[PLDWWW] page changed: docs:vserver
"Arkadiusz Miśkiewicz (arekm)"
arekm at pld-linux.org
Tue Nov 26 10:30:15 CET 2013
--- https://www.pld-linux.org/docs/vserver?rev=1373128554
+++ https://www.pld-linux.org/docs/vserver
@@ -1007,18 +1007,53 @@
* add to ''/etc/vservers/test/apps/init/mtab'': <file>/dev/vroot3 /home/ xfs defaults,usrquota 0 0
</file>
* add ''quota_ctl'' to ''/etc/vservers/test/ccapabilities'':
- * restart your vserver and run ''edquota'' inside
+ * restart your vserver and run ''edquota'' inside
+
===== Network namespace in vservers =====
+
+ Starting from util-vserver 0.30.216-1.pre3054 there is basic support for creating network namespaces with interfaces inside.
+
+ Enabling netns and two capabilities: NET_ADMIN (allows interfaces in guest to be managed) and NET_RAW (makes iptables working).
+
+
+ <file>mkdir /etc/vservers/test/spaces
+ touch /etc/vserver/test/spaces/net
+ echo NET_ADMIN >> /etc/vservers/test/bcapabilities
+ echo NET_RAW >> /etc/vservers/test/bcapabilities
+ echo 'plain' > /etc/vservers/test/apps/init/style
+ </file>
+
+ Avoid context isolation since it makes little sense when using network namespaces:
+ <file>touch /etc/vserver/test/noncontext</file>
+
+ Configure interfaces:
+
+ 0 - arbitrary directory name, just for ordering
+
+ myiface0 will be interface name inside of guest (optional, default geth0,
+ geth1 and so on)
+
+ veth-host - interface name on the host side
+
+ <file>
+ mkdir -p /etc/vservers/test/netns/interfaces/0
+ echo myiface0 > /etc/vservers/test/netns/interfaces/guest
+ echo veth-host > /etc/vservers/test/netns/interfaces/host
+ </file>
+
+ !!! FINISH ME. FINISH ME. FINISH ME. !!!
+
+ ===== Network namespace in vservers (OLD WAY) =====
Enabling netns and two capabilities: NET_ADMIN (allows interfaces in guest to be managed) and NET_RAW (makes iptables working).
Plain init style is needed for post-start to run as soon as possible (and with plain init style is just after starting init process).
- <file>mkdir /etc/vserver/test/spaces
- touch /etc/vserver/test/spaces/net
+ <file>mkdir /etc/vservers/test/spaces
+ touch /etc/vservers/test/spaces/net
echo NET_ADMIN >> /etc/vservers/test/bcapabilities
echo NET_RAW >> /etc/vservers/test/bcapabilities
echo 'plain' > /etc/vservers/test/apps/init/style
</file>
Diff URL:
https://www.pld-linux.org/docs/vserver?do=diff&r1=1373128554&r2=1385458214
--
This mail was generated by DokuWiki at
https://www.pld-linux.org/
More information about the pld-cvs-commit
mailing list