Practical LXC and LXD : Linux Containers for Virtualization and Orchestration

Brief Contents 3 Contents 4 1 Intro to Linux Containers 8 Container Definition 9 Container History 10 Features to Enable Containers 11 Control Groups (Cgroups) 11 Listing Cgroups 12 Memory Subsystem Hierarchy 12 Namespaces 13 Simple Network Namespace 14 Filesystem or rootfs 15 Summary 16 2 Installation 17 LXC Installation 17 Installing LXC on Ubuntu 18 LXC Default Configuration 21 Networking Setup for LXC 21 Using a Bridge 22 Using the libvirt Default Network 23 Other Resources 24 LXD Installation 24 LXC Requirements for LXD 24 Installing LXD on Ubuntu 25 Summary 27 3 Start with LXC & LXD 28 Using LXC 28 Templates 28 Basic Usage 29 Using the Download Template 30 lxc-create 31 lxc-start 33 lxc-ls 34 lxc-attach 35 lxc-stop 35 lxc-destroy 36 Using an OS Template 36 lxc-create 36 lxc-start 38 lxc-ls 38 lxc-attach 38 lxc-stop 38 lxc-destroy 39 Using LXD 39 Using a Remote LXD As an Image Server 39 Using the Built-in Remotes 40 Manually Importing an Image 40 Running Your First Container with LXD 40 Summary 43 4 LXC & LXD Resources 44 Default LXC Templates 44 Download Template 44 Distribution-Specific Templates 48 Debian Template 48 Fedora Template 51 LXD Images 54 LXD Image Formats 54 Unified Image 54 Templates 56 Split Image 57 Using LXD Images 58 Copying Images 59 Importing Images 60 Viewing and Editing Image Information 61 Deleting Images 62 Exporting Images 63 Summary 63 5 Common Virtualization & Orchestration Tools 64 libvirt 64 Starting the Container 67 Connecting to the Container Console 67 Monitoring Container Utilization 69 Rebooting the Container 69 Stopping and Destroying the Container 69 Undefining or Deleting a Container from libvirt 70 Virtual Machine Manager GUI 70 LXC with SaltStack 79 Salt Master Setup 80 Minion Configuration 81 Restart Daemons 81 Accept Minion Key 81 Remote Salt Minion Setup 82 Accept Minion Key 83 Salt LXC Management 85 LXC with Vagrant 87 LXD-WebGUI 90 LXD Configuration 94 Using LXD-WebGUI 97 Summary 100 6 Use Cases 101 Using the Pelican Static Site Generator 102 Running Android CTS Within LXC 106 Running Unit Tests in LXC 112 Running an Application Inside LXC 113 Rolling Out Memcached Instances with LXC 114 Doing a Live Migration with LXD 117 Running Other Architectures 122 armhf Container 123 ppc64el Container 126 Booting a VM Image in LXC 127 Using JuJu with LXD 130 Summary 148 7 Containers & Security 149 Cgroups 149 Capabilities 150 AppArmor 150 SELinux 151 Seccomp 151 User Namespaces 152 Privileged Containers 152 Unprivileged Containers 152 Containers and Internet of Things (IoT) 153 Case Study: Ubuntu Snappy Core 155 Summary 159 Index 160 Use Linux containers as an alternative virtualization technique to virtualize your operating system environment. This book will cover LXC’s unmatched flexibility with virtualization and LXD’s smooth user experience. Practical LXC and LXD begins by introducing you to Linux containers (LXC and LXD). You will then go through use cases based on LXC and LXD. Next, you will see the internal workings of LXC and LXD by considering the repositories and templates used. You will then learn how to integrate LXC and LXD with common virtualization and orchestration tools such as libvirt and SaltStack. Finally, you will dive into containerization and security. The book will explore some of the common problems in security and provide a case study on how containerization can help mitigate some of the operating system-level security issues in an IoT environment. You will: Get an introduction to Linux containers Discover the basics of LXC and LXD See use cases that can be solved with LXC and LXD – for developers, devops, and system administrators Master LXC and LXD repositories Use LXC and LXD with common virtualization and orchestration tools Consider a containerization and security in IoT case study. Read more... Abstract: Use Linux containers as an alternative virtualization technique to virtualize your operating system environment. This book will cover LXC’s unmatched flexibility with virtualization and LXD’s smooth user experience. Practical LXC and LXD begins by introducing you to Linux containers (LXC and LXD). You will then go through use cases based on LXC and LXD. Next, you will see the internal workings of LXC and LXD by considering the repositories and templates used. You will then learn how to integrate LXC and LXD with common virtualization and orchestration tools such as libvirt and SaltStack. Finally, you will dive into containerization and security. The book will explore some of the common problems in security and provide a case study on how containerization can help mitigate some of the operating system-level security issues in an IoT environment. You will: Get an introduction to Linux containers Discover the basics of LXC and LXD See use cases that can be solved with LXC and LXD – for developers, devops, and system administrators Master LXC and LXD repositories Use LXC and LXD with common virtualization and orchestration tools Consider a containerization and security in IoT case study Use Linux containers as an alternative virtualization technique to virtualize your operating system environment. This book will cover LXC's unmatched flexibility with virtualization and LXD's smooth user experience. Practical LXC and LXD begins by introducing you to Linux containers (LXC and LXD). You will then go through use cases based on LXC and LXD. Next, you will see the internal workings of LXC and LXD by considering the repositories and templates used. You will then learn how to integrate LXC and LXD with common virtualization and orchestration tools such as libvirt and SaltStack. Finally, you will dive into containerization and security. The book will explore some of the common problems in security and provide a case study on how containerization can help mitigate some of the operating system-level security issues in an IoT environment. What You Will Learn Get an introduction to Linux containers Discover the basics of LXC and LXD See use cases that can be solved with LXC and LXD – for developers, devops, and system administrators Master LXC and LXD repositories Use LXC and LXD with common virtualization and orchestration tools Consider a containerization and security in IoT case study Who This Book Is For The audience for this book should have basic knowledge of Linux and software development in general. The intended readership is primarily software developers, operations engineers, and system administrators who are interested in devops, though managers and enthusiasts will also benefit from this book.