Table of Contents
1 Install LXD
The following script will install LXD.
#!/bin/sh -eFEDORA=https://dl.fedoraproject.org/pub/fedora/linux/releases/27FEDORA_PACKAGES_L=${FEDORA}/Everything/source/tree/Packages/lFEDORA_LXC=lxc-2.0.8-2.fc27.2.src.rpm# Install Fedora’s lxc package because centos’s is too old.sudo yum install -y wget epel-release rpmdevtools rpm-buildwget -q ${FEDORA_PACKAGES_L}/${FEDORA_LXC}sudo yum-builddep -y ${FEDORA_LXC}rpmbuild –rebuild ${FEDORA_LXC}# shellcheck disable=SC2046sudo yum localinstall -y $(find ~/rpmbuild/RPMS -type f -a ! -name “*debuginfo*”)USER_ADDED_TO_LXD_GROUP=”${USER}”export GOPATH=${HOME}/go# Setup subuid and subgid.echo “root:100000:65536” | sudo tee -a /etc/subuidecho “root:100000:65536” | sudo tee -a /etc/subgid# LXD/LXC uses lxc-xxx pakcage.sudo yum install -y lxc-devel# The container-selinux has supported LXD.sudo yum install -y container-selinux# Add lxd group and add user to lxd group.sudo /usr/sbin/groupadd -r lxdsudo gpasswd -a “${USER_ADDED_TO_LXD_GROUP}” lxdsudo mkdir /var/lib/lxdsudo chown root:lxd /var/lib/lxdsudo restorecon /var/lib/lxd# Build LXD and install LXD.sudo yum install -y git golang sqlite-devel dnsmasq squashfs-tools libacl-develgo get -v -x github.com/lxc/lxd/lxc github.com/lxc/lxd/lxdsudo cp “${GOPATH}”/bin/lxd /usr/binsudo chown root:lxd /usr/bin/lxdsudo restorecon /usr/bin/lxdsudo cp “${GOPATH}”/bin/lxc /usr/binsudo chown root:lxd /usr/bin/lxcsudo restorecon /usr/bin/lxc# Create LXD directory.sudo mkdir -p /var/log/lxdsudo chown root:lxd /var/log/lxdsudo restorecon /var/log/lxd# Setup systemd service.cat <<EOF | sudo tee /usr/lib/systemd/system/lxd.service[Unit]Description=LXD – main daemonAfter=network.targetRequires=network.target lxd.socketDocumentation=man:lxd(1)[Service]Environment=”LXD_SOCKET=/var/run/lxd/unix.socket”EnvironmentFile=-/etc/environmentExecStart=/usr/bin/lxd –group lxd –logfile=/var/log/lxd/lxd.logExecStartPost=/usr/bin/lxd waitready –timeout=600KillMode=processTimeoutStartSec=600TimeoutStopSec=40Restart=on-failureLimitNOFILE=infinityLimitNPROC=infinity[Install]Also=lxd.socketEOFsudo restorecon /usr/lib/systemd/system/lxd.servicecat <<EOF | sudo tee /usr/lib/systemd/system/lxd.socket[Unit]Description=LXD – unix socketDocumentation=man:lxd(1)[Socket]ListenStream=/var/run/lxd/unix.socketSocketGroup=lxdSocketMode=0660Service=lxd.service[Install]WantedBy=sockets.targetEOFsudo restorecon /usr/lib/systemd/system/lxd.socketsudo systemctl –system daemon-reloadsudo systemctl enable lxd.servicecat <<EOF | sudo tee /etc/profile.d/lxd.shexport LXD_SOCKET=/var/run/lxd/unix.socketEOF# Setup kernel.sudo yum install -y grub2-tools# shellcheck disable=SC1091. /etc/default/grubC=”user_namespace.enable=1 namespace.unpriv_enable=1″C=”$GRUB_CMDLINE_LINUX $C”sudo sed -e “s;^GRUB_CMDLINE_LINUX=.*;GRUB_CMDLINE_LINUX=”$C”;g” -i /etc/default/grubsudo /usr/sbin/grub2-mkconfig -o /boot/grub2/grub.cfgcat <<EOF | sudo tee /etc/sysctl.d/lxd.confuser.max_user_namespaces=15076EOF# LXD can be used after reboot.sudo /sbin/reboot
2 Initialize LXD
The following script will initialize LXD.
#!/bin/sh# Would you like to use LXD clustering? (yes/no) [default=no]: no# Do you want to configure a new storage pool? (yes/no) [default=yes]: yes# Name of the new storage pool [default=default]: default# Name of the storage backend to use (dir, lvm, zfs) [default=zfs]: dir# Would you like to connect to a MAAS server? (yes/no) [default=no]: no# Would you like to create a new network bridge? (yes/no) [default=yes]: yes# What should the new bridge be called? [default=lxdbr0]: lxdbr0# What IPv4 address should be used? (CIDR subnet notation, “auto” or “none”)# [default=auto]: auto# What IPv6 address should be used? (CIDR subnet notation, “auto” or “none”)# [default=auto]: none# Would you like LXD to be available over the network? (yes/no)# [default=no]: no# Would you like stale cached images to be updated automatically? (yes/no)# [default=yes] yes# Would you like a YAML “lxd init” preseed to be printed? (yes/no)# [default=no]: no# Initialize LXD with NAT network.lxd waitreadycat <<EOF | lxd initnoyesdefaultdirnoyeslxdbr0autononenoyesnoEOF
3 Run container
This can download debian/stretch image and run it. IP address is assigned to container.
$ lxc launch images:debian/stretch debian<snip>$ lxc exec debian ip a s1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWNgroup default qlen 1 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever inet6 ::1/128 scope host valid_lft forever preferred_lft forever4: eth0@if5: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueuestate UP group default qlen 1000 link/ether 00:16:3e:29:1e:7d brd ff:ff:ff:ff:ff:ff link-netnsid 0 inet6 fe80::216:3eff:fe29:1e7d/64 scope link tentative valid_lft forever preferred_lft forever