Great write-up Simos…  훌륭한 글이야 시모스…

I did it with the above post, but the container vm can not get the ip address. Tell me how to fix the problem.
위의 게시물로 했지만, 컨테이너 VM이 IP 주소를 받을 수 없습니다. 문제를 해결하는 방법을 알려주세요.
The test environment is DHCP.
테스트 환경은 DHCP입니다.

[root@ns01 ~]# uname -a
Linux ns01 3.10.0-693.21.1.el7.x86_64 #1 SMP Wed Mar 7 19:03:37 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux (centos 7)

[root@ns01 ~]# lxc list  [root@ns01 ~]# lxc 목록
+——+———+——+——+————+———–+
| NAME | STATE | IPV4 | IPV6 | TYPE | SNAPSHOTS |
+——+———+——+——+————+———–+
| c2 | RUNNING | | | PERSISTENT | 0 |
| c2 | 실행 중 | | | 지속적 | 0 |
+——+———+——+——+————+———–+

[root@ns01 ~]# lxc profile show lanprofile
config: {}
description: Default LXD profile
기본 LXD 프로필
devices:  장치:
eth0:
name: eth0
nictype: macvlan
parent: ens160
type: nic
root:
path: /
pool: default
type: disk  타입: 디스크
name: lanprofile
used_by:
– /1.0/containers/c2

[root@ns01 ~]# ifconfig ens160
ens160: flags=4163 mtu 1500
inet 192.168.50.30 netmask 255.255.255.0 broadcast 192.168.50.255
inet6 fe80::9e56:786c:39be:e30a prefixlen 64 scopeid 0x20
ether 00:0c:29:22:66:3e txqueuelen 1000 (Ethernet)
RX packets 4342 bytes 1841714 (1.7 MiB)
RX 패킷 4342 바이트 1841714 (1.7 MiB)
RX errors 0 dropped 12 overruns 0 frame 0
RX 오류 0 드롭 12 오버런 0 프레임 0
TX packets 2515 bytes 262656 (256.5 KiB)
TX 패킷 2515 바이트 262656 (256.5 KiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
TX 오류 0 드롭 0 오버런 0 캐리어 0 충돌 0

[root@ns01 ~]# ip route show 0.0.0.0/0
default via 192.168.50.1 dev ens160 proto static metric 100

======= below c2 (centos 7) ======
[root@c2 ~]# ip -d link show eth0
7: eth0@if2: mtu 1500 qdisc noqueue state UNKNOWN mode DEFAULT qlen 1000
link/ether 00:16:3e:f4:6f:8d brd ff:ff:ff:ff:ff:ff link-netnsid 0 promiscuity 0
macvlan mode bridge addrgenmode eui64
macvlan 모드 브리지 addrgenmode eui64

Thanks.  감사합니다.

This worked perfectly on a CentOS 7.5 1804 (core) host on 8/21/2018. I created an LXD ZFS-backed container for Ubuntu 18.04 exactly as you describe, and it automatically got an address assigned on my home network LAN by the DHCP server on that LAN. The private network on the host that LXD gave me was useless, but the methods you illustrate here are very useful. Thanks for your work, and for the clarity of exposition as well! Bravo!
이것은 2018년 8월 21일에 CentOS 7.5 1804 (core) 호스트에서 완벽하게 작동했습니다. 저는 당신이 설명한 대로 Ubuntu 18.04를 위해 LXD ZFS 기반 컨테이너를 만들었고, 그것은 자동으로 해당 LAN의 DHCP 서버에 의해 제 홈 네트워크 LAN에서 주소가 할당되었습니다. LXD가 저에게 제공한 호스트의 개인 네트워크는 쓸모가 없었지만, 여기서 설명하는 방법들은 매우 유용합니다. 당신의 작업과 명확한 설명에 감사드립니다! 브라보!

@Simos Xenitellis on September 12, 2018 at 16:24
thanks for thinking with me. Its Ubuntu 17.10 on bare metal. Also, I installed the snap package with lxd 3.x (couldnt wait for finding time to install 18.04 :)) and it’s the same. Both 16.04 and 18.04 containers request DHCP, an offer is sent but not received.

I have followed this article and another youtube video and have created a set of LXD containers all using Ubuntu 18.04. I want to expose one of the containers to the internet since it is the primary web server for this system. All of the systems are using Static IP using MacVlan and have been configured with netplan 50-cloud.

Host System – IP 192.168.86.100
LXC System – NextCloud Server – 192.168.86.101
LXC System – OnlyOffice Document Server – 192.168.86.102

I can ping from my workstation to each of the systems, and from the system back to my work station, but when I try to ping from 2 or 3 to 1, it gets no response. I ping from 1 to 2 or 3, I get no response. I port forward to #2 on port 80. I try to access it from the web, I get page not found. I am sure I missed something, but have not found the magic key. Any thoughts?

Simos,

Have you seen this error before?

Error: Device validation failed “eth0”: Cannot use “nictype” property in conjunction with “network” property

I posted a write up with my own experience of deploying Macvlan & LXD (see https://blog.plip.com/2019/08/17/nat-and-macvlan-on-production-lxd-plus-reverse-proxy-ssh-config/) and some users are coming across this error when then run this command:

lxc profile device set lanprofile eth0 nictype macvlan

While I’ve tried to reproduce the error, I haven’t been able to. I thought I might reach out because I feel you seem to have a much stronger grasp of this stuff than I do. I suspected maybe newer versions of LXD are causing it, but I’ve been unable to confirm.

Much thanks!!

Hi Sir.

I have tried the steps above but when creating the container I did not get the IP details as follows:

ubuntu@lxd-belajarlinux:~$
ubuntu@lxd-belajarlinux:~$ lxc profile create macvlan
Profile macvlan created
ubuntu@lxd-belajarlinux:~$ lxc profile list
+---------+---------+
|  NAME   | USED BY |
+---------+---------+
| default | 1       |
+---------+---------+
| macvlan | 0       |
+---------+---------+
ubuntu@lxd-belajarlinux:~$ lxc profile show macvlan
config: {}
description: ""
devices: {}
name: macvlan
used_by: []
ubuntu@lxd-belajarlinux:~$ ip route show default 0.0.0.0/0
default via 10.36.36.1 dev ens3 proto dhcp src 10.36.36.5 metric 100
ubuntu@lxd-belajarlinux:~$
ubuntu@lxd-belajarlinux:~$ lxc profile device add macvlan eth0 nic nictype=macvlan parent=ens3
Device eth0 added to macvlan
ubuntu@lxd-belajarlinux:~$
ubuntu@lxd-belajarlinux:~$ lxc profile show macvlan
config: {}
description: ""
devices:
  eth0:
    nictype: macvlan
    parent: ens3
    type: nic
name: macvlan
used_by: []
ubuntu@lxd-belajarlinux:~$ lxc launch ubuntu:18.04 net1 --profile default --profile macvlan
Creating net1
Starting net1
ubuntu@lxd-belajarlinux:~$ lxc launch ubuntu:18.04 net2 --profile default --profile macvlan
Creating net2
Starting net2
ubuntu@lxd-belajarlinux:~$ lxc list
+------+---------+----------------------+----------------------------------------------+-----------+-----------+
| NAME |  STATE  |         IPV4         |                     IPV6                     |   TYPE    | SNAPSHOTS |
+------+---------+----------------------+----------------------------------------------+-----------+-----------+
| net1 | RUNNING |                      |                                              | CONTAINER | 0         |
+------+---------+----------------------+----------------------------------------------+-----------+-----------+
| net2 | RUNNING |                      |                                              | CONTAINER | 0         |
+------+---------+----------------------+----------------------------------------------+-----------+-----------+
| wtf  | RUNNING | 10.228.25.102 (eth0) | fd42:c1d4:8f3:fa13:216:3eff:fe3c:56a9 (eth0) | CONTAINER | 0         |
+------+---------+----------------------+----------------------------------------------+-----------+-----------+
ubuntu@lxd-belajarlinux:~$

Is there something wrong?.

Thank you for the advice

Unfortunately, it still doesn’t work 🙁

[root@lxd1 ~]# lxc ls
+------+-------+------+------+------+-----------+----------+
| NAME | STATE | IPV4 | IPV6 | TYPE | SNAPSHOTS | LOCATION |
+------+-------+------+------+------+-----------+----------+
[root@lxd1 ~]# lxc image ls
+-------+-------------+--------+-------------+--------------+------+------+-------------+
| ALIAS | FINGERPRINT | PUBLIC | DESCRIPTION | ARCHITECTURE | TYPE | SIZE | UPLOAD DATE |
+-------+-------------+--------+-------------+--------------+------+------+-------------+
[root@lxd1 ~]# lxc launch images:centos/8-Stream stream --profile default --profile macvlan
Creating stream
Starting stream
[root@lxd1 ~]# lxc ls
+--------+---------+------+------+-----------+-----------+------------------------------+
| NAME | STATE | IPV4 | IPV6 | TYPE | SNAPSHOTS | LOCATION |
+--------+---------+------+------+-----------+-----------+------------------------------+
| stream | RUNNING | | | CONTAINER | 0 | lxd1.-redacted- |
+--------+---------+------+------+-----------+-----------+------------------------------+
[root@lxd1 ~]# lxc launch images:centos/8 centos80 --profile default --profile macvlan
Creating centos80
Starting centos80
[root@lxd1 ~]# lxc ls
+----------+---------+------+------+-----------+-----------+------------------------------+
| NAME | STATE | IPV4 | IPV6 | TYPE | SNAPSHOTS | LOCATION |
+----------+---------+------+------+-----------+-----------+------------------------------+
| centos80 | RUNNING | | | CONTAINER | 0 | lxd1.-redacted- |
+----------+---------+------+------+-----------+-----------+------------------------------+
| stream | RUNNING | | | CONTAINER | 0 | lxd1.-redacted- |
+----------+---------+------+------+-----------+-----------+------------------------------+
[root@lxd1 ~]# lxc launch images:centos/7 centos7 --profile default --profile macvlan
Creating centos7
Starting centos7
[root@lxd1 ~]# lxc ls
+----------+---------+------+------+-----------+-----------+------------------------------+
| NAME | STATE | IPV4 | IPV6 | TYPE | SNAPSHOTS | LOCATION |
+----------+---------+------+------+-----------+-----------+------------------------------+
| centos7 | RUNNING | | | CONTAINER | 0 | lxd1.-redacted- |
+----------+---------+------+------+-----------+-----------+------------------------------+
| centos80 | RUNNING | | | CONTAINER | 0 | lxd1.-redacted- |
+----------+---------+------+------+-----------+-----------+------------------------------+
| stream | RUNNING | | | CONTAINER | 0 | lxd1.-redacted- |
+----------+---------+------+------+-----------+-----------+------------------------------+
[root@lxd1 ~]# lxc ls
+----------+---------+------+------+-----------+-----------+------------------------------+
| NAME | STATE | IPV4 | IPV6 | TYPE | SNAPSHOTS | LOCATION |
+----------+---------+------+------+-----------+-----------+------------------------------+
| centos7 | RUNNING | | | CONTAINER | 0 | lxd1.-redacted- |
+----------+---------+------+------+-----------+-----------+------------------------------+
| centos80 | RUNNING | | | CONTAINER | 0 | lxd1.-redacted- |
+----------+---------+------+------+-----------+-----------+------------------------------+
| stream | RUNNING | | | CONTAINER | 0 | lxd1.-redacted- |
+----------+---------+------+------+-----------+-----------+------------------------------+
[root@lxd1 ~]# lxc ls
+----------+---------+--------------------+------+-----------+-----------+------------------------------+
| NAME | STATE | IPV4 | IPV6 | TYPE | SNAPSHOTS | LOCATION |
+----------+---------+--------------------+------+-----------+-----------+------------------------------+
| centos7 | RUNNING | 10.10.1.127 (eth0) | | CONTAINER | 0 | lxd1.-redacted- |
+----------+---------+--------------------+------+-----------+-----------+------------------------------+
| centos80 | RUNNING | | | CONTAINER | 0 | lxd1.-redacted- |
+----------+---------+--------------------+------+-----------+-----------+------------------------------+
| stream | RUNNING | | | CONTAINER | 0 | lxd1.-redacted- |
+----------+---------+--------------------+------+-----------+-----------+------------------------------+
[root@lxd1 ~]# lxc image ls
+-------+--------------+--------+----------------------------------------+--------------+-----------+----------+-------------------------------+
| ALIAS | FINGERPRINT | PUBLIC | DESCRIPTION | ARCHITECTURE | TYPE | SIZE | UPLOAD DATE |
+-------+--------------+--------+----------------------------------------+--------------+-----------+----------+-------------------------------+
| | 10504755901f | no | Centos 7 amd64 (20201217_07:08) | x86_64 | CONTAINER | 83.41MB | Dec 17, 2020 at 10:14am (UTC) |
+-------+--------------+--------+----------------------------------------+--------------+-----------+----------+-------------------------------+
| | ad35b15ede2d | no | Centos 8 amd64 (20201217_07:08) | x86_64 | CONTAINER | 125.56MB | Dec 17, 2020 at 10:13am (UTC) |
+-------+--------------+--------+----------------------------------------+--------------+-----------+----------+-------------------------------+
| | b26773ad0a9b | no | Centos 8-Stream amd64 (20201217_07:08) | x86_64 | CONTAINER | 126.81MB | Dec 17, 2020 at 10:12am (UTC) |
+-------+--------------+--------+----------------------------------------+--------------+-----------+----------+-------------------------------+


is there any way to get this running for wireless interface

tx for the reply, i tried with routed network it worked but was not able to internet from container (like ping google.com) but other hosts are reachable from the container.

My host machine is not a VM, it is a bare metal box and it is running with ubuntu 20.04

~ lxc list
+------+---------+----------------------+------+-----------+-----------+
| NAME |  STATE  |         IPV4         | IPV6 |   TYPE    | SNAPSHOTS |
+------+---------+----------------------+------+-----------+-----------+
| u1   | RUNNING | 192.168.1.200 (eth0) |      | CONTAINER | 0         |
+------+---------+----------------------+------+-----------+-----------+

~ lxc exec u1 bash

This is inside the container host machine is reachable

root@u1:~# ping 192.168.1.36 
PING 192.168.1.36 (192.168.1.36) 56(84) bytes of data.
64 bytes from 192.168.1.36: icmp_seq=1 ttl=64 time=0.116 ms
64 bytes from 192.168.1.36: icmp_seq=2 ttl=64 time=0.069 ms
--- 192.168.1.36 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1027ms
rtt min/avg/max/mdev = 0.069/0.092/0.116/0.023 ms

This is inside the container google.com is not reachable

root@u1:~# ping google.com
ping: google.com: Temporary failure in name resolution

Interesting….
I’m searching a way to do the same, but with static public IPs.
Currently I have enp35s0 with 4 public IPs assigned to it, and 3 LXD containers and I want each container to use one of the public IPs.
Simox Xenitellis, can you give a hint, please?

Actually famous last words 🙂

Oddly, I can’t ping or ssh onto the container from the host, though I can from other PC’s

I presume this could be some routing issue? have rebooted the host to be sure.