bmullan

4 ms·

1.
Usenix NSDI '19 Presentation Slim: OS Kernel Low-Overhead Container Overlay Ntwk(usenix.org)
4 points by bmullan 7y ago|1 comments
2.
by bmullan 8y ago
I just did and it worked great ! Super easy as using the custom "profle" meant I really had to do nothing other than the single cmd to create the LXD container.. which took 15-20 seconds to create.
3.
by bmullan 8y ago
This all uses only "unprivileged" containers NOT "privileged" container.. so "root" in the container is NOT "root" in the Host!
4.
by bmullan 8y ago
Simos I just tried this on Ubuntu 18.04 and it worked great!! Started Firefox in an LXD container created w your customized "profile" went to YouTube a was playing music videos great... All from the LXD container. Really great wor
5.
by bmullan 11y ago
Scalability of LXC vs a HW VM was written up by a Canonical engineer here: https://insights.ubuntu.com/2015/06/11/how-many-containers-c... I've had upto 512 LXC nested containers running quagga for bgp &
6.
by bmullan 11y ago
LXC (www.linuxcontainers.org) supports Apparmor, SElinux, Seccomp and what’s probably the only way of making a container actually safe LXC has supported user namespaces since the LXC 1.0 release in 2014.
7.
by bmullan 11y ago
Today you can run Docker in LXC and you can run KVM in an LXC container. LXC also supports Nested LXC. The scheduled release of LXC 2.0 and LXD 1.0 sometime around mid to late January. This will also include support for live migration/
8.
by bmullan 11y ago
You can create either privileged or unprivileged LXC containers. Creating Unprivileged containers only requires a very simple configuration that takes 60 seconds to do. Here's Stephane Graber's blog on it: https://www
9.
by bmullan 12y ago
I agree lets be careful about stating better performance unless you can post some stats. It may be true but I'm an engineer and like to see why 1 vs the other. Guacamole is either going to use VNC or RDP protocols. Both are relative
10.
by bmullan 13y ago
One future for LXC is with ARM based servers such as Calxeda. Approx 800 core with gigabit Ethernet fabric & I/O. And sata built-in for each core. About size of a Cisco catalyst 5000 box but less than 1000 watts. Runs ubuntu o
11.
by bmullan 13y ago
Biggest reason I still have for VM is when you need to virtualize a non Linux OS (windows etc). Other than that lxc now does just about anything a VM can do. Live migrate between machines, nested containers, remote desktops (freerdp, x2
12.
by bmullan 13y ago
Fabric also works great. If you ice ubuntu... JuJu is terrific for either VM or container use. I have used it to deploy all of open stack services into a single "super size" AWS EC2 VM where the open stack was configured to use L
13.
by bmullan 13y ago
You can run any distro in a LXC container... Only requirement is that they all run the kernel of the host.
14.
by bmullan 13y ago
And at least with ubuntu you can pass user data to a new container just like on AWS EC2 to initialize a new container with specific apt-get installs etc
15.
by bmullan 13y ago
Lxc only requires same kernel in containers as host. I use ubuntu and have containers in several diff distos...they work fine.