openstack/nova
Code Issues Proposed changes
deae814611
nova/doc/source/admin/configuration/hypervisor-lxc.rst
Stephen Finucane 76549775fe docs: Change formatting of hypervisor config guides 
Use the formatting established in the style guide. There's a lot of
out-of-date information in here, but that's a battle for another day.

Change-Id: Ieec2c8f450c05a2451179e3bdba77514f2cc956e
Signed-off-by: Stephen Finucane <stephenfin@redhat.com>
2021-03-23 11:16:42 +00:00

1.6 KiB
Raw Blame History

LXC (Linux containers)

LXC (also known as Linux containers) is a virtualization technology that works at the operating system level. This is different from hardware virtualization, the approach used by other hypervisors such as KVM, Xen, and VMware. LXC (as currently implemented using libvirt in the Compute service) is not a secure virtualization technology for multi-tenant environments (specifically, containers may affect resource quotas for other containers hosted on the same machine). Additional containment technologies, such as AppArmor, may be used to provide better isolation between containers, although this is not the case by default. For all these reasons, the choice of this virtualization technology is not recommended in production.

If your compute hosts do not have hardware support for virtualization, LXC will likely provide better performance than QEMU. In addition, if your guests must access specialized hardware, such as GPUs, this might be easier to achieve with LXC than other hypervisors.

Note

Some OpenStack Compute features might be missing when running with LXC as the hypervisor. See the hypervisor support matrix for details.

Configuration

To enable LXC, configure :oslo.configDEFAULT.compute_driver = libvirt.LibvirtDriver and :oslo.configlibvirt.virt_type = lxc. For example:

[DEFAULT]
compute_driver = libvirt.LibvirtDriver

[libvirt]
virt_type = lxc

On Ubuntu, enable LXC support in OpenStack by installing the nova-compute-lxc package.