Linux容器虚拟化LXC的使用

待我称王封你为后i 2022-08-14 04:35 116阅读 0赞

Oops：

万一不能访问，请自带梯子和火星文翻译器

官方网站：

[https://linuxcontainers.org/][https_linuxcontainers.org]

Github：

[https://github.com/lxc/lxc][https_github.com_lxc_lxc]

火星文简介：

What's LXC?  
  
LXC is a userspace interface for the Linux kernel containment features.  
Through a powerful API and simple tools, it lets Linux users easily create and manage system or application containers.  
Features  
  
Current LXC uses the following kernel features to contain processes:  
  
    Kernel namespaces (ipc, uts, mount, pid, network and user)  
    Apparmor and SELinux profiles  
    Seccomp policies  
    Chroots (using pivot\_root)  
    Kernel capabilities  
    Control groups (cgroups)   \# 需要用到cgroups子系统  
  
As such, LXC is often considered as something in the middle between a chroot on steroids and a full fledged virtual machine. The goal of LXC is to create an environment as close as possible as a standard Linux installation but without the need for a separate kernel.  
Components  
  
LXC is currently made of a few separate components:  
  
    The liblxc library  
    Several language bindings for the API:  
        python3 (in-tree, long term support in 1.0.x)  
        lua (in tree, long term support in 1.0.x)  
        Go  
        ruby  
        python2  
        Haskell  
    A set of standard tools to control the containers  
    Container templates  
  
Licensing  
  
LXC is free software, most of the code is released under the terms of the GNU LGPLv2.1+ license, some Android compatibility bits are released under a standard 2-clause BSD license and some binaries and templates are shipped under the GNU GPLv2 license.  
Where do I get it?  
From upstream  
  
You can fetch the latest upstream tarballs here or grab it directly from git here or with:  
  
git clone git://github.com/lxc/lxc

\------------------------------------------------------------------------------------------

实战部分：

准备工作：

系统环境和yum源

[![wKioL1R6jGuh4ipWAAFM4cYtj7o799.jpg][]][wKioL1R6jGuh4ipWAAFM4cYtj7o799.jpg]

安装所需软件包：

1) debootstrap

debootstrap is used to create a Debian base system from scratch, without  
requiring the availability of dpkg or apt.

2) libvirt

省去麻烦的配置，直接用这个 ^\_^

3) libcgroup

Control groups infrastructure. The tools and library help manipulate, control administrate and monitor control groups and the associated controllers.

4) lxc lxc-templates

主要包以及模板(等下我们稍微改下模板文件的yum源)

5) 当然还需要 gcc rsync

[![wKioL1R6jvHxRlOgAANxmP4mt18724.jpg][]][wKioL1R6jvHxRlOgAANxmP4mt18724.jpg]

启动相关服务：

[![wKioL1R6kLXz\_gWdAAPgSsKfyaE607.jpg][wKioL1R6kLXz_gWdAAPgSsKfyaE607.jpg]][wKioL1R6kLXz_gWdAAPgSsKfyaE607.jpg]

修改模板文件：

[![wKiom1R6kR\_DxzOJAAIylTLfrQs326.jpg][wKiom1R6kR_DxzOJAAIylTLfrQs326.jpg]][wKiom1R6kR_DxzOJAAIylTLfrQs326.jpg]

系统给提供了这么多模板，下面来修改下centos模板的默认源(修改之前自觉备份一个)

[![wKiom1R6khvgHOPpAADXoI35pVQ427.jpg][]][wKiom1R6khvgHOPpAADXoI35pVQ427.jpg]

开始正式安装:

[![wKiom1R6k6fgzYVuAAGlLHPyeUU985.jpg][]][wKiom1R6k6fgzYVuAAGlLHPyeUU985.jpg]

lxc-create creates a container  
  
Options :  
  -n, --name=NAME    NAME for name of the container  
  -f, --config=file  Initial configuration file  
  -t, --template=t   Template to use to setup container

[![wKiom1R6lHai81NFAAKCrg9llPk992.jpg][]][wKiom1R6lHai81NFAAKCrg9llPk992.jpg]

修改密码：

\# chroot /var/lib/lxc/centos\_1/rootfs passwd

启动虚拟机：

\# lxc-start -d -n centos\_1

Options :  
  -n, --name=NAME        NAME for name of the container  
  -d, --daemon           daemonize the container

查看虚拟机状态：

\# lxc-info -n centos\_1

[![wKioL1R6ldCQv9exAADVkU\_yRrg504.jpg][wKioL1R6ldCQv9exAADVkU_yRrg504.jpg]][wKioL1R6ldCQv9exAADVkU_yRrg504.jpg]

连过去看看：

[![wKiom1R6ldfQ-d70AAKg2tzzM3U169.jpg][]][wKiom1R6ldfQ-d70AAKg2tzzM3U169.jpg]

这样一台就弄好了,如果要做LBC，HAC这类实验，可以克隆多个来实现。

LXC给我们提供了很多管理工具：

lxc-attach  
lxc-clone       \# 克隆相关  
lxc-destroy     \# 销毁  
lxc-ls          \# List containers existing on the system。

lxc-stop        \# XD  
lxc-usernsexec  
lxc-autostart  
lxc-config  
lxc-execute  
lxc-monitor  
lxc-top        \# top你懂的  
lxc-wait  
lxc-cgroup  
lxc-console  
lxc-freeze  
lxc-snapshot  \# 给一个容器镜像  
lxc-unfreeze  
lxc-checkconfig  
lxc-create    \# 创建  
lxc-info      \# 显示容器状态信息  
lxc-start     \# 启动  
lxc-unshare

Python API：

Python 3K

import lxc    
        container = lxc.Container("p1")
        container.create("ubuntu")
        container.start()
        container.get_ips()
        container.stop()

Python 2.X:

https://github.com/cloud9ers/pylxc

[![041405283617635.gif][]][041405283617635.gif 1]

[https_linuxcontainers.org]: https://linuxcontainers.org/
[https_github.com_lxc_lxc]: https://github.com/lxc/lxc
[wKioL1R6jGuh4ipWAAFM4cYtj7o799.jpg]: /images/20220810/330d54e30be64722b6b0c024acc76c88.png
[wKioL1R6jvHxRlOgAANxmP4mt18724.jpg]: /images/20220810/4976a867c4c24dcb9c917ae29f3ae9d2.png
[wKioL1R6kLXz_gWdAAPgSsKfyaE607.jpg]: /images/20220810/791edad9445049a8b07ec3fcc06d8c70.png
[wKiom1R6kR_DxzOJAAIylTLfrQs326.jpg]: /images/20220810/d358d58bd312420eb0824cace56e9457.png
[wKiom1R6khvgHOPpAADXoI35pVQ427.jpg]: /images/20220810/6c99313505354ebf961dc94d6e46cb01.png
[wKiom1R6k6fgzYVuAAGlLHPyeUU985.jpg]: /images/20220810/62369776a1284551a78ed4dd1b937255.png
[wKiom1R6lHai81NFAAKCrg9llPk992.jpg]: /images/20220810/9da51ae4289c473cbda757ec5d236e10.png
[wKioL1R6ldCQv9exAADVkU_yRrg504.jpg]: /images/20220810/32129a32289944ecb85aa0adeb621ce1.png
[wKiom1R6ldfQ-d70AAKg2tzzM3U169.jpg]: /images/20220810/c059948c330844f19a9a4f3375758925.png
[041405283617635.gif]: /images/20220810/aefc5143fa944137bade10fe30fb6e37.png
[041405283617635.gif 1]: http://www.itmmd.com/boke.html