lxc configuration help - only network isolated?
Chris R. Jones
chris at versecorp.net
Thu Mar 26 15:45:41 PDT 2009
I have a couple of basic configuration questions on linux containers. I'm using lxc-0.6.1.
I'm trying to configure a setup where I have two containers, where the only virtualized/isolated resources are network resources, but I can still do IPC between processes in the two containers.
The lxc.conf man page indicates that, "by default, the pids, sysv ipc, and mount points are virtualized and isolated. "
Is there a way in the configuration to specify that those resources should NOT be isolated? I'd really like to have communication between two processes running in different containers using sysV IPC and signals. The only thing I really want to be isolated are two different network namespaces.
Is there a setting I use in the lxc.conf file to accomplish this?
Up to now, I've been doing some prototyping using lxc-unshare -n, but that doesn't really create a container, correct? That mostly accomplishes my goals, but I can't find a way to spawn new processes into that same namespace. Is there a way, without defining a container?
Any recommendations on how to properly configure a containers to allow IPC between processes in two different containers while still isolating the network resources?
More information about the Containers