Menu
blog.headdesk.me
blog.headdesk.me

LXC and CentOS 7

Posted on 2015/03/132015/06/21

LXC has quickly become my favorate test bed. Starting a CentOS 7 container is however slightly complicated.

First, edit the centos lxc config and remove setpcap

[code]
# /usr/share/lxc/config/centos.common.conf
– lxc.cap.drop = mac_admin mac_override setfcap setpcap
+ lxc.cap.drop = mac_admin mac_override setfcap
[/code]

Deploy your container

[code]
$ lxc-create -t centos -n c7m2 — –release 7
[/code]

Then remove the tmpfs mount on the container’s fstab

[code]
# /var/lib/lxc/c7m2/rootfs/etc/fstab
– none /dev/shm tmpfs nosuid,nodev 0 0
[/code]

Then disable apparmor in container’s config

[code]
# /var/lib/lxc/c7m2/config
+ lxc.aa_profile = unconfined
[/code]

References:

  • https://github.com/lxc/lxc/pull/342
  • https://github.com/SolidCharity/LightBuildServer/issues/68

facebookShare on Facebook
TwitterTweet

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Full text search

Recent Posts

  • Terraform and segregated permissions
  • LVM Compression and Deduplication
  • Edit gpg encrypted file with vim
  • Lelit Elizabeth PL92T Pressure Tuning
  • jq transformation
  • aws (8)
  • coffee (1)
  • headfi (1)
  • linux (6)
  • others (58)
  • security (2)
  • tech (36)
  • wordpress (2)

apache aws awscli azure backup clearlinux cloud coffee docker DOCP ec2 EL8 epyc espresso featured gpg jenkins kernel lelit linux lvm meltdown memory MFA mikrotik php python rdp Redhat RHEL roasting rpm Ryzen site-to-site snapshot spectre tech terraform tuning ubuntu ubuntu upgrade vim vpn wordpress xdotool

©2023 blog.headdesk.me | Powered by SuperbThemes & WordPress