oam/knowledge base/lxc.md

Linux Container Runtime

Table of contents

1. TL;DR
2. Create new containers as an unprivileged user
3. Further readings

TL;DR

# Install the LXC runtime
apt-get install 'lxc'
snap install 'lxd'

# List available templates.
ls '/usr/share/lxc/templates'

# List the options supported by templates.
lxc-create -t 'download' -h

# List the available images.
lxc-create -t 'download' -- -l
lxc-create -t 'download' -- --list

# Create containers.
# Use the 'download' template to choose from a list of distribution.
lxc-create -n 'nas' -t 'download'
lxc-create --name 'nas' --template 'download' -- \
  --server 'images.linuxcontainers.org'

# Create containers non-interactively.
# Values are case sensitive and depend from what is on the server.
lxc-create -n 'alpine' -t 'download' -- -d 'Alpine' -r '3.18' -a 'armv7l'
lxc-create --name 'pi-hole' --template 'download' -- \
  --server 'repo.turris.cz/lxc' \
  --dist 'Ubuntu' --release 'Focal' --arch 'armv7l'
lxc-create … -t 'download' -- -d 'debian' -r 'bookworm' -a 'amd64' \
  --server 'images.linuxcontainers.org'

# Start containers.
lxc-start -n 'pi-hole'
lxc-start -n 'git-server' --foreground
lxc-start -n 'cfengine' --daemon --define 'CONFIGVAR=VALUE'

# Stop containers.
lxc-stop -n 'mariadb'
lxc-stop -n 'netcat' --kill

# Destroy containers.
# Requires the container to be already stopped.
lxc-destroy -n 'netcat'

# Get containers' status.
lxc-info -n 'pi-hole'

# Get the status of all containers.
lxc-ls --fancy

# Get a shell inside containers.
lxc-attach -n 'git-server'

# Get configuration options from `man`
man 5 'lxc.container.conf'
man 'lxc.container.conf.5'
man 'lxc.container.conf(5)'

Create new containers as an unprivileged user

# Allow user 'vagrant' to create up to 10 'veth' devices connected to the
# 'lxcbr0' bridge.
echo "vagrant veth lxcbr0 10" | sudo tee -a '/etc/lxc/lxc-usernet'

Further readings

• Website
• Getting started guide