Comparison of Linux Distributions for LXC Hosting

Posted February 12, 2011 By Landis V

Recently I’ve started investigating Linux Virtual Containers (LXCs) to separate some of the things I’d like to play with on my hosts (a Diaspora instance, log analysis, and possibly a Nagios/FAN/Centreon instance for my own use as I start to think more about home automation, to name a few).  Of course I’ve got plenty of raw hardware to build a host whenever I need to, but I’d like to realize the efficiency of having some of these items that are fairly likely to be underutilized on a single box – not to mention the time savings in comparison to rebuilding a box from scratch each time I need one.

My original intent was to wait until I had this post completed and tidied up before posting, but it may never be done in that case.  So, I will instead be publishing it beginning partway through my first installation and updating as I progress through the installations.  You are advised in advance that some of the content might not be overly reader-friendly; comments and corrections are welcome.

I’ve done some experimentation on my main daily use Ubuntu 10.10 Maverick release with less than stellar results (primarily due to inexperience I think) and, since I’ve been able to obtain some additional hardware, to test on an alternate box.  In preparing to test, I wanted to find out which Linux distro tended to work the best for hosting LXC containers.  What I came to realize is that many people seem to have experience performing installations on a single distribution or a couple of similar distributions (i.e., Debian/Ubuntu), but there doesn’t seem to be a whole lot of documentation out there that compares the experience between different distros.  So I decided to find out.

Will be comparing on the same hardware, a default installation of Fedora 14, Debian 6.0.0 net install, Arch 2010.5 net install, OpenSUSE 11.3 net install, CentOS 5.5 net install, and Gentoo 2010210 minimal, all AMD/x86 64-bit.  Test hardware is a Dell OptiPlex 755 Core 2 Duo at 2.53GHz with 4GB 667MHz SDRAM, 80GB SATA hard drive.

Arch – default, except changed / partition from 7500 to 8500.  Most of the instruction came from https://wiki.archlinux.org/index.php/Linux_Containers, with additional information on installing AUR packages (including lxc) from https://wiki.archlinux.org/index.php/Arch_User_Repository.  Accepted default packages plus OpenSSH at the initial package selection.  Some minor difficulties accessing the box remotely to proceed with installation, ended up editing /etc/hosts.deny and remarking the ALL:ALL line, all was happy thereafter.  Installed base-devel package with pacman -S base-devel.  Downloaded the lxc package from Arch AUR and extracted with tar -zxvf lxc.tar.gz.  Changed directory to lxc, ran makepkg -S –asroot then installed with pacman -U lxc-0.7.3-1-x86_64.pkg.tar.gz.  Continued with installation of bridge-utils (pacman -S bridge-utils).

Edited /etc/conf.d/bridges and /etc/rc.conf to set up the network configuration.  Per my primary instructional link above, noted necessary changes to /etc/rc.d/network.  Downloaded the patch for the file using wget –no-check-certificate https://bugs.archlinux.org/task/16625?getfile=4176 -O network.das-patch, made a backup copy of my original file, and applied the patch using patch -p0 /etc/rc.d/network network.das-patch.  Confirmed patch applied correctly by diff /etc/rc.d/network network.bak (network.bak being the name of my backup file, of course).

This seemed like a good time to do a reboot and make sure my networking config came back up properly before jumping into the actual container configuration, so I did.  No response from the box after the reboot.  Interestingly enough, eth0 did not restore even though br0 was showing as up.  Issued an ifconfig eth0 up followed by dhcpcd br0 and was back to talking on the network.  Need to do some additional research to see  what happened with the networking configuration, but it’s bedtime for now. (11:00PM on 17-Feb-2011)

Be the first to comment
   

Interesting day

Posted February 8, 2011 By Landis V

It has been an interesting day.  I received a CR-48 laptop/netbook from Google today.  Apparently they have selected me to participate in their Chrome OS beta and testing.  So far I’m enjoying it and haven’t really encountered any significant problems (though I do miss some of the text editing features of vi… regular expression based find and replace would have made it more convenient to do some editing in my wiki… but that’s not really a “normal” user feature).  The right-clicking and scrolling features are certainly a little bit difficult, and I could potentially see everyday users who don’t spend as much time on a PC as I do having some issues with those.  It will definitely be a change in my work habits if I end up using it extensively.  I’ve found a utility to do some “cloud” photo editing at www.pixlr.com, which seemed to work well for the basic edit I did

Getting started with ChromeOS page mentioning steamrollers

It's not the steamrollers, but the backhoes!

(it’s not the steamrollers, Google, it’s the backhoes that worry us – especially when you’re depending on the cloud!).  The touch pad is very large indeed, and I find myself bumping it if I do any significant amount of typing.  Surprisingly, for as odd as the keyboard would seem, it’s really pretty comfortable (at least to this extent, because this is the most I’ve typed with it so far).

An interesting tie-in, I received an e-mail late this afternoon regarding doing a webinar – which should to an extent preclude me from the CR-48, even as apt as it is for such things.  Geeks and their toys, though.  I found an interesting open source product called WebHuddle that I plan to do some testing with on one of the new Core 2 Duo systems I’ve acquired.  I’ve also found a great interest in LXC (Linux containers) recently and have been playing with that for virtualization.  Haven’t actually got one booted yet, but I’m very much looking forward to testing out a Diaspora instance on one – especially since they have migrated from Mondo to MySQL!

Also doing some looking at Nagios again after a long separation.  The text file configuration got to be too much to manage, but my current monitoring solution is starting to look expensive again as I consider tripling (or more) the number of nodes I monitor with it.  Especially when you take into consideration that I really don’t take good advantage of all the features that are available, and some very simple monitors in Nagios should handle very adequately.  I still really, really want to do some things to automate host addition, and I think something along the lines of Puppet could work well for that, but there’s no way I’m going to have time to get into playing with Puppet along with everything else on the docket right now.  Anyway, got off on a tangent that I meant to finish on the Core 2’s, unfortunately haven’t found any of my new ones yet that will support the VT-x extensions I’d really like to use for some bare-metal hypervisor virtualization experimentation.  Worst case, I guess at some point in the future I’ll have to break down and purchase a C2D or C2Q that does support them.

Probably enough typing for tonight, but had to pop a quick entry with all the exciting stuff lately.

1 Comment. Join the Conversation
   

1/13

Posted January 14, 2011 By Landis V

http://geochristian.wordpress.com/2009/03/17/augustine-the-literal-meaning-of-genesis/

http://networktherapy.wordpress.com/

www.packetlife.net

http://idle.slashdot.org/comments.pl?sid=1948352&cid=34857864

Tractatus

Polya’s How to Solve It

http://vimperator.org/

Be the first to comment
   

Sprint

Posted January 2, 2011 By Landis V

I think Sprint has finally won out as my future cellular carrier.  My current contract with Verizon will be up around March of this year (2011 already… unbelievable), and I have been considering making the switch for some time now.  The only downside is coverage area.  At home I don’t think we’ll have an issue even though we’re right on the edge of coverage for Sprint’s network.  This is because Sprint appears to offer a femtocell without charge to subscribers that they determine are not well covered at primary use points.  My main concern was coverage in the Kearney area and beyond, but I think we’ve come up with a pretty workable solution there.  We will see how it goes.  I can’t imagine it being any worse than dealing with Verizon’s complete and total ineptitude.

Also very much looking forward to having an Android-based device of my very own!

Be the first to comment
   

Tiddlywiki woes

Posted January 2, 2011 By Landis V

After something like six hours beating my head against a wall trying to add an extended field to a Tiddlywiki I was working on for a personal project, I finally stumbled across the cause.  The key factor was my use of Monkey Pirate Tiddlywiki (MPTW) instead of using the plain vanilla version, as MPTW is slightly closer to what I think I will eventually need for my project.

I’m fairly sure the documentation for the plain vanilla version accurately reflects that one simply needs to add a div-span section to the EditTemplate and ViewTemplate tiddlers in ones wiki.  However, in MPTW, the edit and view template functionality is contained in the MptwTheme document, under the Edit and View template sections respectively.

Maybe Google will turn up a hit for the next lost soul hunting this up and will possibly save a few hours.

Be the first to comment
   

11/19 – 11/26

Posted November 26, 2010 By Landis V

“Tact is the art of making a point without making an enemy.”
— Isaac Newton

http://rss.slashdot.org/~r/Slashdot/slashdot/~3/Cb6PdHF16c0/story01.htm http://www.webupd8.org/2010/11/alternative-to-200-lines-kernel-patch.html#comment-98834842
Alternative to the 200 line kernel patch

http://www.debtdeflation.com/blogs/2010/11/15/why-credit-money-fails/
Podcasts of seminars, might be interesting. Steve Keen

http://www.senate.gov/artandhistory/history/minute/Senate_Created.htm
Related to http://rss.slashdot.org/~r/Slashdot/slashdot/~3/jDQ_bhAIjng/story01.htm and possibly http://www.itworld.com/internet/128312/senator-threatens-block-online-copyright-bill
(Oregon senator stops Internet censorship bill)

http://www.hacer.org/pdf/Hazlitt00.pdf
Economics in One Lesson

http://news.cnet.com/8301-27080_3-20023341-245.html
Moxie Marlinspike detained by feds, laptop/phones searched, encryption passwords requested

http://www.schneier.com/blog/archives/2010/11/tsa_backscatter.html?nc=96
Schneier recap on the backscatter scanners

http://manofthehouse.com/

Feynman’s book ‘Lectures on Computation’
http://vega.org.uk/video/subseries/8

http://www.ifcomp.org/comp10/if.html
Interactive fiction games

http://www.inference.phy.cam.ac.uk/mackay/itila/book.html
Information theory and coding theory book.

http://idle.slashdot.org/comments.pl?sid=1883268&cid=34342566
Good comment regarding games, cognitive theory, and rewards.

http://repository.cmu.edu/cgi/viewcontent.cgi?article=1010&context=epp
Cooperative commons networks (detecting selfish behavior)

Be the first to comment
   

11/12

Posted November 12, 2010 By Landis V

http://west.thomson.com/productdetail/127644/40160894/productdetail.aspx
Schechter and Thomas, Principles of Patent Law (book)

http://craphound.com/?p=573
Cory Doctorow, Printcrime

“Remember, a real decision is measured by the fact that you’ve taken new action. If there’s no action, you haven’t truly decided.”
— Anthony Robbins

Cisco view-based administrative access control notes
http://blog.ine.com/2009/01/07/understanding-ios-local-aaa/ http://www.ciscologist.com/?p=443

http://rss.slashdot.org/~r/Slashdot/slashdot/~3/LiLanEQegsw/story01.htm
Canada mandates ISP deep packet inspection

Be the first to comment