[Devel] Re: container-to-host virtual or loopback kind of interface support

[Eric W. Biederman]

Elwin Stelzer Eliazer <stelzere at gmail.com> writes:

> Thanks Eric for your detailed response.
>
> On the PPP interfaces under namespace, how do i configure them under lxc
> config? Are there other types like "veth" and "macvlan" for PPP?

veth and macvlan are created with
ip link add .... type veth ....
ip link add .... type macvlan ...

ppp is created normally.

I have never run lxc and find it's interface inflexible for my needs so I don't
know the specifics there.

> And i believe the container app that opens the /dev/tun gets ownership of the
> file handle, and several container apps can open this in parallel, and they do
> not interfere. Even if the containers do not have separate rootfs, this is the
> case. Please confirm on these.

It is the tun SETIFF ioctl that specifies which interface a tun device connect to.
But yes several tun/tap  work just in a container.

 Eric
_______________________________________________
Containers mailing list
Containers at lists.linux-foundation.org
https://lists.linux-foundation.org/mailman/listinfo/containers