64b6c9261e
Current folder name New folder name Book title ---------------------------------------------------------- basic-install DELETE cli-guide DELETE common common NEW admin-guide-cloud Cloud Administrators Guide docbkx-example DELETE openstack-block-storage-admin DELETE openstack-compute-admin DELETE openstack-config config-reference OpenStack Configuration Reference openstack-ha high-availability-guide OpenStack High Availabilty Guide openstack-image image-guide OpenStack Virtual Machine Image Guide openstack-install install-guide OpenStack Installation Guide openstack-network-connectivity-admin admin-guide-network OpenStack Networking Administration Guide openstack-object-storage-admin DELETE openstack-security security-guide OpenStack Security Guide openstack-training training-guide OpenStack Training Guide openstack-user user-guide OpenStack End User Guide openstack-user-admin user-guide-admin OpenStack Admin User Guide glossary NEW OpenStack Glossary bug: #1220407 Change-Id: Id5ffc774b966ba7b9a591743a877aa10ab3094c7 author: diane fleming
35 lines
2.0 KiB
XML
35 lines
2.0 KiB
XML
<?xml version="1.0" encoding="utf-8"?>
|
|
<section xmlns="http://docbook.org/ns/docbook"
|
|
xmlns:xi="http://www.w3.org/2001/XInclude"
|
|
xmlns:xlink="http://www.w3.org/1999/xlink" version="5.0"
|
|
xml:id="lxc">
|
|
<title>LXC (Linux containers)</title>
|
|
<para>LXC (also known as Linux containers) is a virtualization
|
|
technology that works at the operating system level. This is
|
|
different from hardware virtualization, the approach used by other
|
|
hypervisors such as KVM, Xen, and VMWare. LXC (as currently
|
|
implemented using libvirt in the nova project) is not a secure
|
|
virtualization technology for multi-tenant environments
|
|
(specifically, containers may affect resource quotas for other
|
|
containers hosted on the same machine). Additional containment
|
|
technologies, such as AppArmor, may be used to provide better
|
|
isolation between containers, although this is not the case by
|
|
default. For all these reasons, the choice of this virtualization
|
|
technology is not recommended in production.</para>
|
|
<para>If your compute hosts do not have hardware support for virtualization, LXC will likely
|
|
provide better performance than QEMU. In addition, if your guests need to access to specialized
|
|
hardware (e.g., GPUs), this may be easier to achieve with LXC than other hypervisors.</para>
|
|
<note><para>Some OpenStack Compute features may be missing when running with LXC as the hypervisor. See
|
|
the <link xlink:href="http://wiki.openstack.org/HypervisorSupportMatrix">hypervisor support
|
|
matrix</link> for details.</para></note>
|
|
<para>To enable LXC, ensure the following options are set in
|
|
<filename>/etc/nova/nova.conf</filename> on all hosts running the <systemitem class="service"
|
|
>nova-compute</systemitem>
|
|
service.<programlisting language="ini">compute_driver=libvirt.LibvirtDriver
|
|
libvirt_type=lxc</programlisting></para>
|
|
<para>On Ubuntu 12.04, enable LXC support in OpenStack by installing the
|
|
<literal>nova-compute-lxc</literal> package.</para>
|
|
|
|
</section>
|
|
|