[OE-core] LXC - linux container support in OE

[Dorairaj, Sanjay]

Khem/Bruce,

Thanks for the input!

We are not looking at using more than a handful of containers. Just need
to secure a few of the more critical applications running on our set-tops,
so, hopefully, this should not be a problem. I will keep the group posted
on our progress and report on any issues we find.

Regards,

Sanjay Dorairaj
Comcast





On 2/13/14 9:45 PM, "Khem Raj" <raj.khem at gmail.com> wrote:

>Hi Sanjay
>
>On Thu, Feb 13, 2014 at 10:22 AM, Dorairaj, Sanjay
><Sanjay_Dorairaj at cable.comcast.com> wrote:
>> Hi Folks,
>>
>> Can someone let me know the current state of OE support for LXC
>>containers?
>> Is the current implementation of LXC support stable enough to be used
>>in a
>> fielded product? Has anyone implemented this in their products and if
>>so,
>> are there any lessons-learnt or case studies that could be shared?
>>
>> I see that there are recipes in place for this -
>> 
>>http://git.yoctoproject.org/cgit/cgit.cgi/meta-virtualization/tree/recipe
>>s-containers/lxc/lxc_0.9.0.bb?h=master
>>
>> Appreciate the help!
>
>I have deployed containers from yocto however it was using a different
>kernel version. We ran into issues when number of containers grew to
>be
>large, e.g. file sytem accesses on base kernel took the CPU, we also
>experienced severe degradation in network traffic when containers grew
>larger
>than 1000, we were using 1Gig link and there were plans to use 10Gig
>interfaces.
>
>We experimented first with containers made out of ubuntu system which
>were quite large in size and the problems  with file systems showed
>very easly
>however the yocto containers were very small in size approx 20M in
>size compared to 300M ubuntu containers, and we could launch 1000
>containers
>so the size of the container seemed to matter.
>
>The base system running the container was ubuntu system so we do not
>know if systemd could have helped us with resource allocation.
>
>The box underneath was with 16G of RAM with Haswell CPU.
>
>
>
>>
>> Regards,
>>
>> Sanjay Dorairaj
>> Comcast
>>
>>
>> _______________________________________________
>> Openembedded-core mailing list
>> Openembedded-core at lists.openembedded.org
>> http://lists.openembedded.org/mailman/listinfo/openembedded-core
>>