One of my more popular articles on my old website was my investigation into lxc, commands for manipulating Linux containers. I wrote a few management scripts to make lxc admin a little easier, and deployment a little faster. I got some nice feedback.
This week, I investigated the current state of LXC, and wow, has it advanced. The last version I played with was v0.7.5, and now it’s up to 1.0.7 (stable version, devs keep working on the next big version). All the ideas I had are taken care of, and more. LVM backing store lets you isolate the containers filesystems, so they’re never mounted on the host. Templates are a cool idea, a way to install any ditro of Linux from scratch (provided you have the neccessary build tools, such as yum and apt-get).
The container.conf file is still a mess, and there are still precious few working examples on the Internet (but more than there used to be). Networking is still a mystery to too many people, and all Linux comes with a simple bridges. You can do VLANs on the linux bridge, I’ve done it before, but it’s not for the newbie.
LXC came out of the box setup with all the containers on their own bridge, lxcbr0, isolated from the outside world, and a NAT/PAT firewall running on the host itself, to give them outbound only access (by default). Nice idea, especially for a working default config, right out of the box.
I rather like the LVM backing store, but noticing the zfs and btrfs support makes we really want to start using and learning more about them now. Endless new technology to explore!