やりたいこと
以前、Raspberry Pi 3 Model B に LXC と LXD を使ってコンテナ環境を実現したのですが、今回は Raspberry Pi 3 Model B+ を新調し、改めて LXC と LXD をインストールしてコンテナ環境を実現します。
コンテナ環境には、自宅用のDNS/DHCPサーバー、メールサーバー、linebot用のWEBサーバー、子ども用スマホの通信制御用Firewall、環境データ(温度、湿度、気圧)保存用のDBサーバー などを構築しますが、詳細は別記事の「自宅サーバー構築記録(Part 0)」で紹介していきます。
環境
- Raspberry Pi 3 Model B+
- 2019-04-08-raspbian-stretch
- microSD 64GB
pi@raspberrypi:~ $
pi@raspberrypi:~ $ uname -a
Linux raspberrypi 4.19.42-v7+ #1219 SMP Tue May 14 21:20:58 BST 2019 armv7l GNU/Linux
pi@raspberrypi:~ $
pi@raspberrypi:~ $ lsb_release -a
No LSB modules are available.
Distributor ID: Raspbian
Description: Raspbian GNU/Linux 9.9 (stretch)
Release: 9.9
Codename: stretch
pi@raspberrypi:~ $
やったこと
パッケージ管理ツール snapd をインストール
今回は LXC/LXD 3.0.x1 を snap からインストールしたいので snapd パッケージを apt でインストールします。
pi@raspberrypi:~ $
pi@raspberrypi:~ $ sudo apt install snapd -y
pi@raspberrypi:~ $
snap で lxd をインストール
lxdパッケージがあるか確認
pi@raspberrypi:~ $
pi@raspberrypi:~ $ sudo snap info lxd
Name Version Publisher Notes Summary
lxd-demo-server 0+git.0227b57 stgraber - Online software demo sessions using LXD
lxd 3.13 canonical? - System container manager and API
pi@raspberrypi:~ $
lxdパッケージの詳細を確認
pi@raspberrypi:~ $
pi@raspberrypi:~ $ sudo snap info lxd
name: lxd
summary: System container manager and API
publisher: Canonical?
license: unset
description: |
**LXD is a system container manager**
With LXD you can run hundreds of containers of a variety of Linux
distributions, apply resource limits, pass in directories, USB devices
or GPUs and setup any network and storage you want.
LXD containers are lightweight, secure by default and a great
alternative to running Linux virtual machines.
**Run any Linux distribution you want**
Pre-made images are available for Ubuntu, Alpine Linux, ArchLinux,
CentOS, Debian, Fedora, Gentoo, OpenSUSE and more.
A full list of available images can be [found
here](https://images.linuxcontainers.org)
Can't find the distribution you want? It's easy to make your own images
too, either using our `distrobuilder` tool or by assembling your own image
tarball by hand.
**Containers at scale**
LXD is network aware and all interactions go through a simple REST API,
making it possible to remotely interact with containers on remote
systems, copying and moving them as you wish.
Want to go big? LXD also has built-in clustering support,
letting you turn dozens of servers into one big LXD server.
**Configuration options**
Supported options for the LXD snap (`snap set lxd KEY=VALUE`):
- criu.enable: Enable experimental live-migration support [default=false]
- daemon.debug: Increases logging to debug level [default=false]
- daemon.group: Group of users that can interact with LXD [default=lxd]
- ceph.builtin: Use snap-specific ceph configuration [default=false]
- openvswitch.builtin: Run a snap-specific OVS daemon [default=false]
[Documentation](https://lxd.readthedocs.io)
snap-id: J60k4JY0HppjwOjW8dZdYc8obXKxujRu
tracking: 3.0/stable
refresh-date: yesterday at 00:24 JST
channels:
stable: 3.13 2019-05-13 (10758) 48MB -
candidate: 3.13 2019-05-10 (10758) 48MB -
beta: ↑
edge: git-2609835 2019-05-16 (10781) 48MB -
3.0/stable: 3.0.3 2018-11-26 (9665) 45MB - ★ 今回はこれをインストールする
3.0/candidate: 3.0.3 2019-01-19 (9943) 45MB -
3.0/beta: ↑
3.0/edge: git-eaa62ce 2019-02-19 (10213) 45MB -
2.0/stable: 2.0.11 2018-07-30 (8017) 23MB -
2.0/candidate: 2.0.11 2018-07-27 (8017) 23MB -
2.0/beta: ↑
2.0/edge: git-c7c4cc8 2018-10-19 (9255) 22MB -
installed: 3.0.3 (9665) 45MB devmode
pi@raspberrypi:~ $
channel 3.0/stable を指定してインストール
pi@raspberrypi:~ $
pi@raspberrypi:~ $ sudo snap install lxd --channel=3.0/stable
pi@raspberrypi:~ $
確認
pi@raspberrypi:~ $
pi@raspberrypi:~ $ lxc --version
3.0.3
pi@raspberrypi:~ $
pi@raspberrypi:~ $ lxd --version
3.0.3
pi@raspberrypi:~ $
ブリッジインターフェース作成
LXCコンテナが接続されるネットワークについては、有線LAN(eth0)と同じ 192.168.33.0/24 のセグメントにしたいのでブリッジインターフェース(br0)を作成します。
pi@raspberrypi:~ $
pi@raspberrypi:~ $ sudo apt install bridge-utils
pi@raspberrypi:~ $
br0インターフェースを追加
pi@raspberrypi:~ $
pi@raspberrypi:~ $ sudo vi /etc/network/interfaces
：
auto br0
iface br0 inet manual
bridge_ports eth0
bridge_stp off
：
pi@raspberrypi:~ $
DHCPを無効化し固定IPを割り当てる
/etc/network/interfaces に記述しても動作するが /etc/dhcpcd.conf に記述するように注意書きがしてあるのでそれに従って設定する。
参考：「Raspbian jessie で bridge する備忘録」
pi@raspberrypi:~ $
pi@raspberrypi:~ $ sudo vi /etc/dhcpcd.conf
：
denyinterfaces eth0
：
interface br0
static ip_address=192.168.33.12/24
static routers=192.168.33.254
static domain_name_servers=192.168.33.21
：
pi@raspberrypi:~ $
再起動して確認
pi@raspberrypi:~ $
pi@raspberrypi:~ $ sudo reboot
pi@raspberrypi:~ $
pi@raspberrypi:~ $
pi@raspberrypi:~ $ ip add show eth0
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master br0 state UP group default qlen 1000
link/ether b8:27:eb:a0:1b:8d brd ff:ff:ff:ff:ff:ff
pi@raspberrypi:~ $
pi@raspberrypi:~ $ ip add show br0
3: br0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether b8:27:eb:a0:1b:8d brd ff:ff:ff:ff:ff:ff
inet 192.168.33.12/24 brd 192.168.33.255 scope global br0
valid_lft forever preferred_lft forever
inet6 240f:30:d187:1:3bfb:538a:a9a6:a0cc/64 scope global mngtmpaddr noprefixroute dynamic
valid_lft 270sec preferred_lft 270sec
inet6 fe80::ba27:ebff:fea0:1b8d/64 scope link
valid_lft forever preferred_lft forever
pi@raspberrypi:~ $
pi@raspberrypi:~ $ sudo brctl show
bridge name bridge id STP enabled interfaces
br0 8000.b827eba01b8d no eth0
pi@raspberrypi:~ $
LXD初期設定
pi@raspberrypi:~ $
pi@raspberrypi:~ $ lxd init
Would you like to use LXD clustering? (yes/no) [default=no]:
Do you want to configure a new storage pool? (yes/no) [default=yes]:
Name of the new storage pool [default=default]:
Name of the storage backend to use (btrfs, ceph, dir, lvm) [default=btrfs]: dir
Would you like to connect to a MAAS server? (yes/no) [default=no]:
Would you like to create a new local network bridge? (yes/no) [default=yes]: no ★ 既存の br0 を使うので "no"
Would you like to configure LXD to use an existing bridge or host interface? (yes/no) [default=no]: yes ★ br0 を使うので "yes"
Name of the existing bridge or host interface: br0 ★作成した "br0" を指定
Would you like LXD to be available over the network? (yes/no) [default=no]:
Would you like stale cached images to be updated automatically? (yes/no) [default=yes]
Would you like a YAML "lxd init" preseed to be printed? (yes/no) [default=no]: yes
config: {}
networks: []
storage_pools:
- config: {}
description: ""
name: default
driver: dir
profiles:
- config: {}
description: ""
devices:
eth0:
name: eth0
nictype: bridged
parent: br0
type: nic
root:
path: /
pool: default
type: disk
name: default
cluster: null
pi@raspberrypi:~ $
設定確認
プロファイル
pi@raspberrypi:~ $
pi@raspberrypi:~ $ lxc profile list
+---------+---------+
| NAME | USED BY |
+---------+---------+
| default | 0 |
+---------+---------+
pi@raspberrypi:~ $
pi@raspberrypi:~ $ lxc profile show default
config: {}
description: Default LXD profile
devices:
eth0:
name: eth0
nictype: bridged
parent: br0
type: nic
root:
path: /
pool: default
type: disk
name: default
used_by: []
pi@raspberrypi:~ $
ネットワーク
pi@raspberrypi:~ $
pi@raspberrypi:~ $ lxc network list
+-------+----------+---------+-------------+---------+
| NAME | TYPE | MANAGED | DESCRIPTION | USED BY |
+-------+----------+---------+-------------+---------+
| br0 | bridge | NO | | 0 |
+-------+----------+---------+-------------+---------+
| eth0 | physical | NO | | 0 |
+-------+----------+---------+-------------+---------+
| wlan0 | physical | NO | | 0 |
+-------+----------+---------+-------------+---------+
pi@raspberrypi:~ $
pi@raspberrypi:~ $ lxc network show br0
config: {}
description: ""
name: br0
type: bridge
used_by: []
managed: false
status: ""
locations: []
pi@raspberrypi:~ $
コンテナのテンプレートイメージが置いてあるリモートサーバー一覧
pi@raspberrypi:~ $
pi@raspberrypi:~ $ lxc remote list
+-----------------+------------------------------------------+---------------+-----------+--------+--------+
| NAME | URL | PROTOCOL | AUTH TYPE | PUBLIC | STATIC |
+-----------------+------------------------------------------+---------------+-----------+--------+--------+
| images | https://images.linuxcontainers.org | simplestreams | | YES | NO |
+-----------------+------------------------------------------+---------------+-----------+--------+--------+
| local (default) | unix:// | lxd | tls | NO | YES |
+-----------------+------------------------------------------+---------------+-----------+--------+--------+
| ubuntu | https://cloud-images.ubuntu.com/releases | simplestreams | | YES | YES |
+-----------------+------------------------------------------+---------------+-----------+--------+--------+
| ubuntu-daily | https://cloud-images.ubuntu.com/daily | simplestreams | | YES | YES |
+-----------------+------------------------------------------+---------------+-----------+--------+--------+
pi@raspberrypi:~ $
「images:」というリモートサーバーにあるテンプレート一覧
最新のテンプレート一覧はこちら https://images.linuxcontainers.org
pi@raspberrypi:~ $
pi@raspberrypi:~ $ lxc image list images:
+--------------------------------------+--------------+--------+----------------------------------------------+---------+-----------+-------------------------------+
| ALIAS | FINGERPRINT | PUBLIC | DESCRIPTION | ARCH | SIZE | UPLOAD DATE |
+--------------------------------------+--------------+--------+----------------------------------------------+---------+-----------+-------------------------------+
| alpine/3.6 (3 more) | 01019a788334 | yes | Alpine 3.6 armhf (20190520_13:00) | armv7l | 3.11MB | May 20, 2019 at 12:00am (UTC) |
+--------------------------------------+--------------+--------+----------------------------------------------+---------+-----------+-------------------------------+
| alpine/3.6/amd64 (1 more) | 235b94fa821a | yes | Alpine 3.6 amd64 (20190520_13:00) | x86_64 | 3.17MB | May 20, 2019 at 12:00am (UTC) |
+--------------------------------------+--------------+--------+----------------------------------------------+---------+-----------+-------------------------------+
| alpine/3.6/arm64 (1 more) | 3a8dbcdc2fa2 | yes | Alpine 3.6 arm64 (20190520_13:00) | aarch64 | 3.07MB | May 20, 2019 at 12:00am (UTC) |
+--------------------------------------+--------------+--------+----------------------------------------------+---------+-----------+-------------------------------+
：
：
：
pi@raspberrypi:~ $
コンテナの基本操作
コンテナ作成
テンプレート名「centos/7」を使って、「c1-centos7」というコンテナを作成する
pi@raspberrypi:~ $
pi@raspberrypi:~ $ lxc launch images:centos/7 c1-centos7
Creating c1-centos7
Starting c1-centos7
pi@raspberrypi:~ $
作成したコンテナを確認
pi@raspberrypi:~ $
pi@raspberrypi:~ $ lxc list
+------------+---------+-----------------------+------------------------------------------+------------+-----------+
| NAME | STATE | IPV4 | IPV6 | TYPE | SNAPSHOTS |
+------------+---------+-----------------------+------------------------------------------+------------+-----------+
| c1-centos7 | RUNNING | 192.168.33.163 (eth0) | 240f:30:d187:1:216:3eff:fe40:b209 (eth0) | PERSISTENT | 0 |
+------------+---------+-----------------------+------------------------------------------+------------+-----------+
pi@raspberrypi:~ $
pi@raspberrypi:~ $ lxc info c1-centos7
Name: c1-centos7
Remote: unix://
Architecture: armv7l
Created: 2019/05/20 15:27 UTC
Status: Running
Type: persistent
Profiles: default
Pid: 26403
Ips:
eth0: inet 192.168.33.163 vethTPUHMD
eth0: inet6 240f:30:d187:1:216:3eff:fe40:b209 vethTPUHMD
eth0: inet6 fe80::216:3eff:fe40:b209 vethTPUHMD
lo: inet 127.0.0.1
lo: inet6 ::1
Resources:
Processes: 1
CPU usage:
CPU usage (in seconds): 4
Memory usage:
Memory (current): 35.75MB
Memory (peak): 36.84MB
Network usage:
eth0:
Bytes received: 9.29kB
Bytes sent: 1.37kB
Packets received: 58
Packets sent: 11
lo:
Bytes received: 0B
Bytes sent: 0B
Packets received: 0
Packets sent: 0
pi@raspberrypi:~ $
pi@raspberrypi:~ $ lxc config show c1-centos7
architecture: armv7l
config:
image.architecture: armhf
image.description: Centos 7 armhf (20190520_07:08)
image.os: Centos
image.release: "7"
image.serial: "20190520_07:08"
volatile.base_image: ab193fd6af55d6281600a2fa14db00cb9172f6f19540d86c198d80bbd9211d2a
volatile.eth0.hwaddr: 00:16:3e:40:b2:09
volatile.idmap.base: "0"
volatile.idmap.next: '[{"Isuid":true,"Isgid":true,"Hostid":1000000,"Nsid":0,"Maprange":1000000000}]'
volatile.last_state.idmap: '[{"Isuid":true,"Isgid":true,"Hostid":1000000,"Nsid":0,"Maprange":1000000000}]'
volatile.last_state.power: RUNNING
devices: {}
ephemeral: false
profiles:
- default
stateful: false
description: ""
pi@raspberrypi:~ $
コンテナにログインする
pi@raspberrypi:~ $
pi@raspberrypi:~ $ lxc exec c1-centos7 /bin/bash
[root@c1-centos7 ~]#
[root@c1-centos7 ~]# cat /etc/os-release
NAME="CentOS Linux"
VERSION="7 (AltArch)"
ID="centos"
ID_LIKE="rhel fedora"
VERSION_ID="7"
PRETTY_NAME="CentOS Linux 7 (AltArch)"
ANSI_COLOR="0;31"
CPE_NAME="cpe:/o:centos:centos:7"
HOME_URL="https://www.centos.org/"
BUG_REPORT_URL="https://bugs.centos.org/"
CENTOS_MANTISBT_PROJECT="CentOS-7"
CENTOS_MANTISBT_PROJECT_VERSION="7"
REDHAT_SUPPORT_PRODUCT="centos"
REDHAT_SUPPORT_PRODUCT_VERSION="7"
[root@c1-centos7 ~]#
[root@c1-centos7 ~]# exit
exit
pi@raspberrypi:~ $
コンテナを停止させる
pi@raspberrypi:~ $
pi@raspberrypi:~ $ lxc stop c1-centos7
pi@raspberrypi:~ $
pi@raspberrypi:~ $ lxc list
+------------+---------+------+------+------------+-----------+
| NAME | STATE | IPV4 | IPV6 | TYPE | SNAPSHOTS |
+------------+---------+------+------+------------+-----------+
| c1-centos7 | STOPPED | | | PERSISTENT | 0 |
+------------+---------+------+------+------------+-----------+
pi@raspberrypi:~ $
コンテナを削除する
削除するときはコンテナを停止させておく必要がある。
pi@raspberrypi:~ $
pi@raspberrypi:~ $ lxc delete c1-centos7
pi@raspberrypi:~ $
pi@raspberrypi:~ $ lxc list
+------+-------+------+------+------+-----------+
| NAME | STATE | IPV4 | IPV6 | TYPE | SNAPSHOTS |
+------+-------+------+------+------+-----------+
pi@raspberrypi:~ $