nelsnelson

$ cat seccomp-example.sh
#! /usr/bin/env bash

cat << EOF > /tmp/config
lxc.seccomp = /tmp/whitelist
EOF
cat << EOF > /tmp/whitelist
1
whitelist
0

nelsnelson

$ sudo aptitude versions lxc | grep 1.0.0
p   1.0.0~beta1-5~r1+1                            unstable                  500 
p   1.0.0~beta1-5~r1+1                            unstable                  500 
p   1.0.0~beta1-5~r1+1                            unstable                  500 
p   1.0.0~beta1-5~r1+1                            unstable                  500 
$ sudo apt-get install lxc=1.0.0~beta1-5~r1+1
Reading package lists... Done
Building dependency tree       
Reading state information... Done
The following extra packages will be installed:

nelsnelson

$ cat seccomp.sh 
#! /usr/bin/env bash

cat << EOF > /tmp/config
lxc.seccomp = /tmp/whitelist
EOF
cat << EOF > /tmp/whitelist
1
whitelist
1

nelsnelson

Config contents:
lxc.seccomp = /tmp/whitelist

Whitelist contents:
1
whitelist
0
1

nelsnelson

$ /bin/bash ulimiter.sh 40 forks.py
0: 9388
2: 9390
1: 9389
3: 9391
4: 9392
6: 9394
5: 9393
7: 9395
8: 9396

nelsnelson

$ ./tags.rb
apple
edible

nelsnelson

$ sudo lxc-execute -n test -l DEBUG -o /tmp/lxc.log -- echo hello world
hello world
$ cat /tmp/lxc.log 
    lxc-execute 1391753212.665 INFO     lxc_lsm - LSM security driver SELinux
    lxc-execute 1391753212.665 DEBUG    lxc_start - sigchild handler set
    lxc-execute 1391753212.665 INFO     lxc_console - no console for lxc-execute.
    lxc-execute 1391753212.665 INFO     lxc_start - 'test' is initialized
    lxc-execute 1391753212.671 DEBUG    lxc_start - Not dropping cap_sys_boot or watching utmp
    lxc-execute 1391753212.671 INFO     lxc_cgroup - cgroup driver cgroupfs initing for test
    lxc-execute 1391753212.674 DEBUG    lxc_conf - Set exec command to echo

nelsnelson

$ sudo lxc-create -n test -o /tmp/lxc.log
lxc-create: Error creating container test
$ cat /tmp/lxc.log 
     lxc-create 1391754787.424 ERROR    lxc_create_ui - Error creating container test

nelsnelson

$ cat /tmp/lxc.log 
     lxc-create 1391628487.880 WARN     lxc_log - lxc_log_init called with log already initialized
     lxc-create 1391628487.893 INFO     bdev - got 0 for thin pool at path: /dev/lxc/lxc
     lxc-create 1391628487.962 DEBUG    bdev - trying to mount '/dev/lxc/test'->'/usr/lib/lxc/rootfs' with fstype 'ext3'
     lxc-create 1391628487.963 INFO     bdev - mounted '/dev/lxc/test' on '/usr/lib/lxc/rootfs', with fstype 'ext3'
     lxc-create 1391628487.983 INFO     lxc_create_ui - container test created
      lxc-start 1391628487.988 INFO     lxc_start_ui - using rcfile /var/lib/lxc/test/test/config
      lxc-start 1391628487.988 WARN     lxc_log - lxc_log_init called with log already initialized
      lxc-start 1391628487.988 ERROR    lxc_start_ui - Executing '/sbin/init' with no configuration file may crash the host

nelsnelson

$ sudo lxc-destroy -n test
lxc_container: _recursive_rmdir_onedev: failed to delete /var/lib/lxc/test/rootfs/run/shm
lxc_container: _recursive_rmdir_onedev: failed to delete /var/lib/lxc/test/rootfs/run
lxc_container: _recursive_rmdir_onedev: failed to delete /var/lib/lxc/test/rootfs/sbin
lxc_container: _recursive_rmdir_onedev: failed to delete /var/lib/lxc/test/rootfs/lib
lxc_container: _recursive_rmdir_onedev: failed to delete /var/lib/lxc/test/rootfs/dev
lxc_container: _recursive_rmdir_onedev: failed to delete /var/lib/lxc/test/rootfs/lib64
lxc_container: _recursive_rmdir_onedev: failed to delete /var/lib/lxc/test/rootfs/bin
lxc_container: _recursive_rmdir_onedev: failed to delete /var/lib/lxc/test/rootfs/proc
lxc_container: _recursive_rmdir_onedev: failed to delete /var/lib/lxc/test/rootfs/etc/init.d