lxc.conf.sgml.in revision 0f71d073eec849672b7f5a089fb4697f423c35bc
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivanlxc: linux Container library
b355dcb54194f498921743ca33304eac35d89718Stephen Gallagher(C) Copyright IBM Corp. 2007, 2008
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub HrozekDaniel Lezcano <dlezcano at fr.ibm.com>
bde69429374859acff41273c0771d2b5f5c199b1Yuri ChornoivanThis library is free software; you can redistribute it and/or
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivanmodify it under the terms of the GNU Lesser General Public
481ec0e1eb0058195732cb320845b41f6f4d43ebJakub HrozekLicense as published by the Free Software Foundation; either
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivanversion 2.1 of the License, or (at your option) any later version.
be5cc3c013ece0c957f2f8c28a217052227dfd07Jakub HrozekThis library is distributed in the hope that it will be useful,
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagherbut WITHOUT ANY WARRANTY; without even the implied warranty of
a7797068c4deb6ce2bdbcda27c45ff1bbb4a8e78Jakub HrozekMERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
a7797068c4deb6ce2bdbcda27c45ff1bbb4a8e78Jakub HrozekLesser General Public License for more details.
bde69429374859acff41273c0771d2b5f5c199b1Yuri ChornoivanYou should have received a copy of the GNU Lesser General Public
bde69429374859acff41273c0771d2b5f5c199b1Yuri ChornoivanLicense along with this library; if not, write to the Free Software
b355dcb54194f498921743ca33304eac35d89718Stephen GallagherFoundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan<!DOCTYPE refentry PUBLIC "-//Davenport//DTD DocBook V3.0//EN" [
cbe7c54c2caf718bdea7ca6660ba8193d759d2d5Stephen Gallagher<!ENTITY seealso SYSTEM "@builddir@/see_also.sgml">
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek <docinfo><date>@LXC_GENERATE_DATE@</date></docinfo>
cbe7c54c2caf718bdea7ca6660ba8193d759d2d5Stephen Gallagher linux container configuration file
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan The linux containers (<command>lxc</command>) are always created
cbe7c54c2caf718bdea7ca6660ba8193d759d2d5Stephen Gallagher before being used. This creation defines a set of system
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan resources to be virtualized / isolated when a process is using
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan the container. By default, the pids, sysv ipc and mount points
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan are virtualized and isolated. The other system resources are
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan shared across containers, until they are explicitly defined in
cbe7c54c2caf718bdea7ca6660ba8193d759d2d5Stephen Gallagher the configuration file. For example, if there is no network
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan configuration, the network will be shared between the creator of
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan the container and the container itself, but if the network is
cbe7c54c2caf718bdea7ca6660ba8193d759d2d5Stephen Gallagher specified, a new network stack is created for the container and
cbe7c54c2caf718bdea7ca6660ba8193d759d2d5Stephen Gallagher the container can no longer use the network of its ancestor.
cbe7c54c2caf718bdea7ca6660ba8193d759d2d5Stephen Gallagher The configuration file defines the different system resources to
cbe7c54c2caf718bdea7ca6660ba8193d759d2d5Stephen Gallagher be assigned for the container. At present, the utsname, the
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan network, the mount points, the root file system and the control
cbe7c54c2caf718bdea7ca6660ba8193d759d2d5Stephen Gallagher groups are supported.
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek Each option in the configuration file has the form <command>key
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek = value</command> fitting in one line. The '#' caracter means
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek the line is a comment.
cbe7c54c2caf718bdea7ca6660ba8193d759d2d5Stephen Gallagher The utsname section defines the hostname to be set for the
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan container. That means the container can set its own hostname
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan without changing the one from the system. That makes the
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan hostname private for the container.
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan <variablelist>
f9fdc87c80f2744780c6a0f2bf5b1b57bcbb095aYuri Chornoivan <varlistentry>
cbe7c54c2caf718bdea7ca6660ba8193d759d2d5Stephen Gallagher specify the hostname for the container
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan </varlistentry>
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan </variablelist>
cbe7c54c2caf718bdea7ca6660ba8193d759d2d5Stephen Gallagher The network section defines how the network is virtualized in
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan the container. The network virtualization acts at the layer
c938f4ba417328fe62eded0806b2d9ca053f34a5Stephen Gallagher two, so in order to use the network, a few information should
c938f4ba417328fe62eded0806b2d9ca053f34a5Stephen Gallagher be specified to define the network interfaces to be used by
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan the container. Several virtual interfaces can be assigned and
cbe7c54c2caf718bdea7ca6660ba8193d759d2d5Stephen Gallagher used in a container either if the system has only one physical
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan network interface.
cbe7c54c2caf718bdea7ca6660ba8193d759d2d5Stephen Gallagher <variablelist>
cbe7c54c2caf718bdea7ca6660ba8193d759d2d5Stephen Gallagher <varlistentry>
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan specify what kind of network virtualization to be used
cbe7c54c2caf718bdea7ca6660ba8193d759d2d5Stephen Gallagher for the container. Each time
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan a <option>lxc.network.type</option> field is found a new
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan round of network configuration begins. By this way
cbe7c54c2caf718bdea7ca6660ba8193d759d2d5Stephen Gallagher several network virtualization can be specified for the
cbe7c54c2caf718bdea7ca6660ba8193d759d2d5Stephen Gallagher same container, as well as assigning several network
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan interfaces for one container. The different
c938f4ba417328fe62eded0806b2d9ca053f34a5Stephen Gallagher virtualization types can be:
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan <option>empty:</option> a new network stack is created
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan for the container, but it will not contain any network
c938f4ba417328fe62eded0806b2d9ca053f34a5Stephen Gallagher <option>veth:</option> a new network stack is created, a
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan peer network device is created with one side assigned to
cbe7c54c2caf718bdea7ca6660ba8193d759d2d5Stephen Gallagher the container and the other side attached to a bridge
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan specified by the <option>lxc.network.link</option>. The
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan bridge has to be setup before on the
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan configuration outside of the container.
5ee3fba0bd812242a1ffe189f5ddf2689e6e6811Jakub Hrozek <option>macvlan:</option> a new network stack is
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan created, a macvlan interface is linked with the
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan interface specified by
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan the <option>lxc.network.link</option> and assigned to
cbe7c54c2caf718bdea7ca6660ba8193d759d2d5Stephen Gallagher the container.
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan <option>phys:</option> a new network stack is created
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan and the interface specified by
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan the <option>lxc.network.link</option> is assigned to the
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan </varlistentry>
cbe7c54c2caf718bdea7ca6660ba8193d759d2d5Stephen Gallagher <varlistentry>
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan specify an action to do for the
be5cc3c013ece0c957f2f8c28a217052227dfd07Jakub Hrozek <para><option>up:</option> activates the interface.
be5cc3c013ece0c957f2f8c28a217052227dfd07Jakub Hrozek </varlistentry>
be5cc3c013ece0c957f2f8c28a217052227dfd07Jakub Hrozek <varlistentry>
c938f4ba417328fe62eded0806b2d9ca053f34a5Stephen Gallagher specify the interface to be used for real network
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan </varlistentry>
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan <varlistentry>
f9fdc87c80f2744780c6a0f2bf5b1b57bcbb095aYuri Chornoivan the interface name is dynamically allocated, but if an
f9fdc87c80f2744780c6a0f2bf5b1b57bcbb095aYuri Chornoivan other name is needed because the configuration files
c938f4ba417328fe62eded0806b2d9ca053f34a5Stephen Gallagher being used by the container use a generic name,
c938f4ba417328fe62eded0806b2d9ca053f34a5Stephen Gallagher eg. eth0, this option will rename the interface in the
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan </varlistentry>
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan <varlistentry>
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan the interface mac address is dynamically allocated by
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan default to the virtual interface, but in some case, this
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan is needed to resolve a mac address conflict or to have
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher always the same link-locak ipv6 address.
7797e361155f7ce937085fd98e360469d7baf1b6Jakub Hrozek </varlistentry>
cbe7c54c2caf718bdea7ca6660ba8193d759d2d5Stephen Gallagher <varlistentry>
c938f4ba417328fe62eded0806b2d9ca053f34a5Stephen Gallagher specify the ipv4 address to assign to the virtualized
c938f4ba417328fe62eded0806b2d9ca053f34a5Stephen Gallagher interface. Several lines specify several ipv4 addresses.
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan The address is in format x.y.z.t/m,
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan </varlistentry>
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan <varlistentry>
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher specify the ipv6 address to assign to the virtualized
a23014d69b56cbdf48ad05229c334648b5309d8fJakub Hrozek interface. Several lines specify several ipv6 addresses.
a7797068c4deb6ce2bdbcda27c45ff1bbb4a8e78Jakub Hrozek The address is in format x::y/m,
a23014d69b56cbdf48ad05229c334648b5309d8fJakub Hrozek </varlistentry>
a7797068c4deb6ce2bdbcda27c45ff1bbb4a8e78Jakub Hrozek </variablelist>
a23014d69b56cbdf48ad05229c334648b5309d8fJakub Hrozek <title>New pseudo tty instance (devpts)</title>
a23014d69b56cbdf48ad05229c334648b5309d8fJakub Hrozek For stricter isolation the container can have its own private
a23014d69b56cbdf48ad05229c334648b5309d8fJakub Hrozek instance of the pseudo tty.
a23014d69b56cbdf48ad05229c334648b5309d8fJakub Hrozek <variablelist>
a23014d69b56cbdf48ad05229c334648b5309d8fJakub Hrozek <varlistentry>
a23014d69b56cbdf48ad05229c334648b5309d8fJakub Hrozek If set, the container will have a new pseudo tty
a23014d69b56cbdf48ad05229c334648b5309d8fJakub Hrozek instance, making this private to it. The value specifies
a23014d69b56cbdf48ad05229c334648b5309d8fJakub Hrozek the maximum number of pseudo ttys allowed for a pts
481ec0e1eb0058195732cb320845b41f6f4d43ebJakub Hrozek instance (this limitation is not implemented yet).
481ec0e1eb0058195732cb320845b41f6f4d43ebJakub Hrozek </varlistentry>
a23014d69b56cbdf48ad05229c334648b5309d8fJakub Hrozek </variablelist>
be5cc3c013ece0c957f2f8c28a217052227dfd07Jakub Hrozek If the container is configured with a root filesystem and the
a23014d69b56cbdf48ad05229c334648b5309d8fJakub Hrozek inittab file is setup to launch a getty on the ttys. This
a23014d69b56cbdf48ad05229c334648b5309d8fJakub Hrozek option will specify the number of ttys to be available for the
a23014d69b56cbdf48ad05229c334648b5309d8fJakub Hrozek container. The number of getty in the inittab file of the
a23014d69b56cbdf48ad05229c334648b5309d8fJakub Hrozek container and the number of tty specified in this
481ec0e1eb0058195732cb320845b41f6f4d43ebJakub Hrozek configuration file should be equal, otherwise the getty will
a23014d69b56cbdf48ad05229c334648b5309d8fJakub Hrozek die and respawn indefinitly giving annoying messages on the
a23014d69b56cbdf48ad05229c334648b5309d8fJakub Hrozek <variablelist>
481ec0e1eb0058195732cb320845b41f6f4d43ebJakub Hrozek <varlistentry>
a23014d69b56cbdf48ad05229c334648b5309d8fJakub Hrozek Specify the number of tty to make available to the
be5cc3c013ece0c957f2f8c28a217052227dfd07Jakub Hrozek </varlistentry>
be5cc3c013ece0c957f2f8c28a217052227dfd07Jakub Hrozek </variablelist>
a23014d69b56cbdf48ad05229c334648b5309d8fJakub Hrozek The mount points section specifies the different places to be
a23014d69b56cbdf48ad05229c334648b5309d8fJakub Hrozek mounted. These mount points will be private to the container
a23014d69b56cbdf48ad05229c334648b5309d8fJakub Hrozek and won't be visible by the processes running outside of the
a23014d69b56cbdf48ad05229c334648b5309d8fJakub Hrozek container. This is useful to mount /etc, /var or /home for
a7797068c4deb6ce2bdbcda27c45ff1bbb4a8e78Jakub Hrozek <variablelist>
a23014d69b56cbdf48ad05229c334648b5309d8fJakub Hrozek <varlistentry>
a23014d69b56cbdf48ad05229c334648b5309d8fJakub Hrozek specify a file location in
481ec0e1eb0058195732cb320845b41f6f4d43ebJakub Hrozek the <filename>fstab</filename> format, containing the
a23014d69b56cbdf48ad05229c334648b5309d8fJakub Hrozek mount informations.
a23014d69b56cbdf48ad05229c334648b5309d8fJakub Hrozek </varlistentry>
a23014d69b56cbdf48ad05229c334648b5309d8fJakub Hrozek <varlistentry>
a23014d69b56cbdf48ad05229c334648b5309d8fJakub Hrozek specify a mount point corresponding to a line in the
a23014d69b56cbdf48ad05229c334648b5309d8fJakub Hrozek fstab format.
f9fdc87c80f2744780c6a0f2bf5b1b57bcbb095aYuri Chornoivan </varlistentry>
cbe7c54c2caf718bdea7ca6660ba8193d759d2d5Stephen Gallagher </variablelist>
be5cc3c013ece0c957f2f8c28a217052227dfd07Jakub Hrozek The root file system is the location where the container will
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan <variablelist>
cbe7c54c2caf718bdea7ca6660ba8193d759d2d5Stephen Gallagher <varlistentry>
481ec0e1eb0058195732cb320845b41f6f4d43ebJakub Hrozek specify a file location containing the new file tree for
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan a root file system.
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan </varlistentry>
f9fdc87c80f2744780c6a0f2bf5b1b57bcbb095aYuri Chornoivan </variablelist>
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan The control group section contains the configuration for the
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan different subsystem. <command>lxc</command> does not check the
cbe7c54c2caf718bdea7ca6660ba8193d759d2d5Stephen Gallagher correctness of the subsystem name. This has the inconvenient
481ec0e1eb0058195732cb320845b41f6f4d43ebJakub Hrozek to have the error being detected at runtime, but the advantage
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan to support any future subsystem.
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan <variablelist>
f9fdc87c80f2744780c6a0f2bf5b1b57bcbb095aYuri Chornoivan <varlistentry>
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan <option>lxc.cgroup.[subsystem name]</option>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher specify the control group value to be set. This field is
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher the identifier to tell the following keyword is the
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher literal name of the control group subsystem,
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher </varlistentry>
7797e361155f7ce937085fd98e360469d7baf1b6Jakub Hrozek </variablelist>
be5cc3c013ece0c957f2f8c28a217052227dfd07Jakub Hrozek <para>This configuration sets up a container to use a veth pair
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan device with one side plugged to a bridge br0 (which has been
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan configured before on the system by the administrator). The
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan virtual network device visible in the container is renamed to
c938f4ba417328fe62eded0806b2d9ca053f34a5Stephen Gallagher <variablelist>
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan <varlistentry>
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan </varlistentry>
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan <varlistentry>
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan </varlistentry>
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan <varlistentry>
be5cc3c013ece0c957f2f8c28a217052227dfd07Jakub Hrozek </varlistentry>
be5cc3c013ece0c957f2f8c28a217052227dfd07Jakub Hrozek <varlistentry>
be5cc3c013ece0c957f2f8c28a217052227dfd07Jakub Hrozek </varlistentry>
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan <varlistentry>
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan </varlistentry>
be5cc3c013ece0c957f2f8c28a217052227dfd07Jakub Hrozek <varlistentry>
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan <term>lxc.network.hwaddr = 4a:49:43:49:79:bf</term>
f9fdc87c80f2744780c6a0f2bf5b1b57bcbb095aYuri Chornoivan </varlistentry>
c938f4ba417328fe62eded0806b2d9ca053f34a5Stephen Gallagher <varlistentry>
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan </varlistentry>
be5cc3c013ece0c957f2f8c28a217052227dfd07Jakub Hrozek <varlistentry>
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan <term>lxc.network.ipv6 = 2003:db8:1:0:214:1234:fe0b:3597</term>
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan </varlistentry>
481ec0e1eb0058195732cb320845b41f6f4d43ebJakub Hrozek </variablelist>
7797e361155f7ce937085fd98e360469d7baf1b6Jakub Hrozek <para>This configuration will setup several control groups for
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan the application, cpuset.cpus restricts usage of the defined cpu,
cbe7c54c2caf718bdea7ca6660ba8193d759d2d5Stephen Gallagher cpus.share prioritize the control group, devices.allow makes
481ec0e1eb0058195732cb320845b41f6f4d43ebJakub Hrozek usable the specified devices.</para>
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek <variablelist>
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek <varlistentry>
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek </varlistentry>
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek <varlistentry>
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher </varlistentry>
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan <varlistentry>
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek </varlistentry>
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan <varlistentry>
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek <term>lxc.cgroup.devices.allow = c 1:3 rw</term>
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek </varlistentry>
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek <varlistentry>
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek <term>lxc.cgroup.devices.allow = b 8:0 rw</term>
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek </varlistentry>
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek </variablelist>
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek <para>This example show a complex configuration making a complex
be5cc3c013ece0c957f2f8c28a217052227dfd07Jakub Hrozek network stack, using the control groups, setting a new hostname,
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek mounting some locations and a changing the root file
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek system.</para>
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek <variablelist>
be5cc3c013ece0c957f2f8c28a217052227dfd07Jakub Hrozek <varlistentry>
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek </varlistentry>
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek <varlistentry>
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek </varlistentry>
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek <varlistentry>
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek </varlistentry>
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek <varlistentry>
be5cc3c013ece0c957f2f8c28a217052227dfd07Jakub Hrozek </varlistentry>
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek <varlistentry>
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek <term>lxc.network.hwaddr = 4a:49:43:49:79:bf</term>
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek </varlistentry>
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek <varlistentry>
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek </varlistentry>
be5cc3c013ece0c957f2f8c28a217052227dfd07Jakub Hrozek <varlistentry>
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek <term>lxc.network.ipv6 = 2003:db8:1:0:214:1234:fe0b:3597</term>
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek </varlistentry>
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek <varlistentry>
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek <term>lxc.network.ipv6 = 2003:db8:1:0:214:5432:feab:3588</term>
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan </varlistentry>
cbe7c54c2caf718bdea7ca6660ba8193d759d2d5Stephen Gallagher <varlistentry>
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher </varlistentry>
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher <varlistentry>
7797e361155f7ce937085fd98e360469d7baf1b6Jakub Hrozek </varlistentry>
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan <varlistentry>
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan </varlistentry>
f9fdc87c80f2744780c6a0f2bf5b1b57bcbb095aYuri Chornoivan <varlistentry>
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan <term>lxc.network.hwaddr = 4a:49:43:49:79:bd</term>
481ec0e1eb0058195732cb320845b41f6f4d43ebJakub Hrozek </varlistentry>
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan <varlistentry>
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan </varlistentry>
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan <varlistentry>
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan <term>lxc.network.ipv4 = 192.168.10.125/24</term>
f9fdc87c80f2744780c6a0f2bf5b1b57bcbb095aYuri Chornoivan </varlistentry>
f9fdc87c80f2744780c6a0f2bf5b1b57bcbb095aYuri Chornoivan <varlistentry>
f9fdc87c80f2744780c6a0f2bf5b1b57bcbb095aYuri Chornoivan <term>lxc.network.ipv6 = 2003:db8:1:0:214:1234:fe0b:3596</term>
cbe7c54c2caf718bdea7ca6660ba8193d759d2d5Stephen Gallagher </varlistentry>
481ec0e1eb0058195732cb320845b41f6f4d43ebJakub Hrozek <varlistentry>
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan </varlistentry>
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan <varlistentry>
f9fdc87c80f2744780c6a0f2bf5b1b57bcbb095aYuri Chornoivan </varlistentry>
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan <varlistentry>
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan </varlistentry>
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan <varlistentry>
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan <term>lxc.network.hwaddr = 4a:49:43:49:79:ff</term>
f9fdc87c80f2744780c6a0f2bf5b1b57bcbb095aYuri Chornoivan </varlistentry>
f9fdc87c80f2744780c6a0f2bf5b1b57bcbb095aYuri Chornoivan <varlistentry>
481ec0e1eb0058195732cb320845b41f6f4d43ebJakub Hrozek </varlistentry>
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan <varlistentry>
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan <term>lxc.network.ipv6 = 2003:db8:1:0:214:1234:fe0b:3297</term>
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan </varlistentry>
f9fdc87c80f2744780c6a0f2bf5b1b57bcbb095aYuri Chornoivan <varlistentry>
bde69429374859acff41273c0771d2b5f5c199b1Yuri Chornoivan </varlistentry>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher <varlistentry>
b355dcb54194f498921743ca33304eac35d89718Stephen Gallagher </varlistentry>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher <varlistentry>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher </varlistentry>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher <varlistentry>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher <term>lxc.cgroup.devices.allow = c 1:3 rw</term>
b355dcb54194f498921743ca33304eac35d89718Stephen Gallagher </varlistentry>
b355dcb54194f498921743ca33304eac35d89718Stephen Gallagher <varlistentry>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher <term>lxc.cgroup.devices.allow = b 8:0 rw</term>
481ec0e1eb0058195732cb320845b41f6f4d43ebJakub Hrozek </varlistentry>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher <varlistentry>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher <term>lxc.mount = /etc/fstab.complex</term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher </varlistentry>
b355dcb54194f498921743ca33304eac35d89718Stephen Gallagher <varlistentry>
b355dcb54194f498921743ca33304eac35d89718Stephen Gallagher <term>lxc.mount.entry = /lib /root/myrootfs/lib none ro,bind 0 0</term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher </varlistentry>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher <varlistentry>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher </varlistentry>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher </variablelist>
481ec0e1eb0058195732cb320845b41f6f4d43ebJakub Hrozek <citerefentry>
481ec0e1eb0058195732cb320845b41f6f4d43ebJakub Hrozek <refentrytitle><command>chroot</command></refentrytitle>
481ec0e1eb0058195732cb320845b41f6f4d43ebJakub Hrozek </citerefentry>,
481ec0e1eb0058195732cb320845b41f6f4d43ebJakub Hrozek <citerefentry>
481ec0e1eb0058195732cb320845b41f6f4d43ebJakub Hrozek <refentrytitle><command>pivot_root</command></refentrytitle>
481ec0e1eb0058195732cb320845b41f6f4d43ebJakub Hrozek </citerefentry>,
481ec0e1eb0058195732cb320845b41f6f4d43ebJakub Hrozek <citerefentry>
481ec0e1eb0058195732cb320845b41f6f4d43ebJakub Hrozek <refentrytitle><filename>fstab</filename></refentrytitle>
481ec0e1eb0058195732cb320845b41f6f4d43ebJakub Hrozek </citerefentry>
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek <para>Daniel Lezcano <email>daniel.lezcano@free.fr</email></para>
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek<!-- Keep this comment at the end of the file
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub HrozekLocal variables:
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozeksgml-omittag:t
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozeksgml-shorttag:t
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozeksgml-minimize-attributes:nil
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozeksgml-always-quote-attributes:t
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozeksgml-indent-step:2
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozeksgml-indent-data:t
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozeksgml-parent-document:nil
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozeksgml-default-dtd-file:nil
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozeksgml-exposed-tags:nil
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozeksgml-local-catalogs:nil
481ec0e1eb0058195732cb320845b41f6f4d43ebJakub Hrozeksgml-local-ecat-files:nil