• LinuX Container

• ​Ubuntu Weekly Recipe：第226回　LXCで軽量仮想環境の活用｜gihyo.jp … 技術評論社
• ​LXC in Ubuntu 12.04 LTS | Stéphane Graber's website
• ​LXC 再入門
• ​LXC入門 - Osc2011 nagoya
  • lxcコンテナから(外側の)ホストOSを操作できる点について具体的に解説がある
  • ​https://wiki.ubuntu.com/LxcSecurity Ubuntu 12.04での情報

• mitty@precise:~$ lxc-create -t ubuntu -h

  usage: lxc-create -n <name> [-f configuration] [-t template] [-h] -- [template_options]
  usage: lxc-create -n <name> [-f configuration] [-t template] [-h] [fsopts] -- [template_options]
     fsopts: -B none
     fsopts: -B lvm [--lvname lvname] [--vgname vgname] [--fstype fstype] [--fssize fssize]
     fsopts: -B btrfs
             flag is not necessary, if possible btrfs support will be used
  
  creates a lxc system object.
  
  Options:
  name         : name of the container
  configuration: lxc configuration
  template     : lxc-template is an accessible template script
  
  The container backing store can be altered using '-B'.  By default it
  is 'none', which is a simple directory tree under /var/lib/lxc/<name>/rootfs
  Otherwise, the following option values may be relevant:
  lvname       : [for -lvm] name of lv in which to create lv,
                  container-name by default
  vgname       : [for -lvm] name of vg in which to create lv, 'lxc' by default
  fstype       : name of filesystem to create, ext4 by default
  fssize       : size of filesystem to create, 1G by default
  
  template-specific help follows: (these options follow '--')
  /usr/lib/lxc/templates/lxc-ubuntu -h|--help [-a|--arch] [-b|--bindhome <user>] [--trim] [-d|--debug]
     [-F | --flush-cache] [-r|--release <release>] [ -S | --auth-key <keyfile>]
  release: the ubuntu release (e.g. precise): defaults to host release on ubuntu, otherwise uses latest LTS
  trim: make a minimal (faster, but not upgrade-safe) container
  bindhome: bind <user>'s home into the container
            The ubuntu user will not be created, and <user> will have
            sudo access.
  arch: the container architecture (e.g. amd64): defaults to host arch
  auth-key: SSH Public key file to inject into container
  

Ubuntu 12.04

• mitty@precise:~$ sudo aptitude install lxc

  The following NEW packages will be installed:
    bridge-utils{a} cgroup-lite{a} cloud-utils{a} debootstrap{a}
    dnsmasq-base{a} euca2ools{a} libapparmor1{a} libcap2-bin{a} libgmp10{a}
    libnetfilter-conntrack3{a} libpam-cap{a} libyaml-0-2{a} lxc
    python-boto{a} python-crypto{a} python-m2crypto{a} python-paramiko{a}
    python-yaml{a}
  0 packages upgraded, 18 newly installed, 0 to remove and 0 not upgraded.
  Need to get 2,873 kB of archives. After unpacking 16.1 MB will be used.
  

lxcbr0

• mitty@precise:~$ ifconfig lxcbr0

  lxcbr0    Link encap:Ethernet  HWaddr 12:5e:23:12:4a:0f
            inet addr:10.0.3.1  Bcast:10.0.3.255  Mask:255.255.255.0
            inet6 addr: fe80::105e:23ff:fe12:4a0f/64 Scope:Link
            UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
            RX packets:0 errors:0 dropped:0 overruns:0 frame:0
            TX packets:7 errors:0 dropped:0 overruns:0 carrier:0
            collisions:0 txqueuelen:0
            RX bytes:0 (0.0 B)  TX bytes:554 (554.0 B)
  

  • /etc/default/lxc

    USE_LXC_BRIDGE="true"
    
    
    LXC_BRIDGE="lxcbr0"
    LXC_ADDR="10.0.3.1"
    LXC_NETMASK="255.255.255.0"
    LXC_NETWORK="10.0.3.0/24"
    LXC_DHCP_RANGE="10.0.3.2,10.0.3.254"
    LXC_DHCP_MAX="253"
    

  • /etc/lxc/lxc.conf

    lxc.network.type=veth
    lxc.network.link=lxcbr0
    lxc.network.flags=up
    

  • /etc/dnsmasq.d/lxc

    bind-interfaces
    except-interface=lxcbr0
    

• /etc/init/lxc-net.conf も参考になる