Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
tools:lxc [2022/09/01 22:36] darron [Initialise] |
tools:lxc [2024/04/28 18:47] (current) darron [Initialise] |
||
|---|---|---|---|
| Line 12: | Line 12: | ||
| < | < | ||
| - | apt-get install lxc lxc-templates bridge-utils cgroupfs-mount conntrack iptables | + | apt-get install lxc lxc-templates bridge-utils cgroupfs-mount conntrack iptables |
| / | / | ||
| </ | </ | ||
| Line 31: | Line 31: | ||
| ==systemd== | ==systemd== | ||
| < | < | ||
| + | systemctl disable lxc-monitord.service | ||
| + | systemctl mask lxc-monitord.service | ||
| systemctl disable lxc-net.service | systemctl disable lxc-net.service | ||
| systemctl disable lxc.service | systemctl disable lxc.service | ||
| Line 38: | Line 40: | ||
| < | < | ||
| - | sed -i ' | + | sed -i ' |
| - | sed -i ' | + | sed -i ' |
| </ | </ | ||
| Line 85: | Line 87: | ||
| iptables -t raw -F | iptables -t raw -F | ||
| iptables -t nat -F | iptables -t nat -F | ||
| - | /usr/sbin/conntrack -F | + | conntrack -F |
| # raw: | # raw: | ||
| Line 135: | Line 137: | ||
| < | < | ||
| + | mkdir -p / | ||
| wget " | wget " | ||
| gpg --no-default-keyring --keyring / | gpg --no-default-keyring --keyring / | ||
| Line 152: | Line 155: | ||
| lxc-create -n terminator -t debian -- -r bullseye -a armhf | lxc-create -n terminator -t debian -- -r bullseye -a armhf | ||
| </ | </ | ||
| - | === Configure === | ||
| - | ==/ | + | Install bookworm (32-bit) |
| - | + | ||
| - | __Obsolete Debian template__ | + | |
| < | < | ||
| - | # Template used to create this container: / | + | lxc-create -n cracker -t debian |
| - | # Parameters passed to the template: | + | |
| - | # For additional config options, please look at lxc.container.conf(5) | + | |
| - | lxc.rootfs = / | + | |
| - | + | ||
| - | # Common configuration | + | |
| - | lxc.include = / | + | |
| - | + | ||
| - | # Container specific configuration | + | |
| - | lxc.mount = / | + | |
| - | lxc.utsname = HOSTNAME | + | |
| - | lxc.arch = amd64 | + | |
| - | + | ||
| - | # Network | + | |
| - | lxc.network.type = veth | + | |
| - | lxc.network.flags = up | + | |
| - | + | ||
| - | # that's the interface defined above in host's interfaces file | + | |
| - | lxc.network.link = lxcbr0 | + | |
| - | + | ||
| - | # name of network device inside the container, | + | |
| - | # defaults to eth0, you could choose a name freely | + | |
| - | lxc.network.name = lxcnet0 | + | |
| - | + | ||
| - | lxc.network.hwaddr = 00: | + | |
| - | lxc.network.veth.pair = veth1 | + | |
| - | + | ||
| - | # the ip may be set to 0.0.0.0/24 or skip this line | + | |
| - | # if you like to use a dhcp client inside the container | + | |
| - | lxc.network.ipv4 = 10.10.10.10/ | + | |
| - | + | ||
| - | # define a gateway to have access to the internet | + | |
| - | lxc.network.ipv4.gateway = 10.10.10.1 | + | |
| - | + | ||
| - | # Autostart | + | |
| - | lxc.start.auto = 1 | + | |
| - | lxc.start.delay = 5 | + | |
| - | lxc.start.order = 100 | + | |
| </ | </ | ||
| + | === Configure === | ||
| - | __Modern Debian template__ | + | ==/ |
| < | < | ||
| Line 305: | Line 269: | ||
| Now we can start and stop the container, attach to it, etc. | Now we can start and stop the container, attach to it, etc. | ||
| + | |||
| + | ===Runit=== | ||
| + | |||
| + | Start container and login as root | ||
| + | < | ||
| + | lxc-start -F -n container | ||
| + | </ | ||
| + | |||
| + | Install runit. It will ask you to enter a phrase and after installation reboot. | ||
| + | |||
| + | < | ||
| + | apt install runit-init | ||
| + | reboot | ||
| + | </ | ||
| + | |||
| + | Login to tidy up. | ||
| + | |||
| + | < | ||
| + | lxc-attach -n container | ||
| + | cd / | ||
| + | rm getty-tty* | ||
| + | </ | ||
