-
Recent Posts
Recent Comments
Ahmed on Connecting containers on sever… s3hh on Connecting containers on sever… Dhananjay Sathe on Connecting containers on sever… Norberto on LXC – improved clone… s3hh on LXC – improved clone… Archives
- June 2013
- May 2013
- April 2013
- March 2013
- February 2013
- December 2012
- October 2012
- September 2012
- July 2012
- May 2012
- April 2012
- January 2012
- December 2011
- October 2011
- September 2011
- August 2011
- July 2011
- May 2011
- April 2011
- March 2011
- December 2010
- October 2010
- September 2010
- August 2010
- July 2010
- June 2010
Categories
Meta
Author Archives: s3hh
Easily making a blockdev available to a container
Often it would be nice to mount an existing (lvm) block device into a container. For instance, to emulate an Amazon ec2 environment, I’d like to have /dev/vdb or /dev/xvdb as a block device. So I wrote a mount hook … Continue reading
ecryptfs-backed containers
During this cycle, the lxc package gained the ability to call ‘hooks’ at various points of a container’s life cycle. Just today, a new hook point was added to the quantal package, which supports a simple use of ecryptfs backed … Continue reading
Playing with seccomp
Seccomp is a linux kernel feature by Andrea Arcangeli which limits the system calls which a task can use, by allowing a task to say “from now on, msyelf and my new children should not be able to do anything … Continue reading
Posted in Uncategorized
2 Comments
Crypto tutorial
One of the first real web pages I put up was a small set of tutorials on how basic crypto algorithms work. This was back in the days (mid 90s) when people actually tended to sit down and roll their … Continue reading
Posted in Uncategorized
Leave a comment
Connecting containers on several hosts with Open vSwitch
Lxc is great for starting up several containers on your laptop or on an ec2 host. But what if you want to fire up containers on multiple ec2 instances, and have them talk to each other? An easy way to … Continue reading
User namespaces – available to play!
Over the past few months, Eric Biederman has been working on completing the user namespace. Briefly, unprivileged users can create a user namespace, where he can pretend to be root and start new namespaces (i.e. network and pid) which he … Continue reading
LXC in precise and beyond
I haven’t blogged about lxc for some time. Recently Stéphane showed ( http://www.stgraber.org/2012/03/04/booting-an-ubuntu-12-04-virtual-machine-in-an-lxc-container/) what much of the lxc related work we did this cycle accomplished: making it possible to boot a stock ubuntu image in a container, and streamlining the … Continue reading
First round of kvm performance tests
Here are the raw results from my first set of kvm performance runs. These were all using disk images on an ext4 filesystem on the host, and using the scripts I showed in the previous post. To reiterate: for each … Continue reading
Kvm performance runs under way
I’ve finally gotten the kvm performance tests rolling. I’m hoping to have the first set of results some time next week. I installed a new precise server image on a laptop with 100M for rootfs (ext4), and a 100M partition … Continue reading
The linux command line (book)
“The linux command line”, published by the No Starch Press, sells itself to people who are new to linux, and have been enjoying its gui goodness, but who now want to experience some of the famed power of the command … Continue reading