This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision Next revision Both sides next revision | ||
технология_lxc [2019/10/18 11:38] val [Запуск/мониторинг/остановка контейнера] |
технология_lxc [2020/06/22 20:29] val [Запуск/мониторинг/остановка контейнера] |
||
---|---|---|---|
Line 10: | Line 10: | ||
==== Подготовка сети ==== | ==== Подготовка сети ==== | ||
- | |||
- | * Для режима bridge в lxc понадобиться включить «**неразборчивый режим**» в адаптере | ||
- | * **!!!** В Debian 9 необходимо убрать из ядра [[Модуль AppArmor]] | ||
<code> | <code> | ||
Line 41: | Line 38: | ||
# post-up /sbin/brctl setfd br0 0 | # post-up /sbin/brctl setfd br0 0 | ||
</code><code> | </code><code> | ||
- | root@server:~# init 6 | + | root@server:~# init 0 |
</code> | </code> | ||
+ | |||
+ | * Для режима bridge в lxc понадобиться включить «**неразборчивый режим**» в адаптере | ||
==== Установка и настройка lxc ==== | ==== Установка и настройка lxc ==== | ||
Line 62: | Line 61: | ||
==== Создание ветки дочерней системы ==== | ==== Создание ветки дочерней системы ==== | ||
<code> | <code> | ||
- | ubuntu# lxc-create -t ubuntu -n www | ||
- | |||
debian# lxc-create -t debian -n www | debian# lxc-create -t debian -n www | ||
</code> | </code> | ||
Line 70: | Line 67: | ||
<code> | <code> | ||
root@server:~# cp /etc/ssh/sshd_config /var/lib/lxc/www/rootfs/etc/ssh/sshd_config | root@server:~# cp /etc/ssh/sshd_config /var/lib/lxc/www/rootfs/etc/ssh/sshd_config | ||
- | |||
- | root@server:~# rm /var/lib/lxc/www/rootfs/etc/resolv.conf | ||
root@server:~# cp /etc/resolv.conf /var/lib/lxc/www/rootfs/etc/resolv.conf | root@server:~# cp /etc/resolv.conf /var/lib/lxc/www/rootfs/etc/resolv.conf | ||
Line 81: | Line 76: | ||
www:/# apt purge isc-dhcp-client | www:/# apt purge isc-dhcp-client | ||
- | www:/# apt purge resolvconf | + | www:/# apt install nano vim iputils-ping |
- | + | ||
- | www:/# apt install nano | + | |
- | + | ||
- | www:/# apt install iputils-ping | + | |
</code> | </code> | ||
Line 99: | Line 90: | ||
==== Управление учетными записями в дочерней системе ==== | ==== Управление учетными записями в дочерней системе ==== | ||
<code> | <code> | ||
- | www:/# getent passwd | ||
- | |||
- | ubuntu# userdel -r ubuntu | ||
- | |||
www:/# passwd | www:/# passwd | ||
- | 123 | + | ... 123 |
www:/# exit | www:/# exit | ||
Line 116: | Line 103: | ||
</code><code> | </code><code> | ||
... | ... | ||
- | #lxc.network.link = lxcbr0 | + | #lxc.network.link = empty |
- | ... | + | |
- | # lxc.network.hwaddr = 00:16:3e:5c:c0:fb # need comment | + | |
- | lxc.network.type = veth | + | |
- | lxc.network.flags = up | + | |
- | lxc.network.link = br0 | + | |
- | lxc.network.ipv4 = 192.168.X.20/24 | + | |
- | lxc.network.ipv4.gateway = 192.168.X.1 | + | |
lxc.net.0.type = veth | lxc.net.0.type = veth | ||
lxc.net.0.link = br0 | lxc.net.0.link = br0 | ||
Line 132: | Line 111: | ||
lxc.start.auto = 1 | lxc.start.auto = 1 | ||
+ | ... | ||
</code><code> | </code><code> | ||
root@server:~# lxc-ls -f | root@server:~# lxc-ls -f | ||
Line 151: | Line 131: | ||
root@server:~# systemctl start lxc@www | root@server:~# systemctl start lxc@www | ||
- | |||
- | debian9# systemctl edit lxc@server | ||
- | |||
- | или | ||
- | |||
- | debian9# mkdir /etc/systemd/system/lxc@www.service.d/ | ||
- | debian9# cat /etc/systemd/system/lxc@www.service.d/kill_signal_fix.conf | ||
- | </code><code> | ||
- | [Service] | ||
- | KillSignal=SIGRTMIN+3 | ||
- | </code><code> | ||
root@server:~# systemctl stop lxc@www | root@server:~# systemctl stop lxc@www | ||
</code> | </code> |