Questions tagged [lxc]
Linux Containers (LXC) is a userspace interface for operating system-level virtualization features in the mainline Linux kernel, such as kernel namespaces and control groups (cgroups). These allow multiple distinct user space instances to be run on a single kernel. Note: the 3 letters "lxc" command is part of LXD, not LXC. Please use the LXD tag if your question is about LXD rather than only about LXC.
335 questions
1
vote
1
answer
95
views
Restricting wayland GUI applications from accessing all screen content
I'm using Debian/trixie (current stable) and heavily containerised projects / applications via LXC/incus into unprivileged containers; each having their own isolated UID/GID range.
Most of the ...
0
votes
1
answer
24
views
Cacti: works all but..no chars
I have installed cacti on Slackware 15.0 lxc container.
a) installing cacti ok
b) installing rrdtool ok
c) installing and configuring mariadb and httpd ok
d) running cacti setup ok, edited php.ini, ...
2
votes
1
answer
125
views
Debian Trixie, how to attach lxc-container using systemd mode?
I start my container using systemd (old method starting manually don't work with Debian 13) those two questions explain how
Why my lxc container stop when I close ssh session with host?
Debian Trixie: ...
0
votes
2
answers
91
views
why container process on Debian Trixie are not more visible from host?
On Old Debian 12, I can see container process using ps from root. On Debian 13 not, The situation:
On container
ps -ef|grep -i ora
oracle 230 1 0 Aug10 ? 00:00:00 /usr/lib/systemd/...
0
votes
1
answer
56
views
Why my lxc container stop when I close ssh session with host?
I have created this service to start lxc container.
#
# ~/.config/systemd/user/container.service
#
[Unit]
Description=lxc-autostart containers
DefaultDependencies=no
Wants=network.target lxc.service
[...
0
votes
1
answer
204
views
Debian Trixie: problems with Lxc unprivileged Containers
On Debian 12 bullseye all works fine.
This is the situation on Debian Trixie (released stable some days ago)
lxc-ls: ../src/lxc/utils.c: switch_to_ns: 900 Operation not permitted - Failed to set ...
2
votes
1
answer
327
views
Running docker in an unprivileged devuan lxc container (on proxmox)
I am configuring a single-node proxmox server for use as a home server/homelab. I am looking to run many of my generic applications (like immich, jellyfin, etc) in docker containers, which could all ...
0
votes
1
answer
81
views
Location of LXC user-owned containers
I am setting up some LXC containers as a normal user. I have followed all the steps in the manual for user-owned unprivileged containers, and the instances I created are running fine.
I used a ...
0
votes
0
answers
268
views
LXC Container on Proxmox Can’t Resolve DNS — Outbound UDP Works, But No Replies
I'm trying to configure a reverse proxy on an LXC Container in proxmox, however the container is not able to resolve DNS. The proxmox node has no issue with DNS, and both the node and the container ...
1
vote
3
answers
488
views
Alpine linux (LXC) not running cron jobs
I have been trying for a long to make the crontab entries to run, but it doesn't matter what Time / schedule I enter, it doesn't seem to work. I have confirmed my current time zone with date command &...
0
votes
0
answers
23
views
Lxc: how to set name of veth?
I have tried this for a lxc container
lxc.net.0.veth.pair = vethvlan2
but when container start it takes a random name
br1 ************ no enp7s0.1
...
0
votes
1
answer
185
views
Firewall in Bridged LXC Containers
I am new to networking, and I am trying to implement a firewall inside an LXC container (Alpine Linux) that is bridged with another LXC container (Alpine Linux) through a br0 interface.
Right now, my ...
1
vote
1
answer
60
views
disconnect packages managed by alpine apk but keep them on the system
I've installed nextcloud on proxmox in an alpine container using ttecks (rip!) helper script. After some tweaks, I am now able to update nextcloud from the application itself.
Now I have the following ...
0
votes
1
answer
530
views
Attach gdb from a docker container to a process running in a different PID namespace
I built a docker image with gcc binutils and gdb debugger installed inside.
I would attach gdb from that docker container to a process inside a lxc container running on the same Linux host. The lxc ...
1
vote
0
answers
189
views
Right way to recursively share a path (like a symlink) and proper way to unmount/remount without messing with other mount points
Bind mounts seem to be hard. I am looking for the right way to use a bind mount to mount a given directory to another one pretty much like a symlink (but I can't use a symlink because my application ...
0
votes
0
answers
31
views
IPC_LOCK not available at LXC startup during boot
I am running a Linux Container (LXC) with (Hashicorp) vault installed that requires IPC_LOCK.
Whenever I reboot or boot, it fails to start up vault with autostart. From what I can see in the logs it ...
0
votes
1
answer
418
views
Incus - Setting migration.stateful for stateful snapshots
I'm trying to get to grips with Incus, because it looks like it is a fork of Canonical's LXD, which I can run fairly easily on Debian 12 with a deb package, rather than using snaps.
I have it all set ...
2
votes
1
answer
62
views
Why does "pgrep -O 600" fail in an LXC? procps bug?
Debian 12.2 in an unpriviledged LXC (proxmox). It's almost 11:45 AM local time. At 5:00 AM in the morning, cron started a script:
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME ...
0
votes
1
answer
1k
views
Obtain a Wordpress Website with a Proxmox container available from outside with https (ssl encryption)
My prelimanary actions:
setting up a ddns hostname with noip service (ok)
configured to automatically keep alive the association on my home router(ok)
installed a proxmox server v8 (ok)
create a lxc ...
1
vote
0
answers
376
views
How can I import lxc containers back from the snapshots the lxc create just before the `lxc snap` is removed?
I have an Ubuntu 22.04 node, which used to have lxd v5 installed through snap. It used to have 3 containers, at the moment of remove the lxd using the snap remove lxd it did take a snapshot of all the ...
1
vote
1
answer
176
views
Remote SMTP traffic appears to come from LXC Host to container
Summary: I have a mail server (exim 4, Debian 10) in an LXC container. The host is running Debian 11. Since yesterday evening spam traffic has been coming in that appears to come from the LXC Host. ...
3
votes
0
answers
1k
views
udev inside lxc container
I am running a privileged Debian LXC Container on Proxmox, and then running Docker inside that. I am attempting to run an Xserver in a Docker container with Sunshine to stream to a Moonlight client. I ...
9
votes
1
answer
3k
views
"Error: Too many open files" while starting service in environment with several LXCs
Environment:
I am using a CentOS-7 as a hypervisor for running several LXCs under libvirt. Each container runs a minimal installation of CentOS-7 with cut down FreePBX (Asterisk, Apache, MySQL + bits)....
0
votes
0
answers
301
views
Configure IPv6 DNS server via DHCP in LXC container
I have an LXC container created and started as follows:
sudo lxc-create -t debian -n mylxc -- --release bullseye
sudo lxc-start -n mylxc
sudo lxc-attach -n mylxc
On the LXC host I have a DHCP server ...
1
vote
2
answers
2k
views
LXD ZFS storage pool on lvm filesystem?
The default filesystem of my machine is lvm (Ubuntu 22.04). I would like to spin up LXD/LXC virtual machines to run some Apache projects like Hadoop and Spark. When setting up Hadoop there is a step ...
1
vote
1
answer
2k
views
How to SSH to a host and attach an LXC container in one command, properly?
I'd like to connect to a LXC container through Proxmox via SSH without having SSH access to the container itself, so I can get the desired outcome by connecting to the Proxmox host first and then ...
6
votes
2
answers
9k
views
No network in Waydroid: network is unreachable
I've followed Waydroid arch-wiki page and have installed waydroid, binder_linux-dkms and waydroid-image-gapps.
When I run waydroid it works perfectly except for the network part.
I do have new ...
1
vote
3
answers
8k
views
What is the ID of nobody user and nogroup group?
When trying LXD, I tried to share a folder from my computer with the LXC Container, but I could not write in the folder in the container because ls -l shows that it belongs to user nobody and group ...
3
votes
4
answers
1k
views
Persist resolvectl changes across reboots
I'm using LXC containers, and resolving CONTAINERNAME.lxd to the IP of the specified container, using:
sudo resolvectl dns lxdbr0 $bridge_ip
sudo resolvectl domain lxdbr0 '~lxd'
This works great! But ...
0
votes
1
answer
1k
views
How can I monitor individual containers resource usage in LXD/C
I would like to be able to view which individual containers are using what percentage of CPU, memory etc.
I have installed HTOP but it doesn't tell me which container, and I have 20+ containers ...
1
vote
0
answers
550
views
How to set permissions for passthrough USB device in libvirt LXC guest?
I have an lxc type guest in libvirt to which I pass through a USB device like this:
<hostdev mode="subsystem" type="usb" managed="yes">
<source>
<...
0
votes
1
answer
2k
views
Docker on Debian Failing to Bind to Port 80
I am running Docker on Debian 11. I deploy an Nginx container and it fails to bind to port 80 even though port 80 is not in use by any other process. I even tried running Docker as root.
Here's the ...
2
votes
2
answers
1k
views
Why is the Linux command `unshare --pid=p --mount=m` not creating a persistent namespace?
From everything I have read in the unshare and nsenter man pages, I should be able to bind-mount a directory to itself, mount --make-private the directory, and then use files within that directory to ...
1
vote
1
answer
296
views
LXC: exposed file from host has 000 permissions in rootfs dir
I have the following in the /var/lib/lxc/container1/config so my container can see the file from the host.
lxc.mount.entry = /etc/someconf.conf etc/someconf.conf none bind,create=file 0 0
I can see ...
5
votes
1
answer
1k
views
Why is systemd stuck at 100% inside my new Ubuntu LXC container?
I am trying to create an LXC container with xubuntu desktop inside it. This is on a fresh Ubuntu 22.04 install with sudo lxc launch images:ubuntu/22.04 workstation executed to create the container, ...
1
vote
1
answer
217
views
Is it possible to use a file as Filesystem?
Here is the origin of my question:
I'm running Linux containers with LXD snap version at Ubuntu 22.04 on a VPS. The root file system of the VPS is Ext4 and there is not additional storage attached. ...
0
votes
0
answers
4k
views
dmesg: read kernel buffer failed: Permission denied with root user in LXC container after Ubuntu upgrade
I had an LXC container running in Proxmox with Ubuntu 21.04. In this container dmesg worked as expected with a root user.
I used do-release-upgrade and successfully upgraded the LXC container to ...
1
vote
2
answers
2k
views
Cannot autostart unprivileged LXC containers on Debian 11 Bullseye
lxc-autostart won't start unprivileged containers in Debian 11 Bullseye.
Start of unprivileged container in Debian 11 Bullseye was solved in this
answer by using lxc-unpriv-start instead of lxc-start ...
1
vote
0
answers
2k
views
systemd-logind.service doesn't work (NAMESPACE error)
The problem that occurred to me goes as follows.
I became the admin of a recently launched Linux machine. The specs are:
Kernel: 5.13.19-1-pve
OS: Debian GNU/Linux 11 (bullseye)
At first, I noticed ...
0
votes
0
answers
568
views
How to use screen inside of an LXC container
I am using Proxmox 7.0 to run an LXC container with Debian 11 as guest. When connecting via ssh to the guest, I can install and run screen as usual. I can detach and re-attach as usual. But if I ...
0
votes
1
answer
1k
views
Connection refused between 2 linux containers
On my host Ubuntu 18.04 I am running two lxc containers using default setups. Containers use Ubuntu 18.04 as well. I have an app running on container1 that offers an https based service on https://...
1
vote
1
answer
5k
views
How can I display a GUI LXC container on a physically connected display without a window manager?
I want to have a setup where I have LXC OS containers that start full-screen on particular displays. As an intermediate step, I am trying to get X apps from the container to display via host X.
I have ...
0
votes
0
answers
98
views
LXD Container fails to SSH out to AWS
Workstation -> Local LXC -> AWS
I have copied over the .ssh keys and config from my main workstation into an LXD container on it. I have also cleared my ip tables which was an issue with docker ...
0
votes
1
answer
765
views
How can I fix etckeeper or uninstall it so apt will install / remove new packages?
OS: Debian Buster 10.10 inside lxc
I am attempting to install a new package (I tried different packages) and apt (and DPkg) is complaining with the following error message(s):
/etc/etckeeper/pre-...
4
votes
1
answer
5k
views
Cannot start unprivileged LXC containers on Debian 11 Bullseye
I've made a new installation of Debian 11. Regarding LXC, I copied the working setup of my Debian 10 computer. I use a separate user, lxcuser which I su to, to lxc-start.
The configuration, ~/.config/...
0
votes
0
answers
2k
views
How to route LXC container traffic through Wireguard tunnel?
The image shows a complete picture of what I'm building. But for now I want to implement a small part with one home server and 2 LXC, 2 ipv4 on a remote server.
I want to use 2 different Wireguard ...
0
votes
0
answers
328
views
How to assign a remote public ip (via wireguard) to lxc container
What I have:
lxc host
# ifconfig
wg1: flags=209<UP,POINTOPOINT,RUNNING,NOARP> mtu 1420
inet 192.168.7.2 netmask 255.255.255.0 destination 192.168.7.2
...
enp2s0: flags=4163<UP,BROADCAST,...
0
votes
0
answers
70
views
How to attach 10 ipv4 from remote server to home lxc containers?
There is a remote ubuntu server with 10 ipv4.
There is a home ubuntu server without external ipv4. The home server has 10 lxc containers.
How to make each lxc container has own ipv4?
Upd
I want to ...
1
vote
0
answers
107
views
LXC container bridge with host network risks?
I'm new to LXC containers and still very much learning what is what.
I want to run a container bridged to the host network (e.g. 192.168.0.0). This is required because the application I want to run ...
0
votes
1
answer
417
views
lxc containers can ping host and can resolve dns internet addresses but cannot get to the internet
Debian Buster amd64
Two containers, 192.168.122.2,3 both can resolve but cannot get to the Internet
Both containers can ping / interact with the host server.
Here is what I have in iptables.
# ...