{"id":76911,"date":"2020-04-06T07:42:08","date_gmt":"2020-04-06T05:42:08","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-instrumentariya-upravleniya-kontejnerami-lxc-i-lxd-4-0"},"modified":"2020-04-06T07:42:08","modified_gmt":"2020-04-06T05:42:08","slug":"vypusk-instrumentariya-upravleniya-kontejnerami-lxc-i-lxd-4-0","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/vypusk-instrumentariya-upravleniya-kontejnerami-lxc-i-lxd-4-0","title":{"rendered":"Release of container management tools LXC and LXD 4.0","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Canonical released<\/a><\/noindex> release of the toolkit for organizing work of isolated containers LXC 4.0<\/a><\/noindex>, container manager LXD 4.0<\/a><\/noindex> and virtual file system LXCFS 4.0<\/a><\/noindex> for simulating in containers \/proc, \/sys, and a virtual representation of cgroupfs for distributions without namespace support for cgroup. Branch 4.0 is categorized as a long-term support release, with updates provided for 5 years<\/p>\n

LXC is a runtime for running both system containers and containers for individual applications (OCI). It includes the liblxc library, a set of utilities (lxc-create, lxc-start, lxc-stop, lxc-ls, etc.), templates for building containers, and a set of bindings for various programming languages. Isolation is achieved using the native mechanisms of the Linux kernel. The namespaces mechanism is used for isolating processes, network stack ipc, uts, user IDs, and mount points. Cgroups are used for resource limitation. To lower privileges and restrict access, kernel features such as Apparmor profiles, SELinux policies, Seccomp, Chroots (pivot_root), and capabilities are employed. The LXC code is written<\/a><\/noindex> is written in C and released under the GPLv2 license.<\/p>\n

LXD is an extension on top of LXC, CRIU, and QEMU used for centralized management of containers and virtual machines on one or multiple servers. While LXC is a low-level toolkit for manipulating at the level of individual containers, LXD is implemented as a background process that accepts requests over the network via a REST API and allows the creation of scalable configurations deployed on a cluster of multiple servers.
\nVarious storage backends are supported (directory tree, ZFS, Btrfs, LVM), snapshots with state capture, live migration of running containers from one machine to another, and tools for organizing image storage. The LXD code is written<\/a><\/noindex> is written in Go and released under the Apache 2.0 license.<\/p>\n

Key improvements<\/a><\/noindex> in LXC 4.0:<\/p>\n