On Tue, 9 Feb 2016 10:32, Jochen Wiedmann wrote:
Hi,
I am trying to implement something like an "LXC on CentOS 7 HowTo" for internal use. (Might as well get public afterwards.) I am following the HowTo for CentOS 6 (https://wiki.centos.org/HowTos/LXC-on-CentOS6). So, here's what I did so far (Steps 1-6 can easily be omitted, but I am trying to be complete.)
1.) Disable delta RPM's in /etc/yum.conf
_________^ Well, that needs a explicite explanation on the WHY, IMHO not needed
2.) Remove LibreOffice
sudo yum remove "libreoffice*"
_______________^ Well, that is personal taste, the existence of a installed LibreOffice should not influence LXC in any way.
3.) System update
sudo yum -y update
This should be first point. No one should start a installation of such a complex matter as Virtualisation on a outdated system. Best add comment about the use of "yum ps" or the real need of a reboot in case of glibc/udev/kernel updates before going further in installing.
4.) Install some niceties
sudo yum -y install emacs emacs-nox "@Development Tools" git subversion
_______________^ Again personal taste, for some is the installation of emacs a sacred act, for other pure blasphemy. say something about making sure the the favourite text-cli editor is installed is more helpful here. Remember the UNIX way: Less is more. Less software on the host(metal), means more uptime between unavoidable reboots, esp. for servers.
5.) Reboot 6.) Install VirtualBox Guest Additions
________^ Eh? You want to use LXC, not "VirtualBox", what are the "Guest Additions" for? Explain, if really needed
7.) Install libvirt
_______^ Give better title here, e.g. "Install packages for LXC: libvirt + co."
sudo yum -y install libvirt libvirt-client libvirt-install
8.) Setting up root fs for a container:
sudo su - mkdir -p /var/lib/libvirt/lxc/centos01/etc/yum.repos.d cat cat /etc/yum.repos.d/CentOS-Base.repo | sed s/'$releasever'/7/g
/var/lib/libvirt/lxc/centos01/etc/yum.repos.d/CentOS-Base.repo
_______^ Ok, that can be done better, and easier to read and understand: [code] cp -t /var/lib/libvirt/lxc/centos01/etc/yum.repos.d/ \ /etc/yum.repos.d/CentOS-Base.repo sed --in-place 's/$releasever/7/g' \ /var/lib/libvirt/lxc/centos01/etc/yum.repos.d/CentOS-Base.repo [/code] If you really need the switched of "Delta RPM" stuff, here and now is the place.
yum groupinstall core --installroot=/var/lib/libvirt/lxc/centos01 # The following command seems to be redundant, as bothpackages are already installed as part of the core group. yum -y install plymouth libselinux-python --installroot=/var/lib/libvirt/lxc/centos01
Now, according to the old howto, I am to configure PAM in the new root fs. Reading through that; I don't really understand what I am to do. For example, I am to replace a line with "session required pam_selinux.so close". However, the matching line is a comment line, which makes me unsure.
Are those PAM configurations still required? If so, could someone help me on what to do exactly?
Thanks,
Jochen
I have not needed any pam-monging so far, but ... [shrugs].
Please, some other (real-live) expert, go over the installation procedere, too, I'm no guru, nor a last instance.
Lets give enough input to make this HowTo conform to best practises.
- Yamaban.