andrearug

Commit, clone a container

To 'clone' a container, you'll have to make an image of that container first, you can do so by "committing" the container. Docker will (by default) pause all processes running in the container during commit to preserve data-consistency.

For example;

docker commit --message="Snapshot of my container" my_container my_container_snapshot:yymmdd

How to enable bind mount inside lxc container

When mount is returning:

STDERR: mount: block device /srv/database-data/postgres is write-protected, mounting read-only
mount: cannot mount block device /srv/database-data/postgres read-only

and dmesg shows:

Go into your git checkout folder of ipxe.

Save the below file as nic-menu.ipxe.

Build iPXE like this:

cd src && make EMBED=../nic-menu.ipxe && cd ..

Requirements: current iPXE as of 2013-08-01 (for proper behavior of autoboot with a network device specified, netX feature, PCI vendor/device ID display and inc command)

Add the following chunk to your existing ISC dhcpd.conf file.

if exists user-class and ( option user-class = "iPXE" ) {
    filename "http://boot.smidsrod.lan/boot.ipxe";
}
else {
    filename "undionly.kpxe";
}

(or see https://gist.github.com/4008017 for a more elaborate setup

	# create a 4G swap file at /swapfile
	sudo fallocate -l 4G /swapfile
	sudo chmod 600 /swapfile
	sudo mkswap /swapfile
	sudo swapon /swapfile

	# Make the Swap File Permanent
	sudo echo "/swapfile none swap sw 0 0" >> /etc/fstab

	# set swappiness to 10

	# disable secure boot in the bios, in menu security

	# downlad and unzip refind-bin-0.7.8.zip

	# install refind, assuming your ESP partition is /dev/sda1 and mounted in /boot/efi
	cd refind-bin-0.7.8
	./install.sh

	# type y and go ahead
	# at that time your boot entry should look like that

	#!/bin/bash
	set -ve
	lxc-create -n vpn -t ubuntu

	# ln -s /var/lib/lxc/vpn/config /etc/lxc/auto/vpn.conf
	perl -i -ple 's/#lxc.aa_profile = unconfined/lxc.aa_profile = unconfined/' /etc/lxc/auto/vpn.conf

	perl -i -ple 's/^exit 0/# exit 0/' /etc/rc.local
	cat >>/etc/rc.local <<hello
	mkdir -p /var/lib/lxc/vpn/rootfs/dev/net/

	# Kernel sysctl configuration file for Red Hat Linux
	#
	# For binary values, 0 is disabled, 1 is enabled. See sysctl(8) and
	# sysctl.conf(5) for more details.

	# Controls source route verification
	net.ipv4.conf.default.rp_filter = 1

	# Do not accept source routing
	net.ipv4.conf.default.accept_source_route = 0