu@lxc-test:~$ ping 8.8.8.8
```
connect: Network is unreachable
```

set container IP with interfaces

ホストOS上から、あらかじめコンテナのinterfacesファイルを設定して、起動する
間違いが無く、かつ楽そう

mitty@precise:~$ sudo vim /var/lib/lxc/lxc-test/rootfs/etc/network/interfaces

auto eth0
iface eth0 inet static
	address 10.0.0.1
	netmask 255.255.255.0
	gateway 10.0.0.254

mitty@precise:~$ ssh 10.0.0.1 -l ubuntu

ubuntu@lxc-test:~$ ifconfig

eth0      Link encap:Ethernet  HWaddr 00:16:3e:ba:3e:ef
          inet addr:10.0.0.1  Bcast:10.0.0.255  Mask:255.255.255.0

ubuntu@lxc-test:~$ ip route

default via 10.0.0.254 dev eth0  metric 100
10.0.0.0/24 dev eth0  proto kernel  scope link  src 10.0.0.1

ubuntu@lxc-test:~$ ping 8.8.8.8 -c 1

PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.
64 bytes from 8.8.8.8: icmp_req=1 ttl=52 time=7.66 ms

--- 8.8.8.8 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 7.667/7.667/7.667/0.000 ms

two NICs in one container

Re: (Lxc-users) two NICs in container

example

通常のbridge(veth)ではなくmacvlanであるが、vethでも同じはず

/var/lib/lxc/test/config

lxc.network.type=macvlan
lxc.network.macvlan.mode=bridge
lxc.network.link=em1
lxc.network.flags=up
lxc.network.hwaddr = 00:16:3e:85:2e:da
lxc.network.type=macvlan
lxc.network.macvlan.mode=bridge
lxc.network.link=em1
lxc.network.flags=up
lxc.network.hwaddr = 00:16:3e:85:2e:db

mitty@test:~$ ifconfig -a | egrep 'addr|Link'

eth0      Link encap:Ethernet  HWaddr 00:16:3e:85:2e:da
          inet addr:192.168.83.207  Bcast:192.168.83.255  Mask:255.255.255.0
          inet6 addr: fe80::216:3eff:fe85:2eda/64 Scope:Link
eth1      Link encap:Ethernet  HWaddr 00:16:3e:85:2e:db
          inet addr:192.168.83.212  Bcast:192.168.83.255  Mask:255.255.255.0
          inet6 addr: fe80::216:3eff:fe85:2edb/64 Scope:Link
lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host

mitty@test:~$ ip route

default via 192.168.83.243 dev eth0
192.168.83.0/24 dev eth0  proto kernel  scope link  src 192.168.83.207
192.168.83.0/24 dev eth1  proto kernel  scope link  src 192.168.83.212

mount bind

/var/lib/lxc/>container name>/fstab を用いて、ホストの特定ディレクトリ以下をゲストにbind出来る

fstab

/media mnt none bind 0 0

host:/media -> guest:/mnt とマウントされる
mntに「/」が無いことに注意

mitty@lxc:~$ mount

/dev/disk/by-uuid/XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX on /mnt type ext4 (rw,relatime,errors=remount-ro,user_xattr,barrier=1,data=ordered)

mitty@lxc:~$ ls -l /mnt/

total 0
-rw-r--r-- 1 root root 0 Oct 23 22:01 host-media

mitty@lxc:~$ sudo rm /mnt/host-media
```
removed `/mnt/host-media'
```

mitty@host:~$ ls -l /media/host-media

ls: cannot access /media/host-media: No such file or directory

read-only bind

fstab
```
/media mnt none bind,ro 0 0
```
mountコマンドの出力結果は「(rw,relatime,errors=remount-ro,user_xattr,barrier=1,data=ordered)」で変わらないが、read-only化される

mitty@lxc:~$ sudo rm /mnt/host-media

rm: cannot remove `/mnt/host-media': Read-only file system

X11 with VNC

12.04上のLXCでは、configのcgroupの設定やmknodなどは特に必要ない模様
vnc自体については => network/vnc

基本的にaptitude install -Rでインストールしている
エラーメッセージについては ~/.vnc/ 以下に保存されるログファイルから

common packages

vnc4server
xfonts-base
```
could not open default font 'fixed'
```

GNOME

gnome

unity-2d

gnome-session[5129]: WARNING: GSIdleMonitor: IDLETIME counter not found
gnome-session[5129]: WARNING: Session 'ubuntu' runnable check failed: Exited with code 1
gnome-session[5129]: WARNING: Unable to find default provider 'unity-2d-panel' of required provider 'panel'
gnome-session[5129]: WARNING: Unable to find default provider 'unity-2d-shell' of required provider 'shell'

Ubuntu日本語フォーラム / 11.10でUnityを削除してみたら起動しなくなってしまいました

~/.vnc/xstartup

xsetroot -solid grey
exec gnome-session &

Xfce

xfce4

~/.vnc/xstartup
```
xsetroot -solid grey
exec startxfce4 &
```

もしくは

xsetroot -solid grey
exec xfce4-session &

後者だとTrashディレクトリなどがFile Managerに表示されない

- ファイルアイコンが表示されない

LXDE

lxde

~/.vnc/xstartup

xsetroot -solid grey
exec lxsession -s LXDE &

-s LXDEは無くても良い模様

munin plugin

github:vajtsz/munin-plugins

lxc_proc

github:vajtsz/munin-plugins/blob/6a426b4bde7addcaf42d72a033e713d0f11776c0/squeeze/lxc_proc#L77
- Debian Squeezeと異なり、Ubuntu 12.04ではlxc-cgroup -t container_name tasksが使えない

https://www.kernel.org/doc/Documentation/cgroups/cgroups.txt
Each cgroup is represented by a directory in the cgroup file system containing the following files describing that cgroup:
- tasks: list of tasks (by pid) attached to that cgroup. This list is not guaranteed to be sorted. Writing a thread id into this file moves the thread into this cgroup.
- cgroup.procs: list of tgids in the cgroup. This list is not guaranteed to be sorted or free of duplicate tgids, and userspace should sort/uniquify the list if this property is required. Writing a thread group id into this file moves all threads in that group into this cgroup.
- notify_on_release flag: run the release agent on exit?
- release_agent: the path to use for release notifications (this file exists in the top cgroup only)

まとめ
- lxc-cgroupコマンドを使わない場合、以下のsysfsにアクセスすると良い模様
- Debian 6.0: /sys/fs/cgroup/<container>/tasks
- Ubuntu 12.04 with fstab: /sys/fs/cgroup/lxc/<container>/tasks
- Ubuntu 12.04 with cgroup-lite: /sys/fs/cgroup/cpuacct/lxc/<container>/tasks
- Ubuntu 12.04 with cgroup-bin: /sys/fs/cgroup/cpuacct/sysdefault/lxc/<container>/tasks

Debian 6.0

http://wiki.debian.org/LXC
Add this line to /etc/fstab
```
cgroup  /sys/fs/cgroup  cgroup  defaults  0   0
```
Try to mount it (a reboot solves an eventual "resource busy problem" in any case)
```
mount /sys/fs/cgroup
```

$ sudo lxc-start -d -n lxc-test
$ sudo lxc-cgroup -n lxc-test tasks
```
1432
1569
1571
1598
```

$ ls -1F /sys/fs/cgroup/

cgroup.procs
cpuacct.stat
cpuacct.usage
cpuacct.usage_percpu
cpuset.cpu_exclusive
cpuset.cpus
cpuset.mem_exclusive
cpuset.mem_hardwall
cpuset.memory_migrate
cpuset.memory_pressure
cpuset.memory_pressure_enabled
cpuset.memory_spread_page
cpuset.memory_spread_slab
cpuset.mems
cpuset.sched_load_balance
cpuset.sched_relax_domain_level
cpu.shares
devices.allow
devices.deny
devices.list
lxc-test/
net_cls.classid
notify_on_release
release_agent
tasks

/sys/fs/cgroup/lxc-test/ も同じ構造

$ cat /sys/fs/cgroup/lxc-test/tasks
```
1432
1569
1571
1598
```

Ubuntu 12.04

Ubuntu 12.04 with aptitude install -R lxc
- cgroup関係のパッケージは-Rをつけるとインストールされない
$ ls -1F /sys/fs/cgroup/
- N/A
$ sudo lxc-start -n lxc-test
```
lxc-start: failed to spawn 'lxc-test'
```

/etc/fstab

Ubuntu 12.04 with /etc/fstab:cgroup /sys/fs/cgroup cgroup defaults 0 0
- 起動時に自動でマウントされないため、mount -aする必要がある

$ sudo mount -a
$ sudo lxc-start -d -n lxc-test

$ sudo lxc-cgroup -n lxc-test tasks

lxc-cgroup: cgroup is not mounted
lxc-cgroup: failed to retrieve value of 'tasks' for 'lxc-test'

$ ls -1F /sys/fs/cgroup/

blkio.io_merged
blkio.io_queued
blkio.io_service_bytes
blkio.io_serviced
blkio.io_service_time
blkio.io_wait_time
blkio.reset_stats
blkio.sectors
blkio.throttle.io_service_bytes
blkio.throttle.io_serviced
blkio.throttle.read_bps_device
blkio.throttle.read_iops_device
blkio.throttle.write_bps_device
blkio.throttle.write_iops_device
mitty@lein:~$ ls -1F /sys/fs/cgroup/
blkio.io_merged
blkio.io_queued
blkio.io_service_bytes
blkio.io_serviced
blkio.io_service_time
blkio.io_wait_time
blkio.reset_stats
blkio.sectors
blkio.throttle.io_service_bytes
blkio.throttle.io_serviced
blkio.throttle.read_bps_device
blkio.throttle.read_iops_device
blkio.throttle.write_bps_device
blkio.throttle.write_iops_device
blkio.time
blkio.weight
blkio.weight_device
cgroup.clone_children
cgroup.event_control
cgroup.procs
cpuacct.stat
cpuacct.usage
cpuacct.usage_percpu
cpu.cfs_period_us
cpu.cfs_quota_us
cpu.rt_period_us
cpu.rt_runtime_us
cpuset.cpu_exclusive
cpuset.cpus
cpuset.mem_exclusive
cpuset.mem_hardwall
cpuset.memory_migrate
cpuset.memory_pressure
cpuset.memory_pressure_enabled
cpuset.memory_spread_page
cpuset.memory_spread_slab
cpuset.mems
cpuset.sched_load_balance
cpuset.sched_relax_domain_level
cpu.shares
cpu.stat
devices.allow
devices.deny
devices.list
lxc/
memory.failcnt
memory.force_empty
memory.limit_in_bytes
memory.max_usage_in_bytes
memory.memsw.failcnt
memory.memsw.limit_in_bytes
memory.memsw.max_usage_in_bytes
memory.memsw.usage_in_bytes
memory.move_charge_at_immigrate
memory.numa_stat
memory.oom_control
memory.soft_limit_in_bytes
memory.stat
memory.swappiness
memory.usage_in_bytes
memory.use_hierarchy
notify_on_release
release_agent
tasks

/sys/fs/cgroup/lxc/, /sys/fs/cgroup/lxc/lxc-test/ も同じ構造

$ cat /sys/fs/cgroup/lxc/lxc-test/tasks

cgroup-lite

Ubuntu 12.04 with cgroup-lite
- aptitude install時に-Rとしない場合、cgroup-liteがRecommendsからインストールされる
- /bin/cgroups-mount
```
mount -t tmpfs -o uid=0,gid=0,mode=0755 cgroup /sys/fs/cgroup
```

$ sudo lxc-cgroup -n lxc-test tasks

lxc-cgroup: cgroup is not mounted
lxc-cgroup: failed to retrieve value of 'tasks' for 'lxc-test'

$ ls -1F /sys/fs/cgroup/

blkio/
cpu/
cpuacct/
cpuset/
devices/
freezer/
memory/
perf_event/

$ find /sys/fs/cgroup/ | grep lxc-test/tasks | xargs wc

17 17 102 /sys/fs/cgroup/perf_event/lxc/lxc-test/tasks
17 17 102 /sys/fs/cgroup/blkio/lxc/lxc-test/tasks
17 17 102 /sys/fs/cgroup/freezer/lxc/lxc-test/tasks
17 17 102 /sys/fs/cgroup/devices/lxc/lxc-test/tasks
17 17 102 /sys/fs/cgroup/memory/lxc/lxc-test/tasks
17 17 102 /sys/fs/cgroup/cpuacct/lxc/lxc-test/tasks
17 17 102 /sys/fs/cgroup/cpu/lxc/lxc-test/tasks
17 17 102 /sys/fs/cgroup/cpuset/lxc/lxc-test/tasks

$ cat /sys/fs/cgroup/perf_event/lxc/lxc-test/tasks

cgroup-bin

Ubuntu 12.04 with cgroup-bin
- cgroup-binとcgroup-liteはコンフリクトする
- /etc/init/cgconfig.conf
```
mount -t tmpfs -o uid=0,gid=0,mode=0755 cgroups /sys/fs/cgroup
```

$ sudo lxc-cgroup -n lxc-test tasks

lxc-cgroup: cgroup is not mounted
lxc-cgroup: failed to retrieve value of 'tasks' for 'lxc-test'

$ ls -1F /sys/fs/cgroup/

cpu/
cpuacct/
devices/
freezer/
memory/

$ find /sys/fs/cgroup/ | grep lxc-test/tasks | xargs wc

16 16 80 /sys/fs/cgroup/freezer/sysdefault/lxc/lxc-test/tasks
16 16 80 /sys/fs/cgroup/memory/sysdefault/lxc/lxc-test/tasks
16 16 80 /sys/fs/cgroup/devices/sysdefault/lxc/lxc-test/tasks
16 16 80 /sys/fs/cgroup/cpuacct/sysdefault/lxc/lxc-test/tasks
16 16 80 /sys/fs/cgroup/cpu/sysdefault/lxc/lxc-test/tasks

$ cat /sys/fs/cgroup/freezer/sysdefault/lxc/lxc-test/tasks

Context Navigation

Ubuntu 12.04

lxcbr0

USE_LXC_BRIDGE="false"

ip forwarding

change apt repository mirror and disable auto start lxcbr0

host settings

iptables on host

make LXC container with ubuntu template

set container IP with LXC/config

set container IP with interfaces

two NICs in one container

example

mount bind

read-only bind

X11 with VNC

common packages

GNOME

Xfce

LXDE

munin plugin

lxc_proc

Debian 6.0

Ubuntu 12.04

/etc/fstab

cgroup-lite

cgroup-bin

Attachments (4)

Download in other formats: