Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
tools:lxc [2022/09/01 22:36] – [Initialise] darron | tools:lxc [2024/10/24 00:19] (current) – [Setup] darron | ||
---|---|---|---|
Line 12: | Line 12: | ||
< | < | ||
- | apt-get install lxc lxc-templates bridge-utils cgroupfs-mount conntrack iptables | + | apt-get install lxc lxc-templates bridge-utils cgroupfs-mount conntrack iptables |
/ | / | ||
</ | </ | ||
Line 31: | Line 31: | ||
==systemd== | ==systemd== | ||
< | < | ||
+ | systemctl stop lxc-monitord.service | ||
+ | systemctl disable lxc-monitord.service | ||
+ | systemctl mask lxc-monitord.service | ||
systemctl disable lxc-net.service | systemctl disable lxc-net.service | ||
systemctl disable lxc.service | systemctl disable lxc.service | ||
Line 38: | Line 41: | ||
< | < | ||
- | sed -i ' | + | sed -i ' |
- | sed -i ' | + | sed -i ' |
</ | </ | ||
Line 85: | Line 88: | ||
iptables -t raw -F | iptables -t raw -F | ||
iptables -t nat -F | iptables -t nat -F | ||
- | /usr/sbin/conntrack -F | + | conntrack -F |
# raw: | # raw: | ||
Line 135: | Line 138: | ||
< | < | ||
+ | mkdir -p / | ||
wget " | wget " | ||
gpg --no-default-keyring --keyring / | gpg --no-default-keyring --keyring / | ||
Line 152: | Line 156: | ||
lxc-create -n terminator -t debian -- -r bullseye -a armhf | lxc-create -n terminator -t debian -- -r bullseye -a armhf | ||
</ | </ | ||
- | === Configure === | ||
- | ==/ | + | Install bookworm (32-bit) |
- | + | ||
- | __Obsolete Debian template__ | + | |
< | < | ||
- | # Template used to create this container: / | + | lxc-create -n cracker -t debian |
- | # Parameters passed to the template: | + | |
- | # For additional config options, please look at lxc.container.conf(5) | + | |
- | lxc.rootfs = / | + | |
- | + | ||
- | # Common configuration | + | |
- | lxc.include = / | + | |
- | + | ||
- | # Container specific configuration | + | |
- | lxc.mount = / | + | |
- | lxc.utsname = HOSTNAME | + | |
- | lxc.arch = amd64 | + | |
- | + | ||
- | # Network | + | |
- | lxc.network.type = veth | + | |
- | lxc.network.flags = up | + | |
- | + | ||
- | # that's the interface defined above in host's interfaces file | + | |
- | lxc.network.link = lxcbr0 | + | |
- | + | ||
- | # name of network device inside the container, | + | |
- | # defaults to eth0, you could choose a name freely | + | |
- | lxc.network.name = lxcnet0 | + | |
- | + | ||
- | lxc.network.hwaddr = 00: | + | |
- | lxc.network.veth.pair = veth1 | + | |
- | + | ||
- | # the ip may be set to 0.0.0.0/24 or skip this line | + | |
- | # if you like to use a dhcp client inside the container | + | |
- | lxc.network.ipv4 = 10.10.10.10/ | + | |
- | + | ||
- | # define a gateway to have access to the internet | + | |
- | lxc.network.ipv4.gateway = 10.10.10.1 | + | |
- | + | ||
- | # Autostart | + | |
- | lxc.start.auto = 1 | + | |
- | lxc.start.delay = 5 | + | |
- | lxc.start.order = 100 | + | |
</ | </ | ||
+ | === Configure === | ||
- | __Modern Debian template__ | + | ==/ |
< | < | ||
Line 305: | Line 270: | ||
Now we can start and stop the container, attach to it, etc. | Now we can start and stop the container, attach to it, etc. | ||
+ | |||
+ | ===Runit=== | ||
+ | |||
+ | Start container and login as root | ||
+ | < | ||
+ | lxc-start -F -n container | ||
+ | </ | ||
+ | |||
+ | Install runit. It will ask you to enter a phrase and after installation reboot. | ||
+ | |||
+ | < | ||
+ | apt install runit-init | ||
+ | reboot | ||
+ | </ | ||
+ | |||
+ | or | ||
+ | |||
+ | < | ||
+ | apt-get install runit runit-run runit-systemd | ||
+ | </ | ||
+ | |||
+ | Login to tidy up. | ||
+ | |||
+ | < | ||
+ | lxc-attach -n container | ||
+ | cd / | ||
+ | rm getty-tty* | ||
+ | </ | ||
+ | |||
+ | ===Apt=== | ||
+ | |||
+ | < | ||
+ | sed -i ' | ||
+ | </ |