container.lxc ************* .. include:: template.service.container.lxc.example .. _container.lxc.container_data_dir: :kw:`container_data_dir` ======================== ================= ================================================================ **scopable** True **required** False **provisioning** False **default** None **inheritance** leaf > head **scope order** specific > generic ================= ================================================================ If this keyword is set, the service configures a resource-private container data store. This setup is allows stateful service relocalization. .. _container.lxc.guestos: :kw:`guestos` ============= ================= ================================================================ **scopable** True **required** False **provisioning** False **default** None **inheritance** leaf > head **scope order** specific > generic **candidates** unix | windows ================= ================================================================ The operating system in the virtual machine. .. _container.lxc.hostname: :kw:`hostname` ============== ================= ================================================================ **scopable** True **required** False **provisioning** False **default** None **inheritance** leaf > head **scope order** specific > generic ================= ================================================================ This need to be set if the virtual machine hostname is different from the machine name. .. _container.lxc.name: :kw:`name` ========== ================= ================================================================ **scopable** True **required** False **provisioning** False **default** the service name **inheritance** leaf > head **scope order** specific > generic ================= ================================================================ Set if the container hostname is different from the container name. .. _container.lxc.osvc_root_path: :kw:`osvc_root_path` ==================== ================= ================================================================ **scopable** True **required** False **provisioning** False **default** None **inheritance** leaf > head **scope order** specific > generic ================= ================================================================ If the OpenSVC agent is installed via package in the container, this parameter must not be set. Else the value can be set to the fullpath hosting the agent installed from sources. .. _container.lxc.rcmd: :kw:`rcmd` ========== ================= ================================================================ **scopable** True **required** False **provisioning** False **default** None **inheritance** leaf > head **scope order** specific > generic **convert** shlex ================= ================================================================ An container remote command override the agent default .. _container.lxc.start_timeout: :kw:`start_timeout` =================== ================= ================================================================ **scopable** True **required** False **provisioning** False **default** 240 **inheritance** leaf > head **scope order** specific > generic **convert** duration ================= ================================================================ Wait for before declaring the container action a failure. .. _container.lxc.stop_timeout: :kw:`stop_timeout` ================== ================= ================================================================ **scopable** True **required** False **provisioning** False **default** 120 **inheritance** leaf > head **scope order** specific > generic **convert** duration ================= ================================================================ Wait for before declaring the container action a failure. .. _container.lxc.cf: :kw:`cf` ======== ================= ================================================================ **scopable** False **required** False **provisioning** True **default** None **inheritance** leaf > head **scope order** specific > generic ================= ================================================================ Defines a lxc configuration file in a non-standard location. .. _container.lxc.mirror: :kw:`mirror` ============ ================= ================================================================ **scopable** False **required** False **provisioning** True **default** None **inheritance** leaf > head **scope order** specific > generic ================= ================================================================ Sets the ``MIRROR`` environment variable for :cmd:`lxc-create`, pointing the distribution server to use. .. _container.lxc.rootfs: :kw:`rootfs` ============ ================= ================================================================ **scopable** False **required** False **provisioning** True **default** None **inheritance** leaf > head **scope order** specific > generic ================= ================================================================ Sets the root fs directory of the container .. _container.lxc.security_mirror: :kw:`security_mirror` ===================== ================= ================================================================ **scopable** False **required** False **provisioning** True **default** None **inheritance** leaf > head **scope order** specific > generic ================= ================================================================ Sets the ``SECURITY_MIRROR`` environment variable for :cmd:`lxc-create`, pointing the security distribution server to use. If not set but mirror is set, use mirror as the security mirror. .. _container.lxc.template: :kw:`template` ============== ================= ================================================================ **scopable** False **required** True **provisioning** True **default** None **inheritance** leaf > head **scope order** specific > generic ================= ================================================================ Sets the url of the template unpacked into the container root fs or the name of the template passed to :cmd:`lxc-create`. .. _container.lxc.template_options: :kw:`template_options` ====================== ================= ================================================================ **scopable** False **required** False **provisioning** True **default** [] **inheritance** leaf > head **scope order** specific > generic **convert** shlex ================= ================================================================ The arguments to pass through :cmd:`lxc-create` to the per-template script. .. _container.lxc.blocking_post_provision: :kw:`blocking_post_provision` ============================= ================= ================================================================ **scopable** True **required** False **provisioning** False **default** None **inheritance** leaf > head **scope order** specific > generic ================= ================================================================ A command or script to execute after the resource :c-action:`provision` action. Errors interrupt the action. .. _container.lxc.blocking_post_start: :kw:`blocking_post_start` ========================= ================= ================================================================ **scopable** True **required** False **provisioning** False **default** None **inheritance** leaf > head **scope order** specific > generic ================= ================================================================ A command or script to execute after the resource :c-action:`start` action. Errors interrupt the action. .. _container.lxc.blocking_post_stop: :kw:`blocking_post_stop` ======================== ================= ================================================================ **scopable** True **required** False **provisioning** False **default** None **inheritance** leaf > head **scope order** specific > generic ================= ================================================================ A command or script to execute after the resource :c-action:`stop` action. Errors interrupt the action. .. _container.lxc.blocking_post_unprovision: :kw:`blocking_post_unprovision` =============================== ================= ================================================================ **scopable** True **required** False **provisioning** False **default** None **inheritance** leaf > head **scope order** specific > generic ================= ================================================================ A command or script to execute after the resource :c-action:`unprovision` action. Errors interrupt the action. .. _container.lxc.blocking_pre_provision: :kw:`blocking_pre_provision` ============================ ================= ================================================================ **scopable** True **required** False **provisioning** False **default** None **inheritance** leaf > head **scope order** specific > generic ================= ================================================================ A command or script to execute before the resource :c-action:`provision` action. Errors interrupt the action. .. _container.lxc.blocking_pre_start: :kw:`blocking_pre_start` ======================== ================= ================================================================ **scopable** True **required** False **provisioning** False **default** None **inheritance** leaf > head **scope order** specific > generic ================= ================================================================ A command or script to execute before the resource :c-action:`start` action. Errors interrupt the action. .. _container.lxc.blocking_pre_stop: :kw:`blocking_pre_stop` ======================= ================= ================================================================ **scopable** True **required** False **provisioning** False **default** None **inheritance** leaf > head **scope order** specific > generic ================= ================================================================ A command or script to execute before the resource :c-action:`stop` action. Errors interrupt the action. .. _container.lxc.blocking_pre_unprovision: :kw:`blocking_pre_unprovision` ============================== ================= ================================================================ **scopable** True **required** False **provisioning** False **default** None **inheritance** leaf > head **scope order** specific > generic ================= ================================================================ A command or script to execute before the resource :c-action:`unprovision` action. Errors interrupt the action. .. _container.lxc.comment: :kw:`comment` ============= ================= ================================================================ **scopable** False **required** False **provisioning** False **default** **inheritance** leaf > head **scope order** specific > generic ================= ================================================================ Helps users understand the role of the service and resources, which is nice to on-call support people having to operate on a service they are not usually responsible for. .. _container.lxc.disable: :kw:`disable` ============= ================= ================================================================ **scopable** True **required** False **provisioning** False **default** False **inheritance** leaf **scope order** specific > generic **candidates** True | False **convert** boolean ================= ================================================================ A disabled resource will be ignored on service startup and shutdown. Its status is always reported ``n/a``. Set in DEFAULT, the whole service is disabled. A disabled service does not honor :c-action:`start` and :c-action:`stop` actions. These actions immediately return success. :cmd:`sudo svcmgr -s disable` only sets :kw:`DEFAULT.disable`. As resources disabled state is not changed, :cmd:`sudo svcmgr -s enable` does not enable disabled resources. .. _container.lxc.encap: :kw:`encap` =========== ================= ================================================================ **scopable** True **required** False **provisioning** False **default** False **inheritance** leaf > head **scope order** specific > generic **candidates** True | False **convert** boolean ================= ================================================================ Set to ``true`` to ignore this resource in the nodes context and consider it in the encapnodes context. The resource is thus handled by the agents deployed in the service containers. .. _container.lxc.monitor: :kw:`monitor` ============= ================= ================================================================ **scopable** True **required** False **provisioning** False **default** False **inheritance** leaf > head **scope order** specific > generic **candidates** True | False **convert** boolean ================= ================================================================ A down monitored resource will trigger a node suicide if the monitor thinks it should be up and the resource can not be restarted. .. _container.lxc.no_preempt_abort: :kw:`no_preempt_abort` ====================== ================= ================================================================ **scopable** True **required** False **provisioning** False **default** False **inheritance** leaf > head **scope order** specific > generic **candidates** True | False **convert** boolean ================= ================================================================ If set to ``true``, OpenSVC will preempt scsi reservation with a preempt command instead of a preempt and and abort. Some scsi target implementations do not support this last mode (esx). If set to ``false`` or not set, :kw:`no_preempt_abort` can be activated on a per-resource basis. .. _container.lxc.optional: :kw:`optional` ============== ================= ================================================================ **scopable** True **required** False **provisioning** False **default** true for tasks, syncs and resources tagged 'noaction', else false **inheritance** leaf > head **scope order** specific > generic **convert** tristate ================= ================================================================ Action failures on optional resources are logged but do not stop the action sequence. Also the optional resource status is not aggregated to the instance 'availstatus', but aggregated to the 'overallstatus'. Resource tagged :c-tag:`noaction` and sync resources are automatically considered optional. Useful for resources like dump filesystems for example. .. _container.lxc.pg_blkio_weight: :kw:`pg_blkio_weight` ===================== ================= ================================================================ **scopable** True **required** False **provisioning** False **default** None **inheritance** leaf **scope order** specific > generic **depends** create_pg in [True] **convert** integer ================= ================================================================ Block IO relative weight. Value: between 10 and 1000. Kernel default: 1000. .. _container.lxc.pg_cpu_quota: :kw:`pg_cpu_quota` ================== ================= ================================================================ **scopable** True **required** False **provisioning** False **default** None **inheritance** leaf **scope order** specific > generic **depends** create_pg in [True] ================= ================================================================ The percent ratio of one core to allocate to the process group if % is specified, else the absolute value to set in the process group parameter. For example, on Linux cgroups, ``-1`` means unlimited, and a positive absolute value means the number of microseconds to allocate each period. ``50%@all`` means 50% of all cores, and ``50%@2`` means 50% of two cores. .. _container.lxc.pg_cpu_shares: :kw:`pg_cpu_shares` =================== ================= ================================================================ **scopable** True **required** False **provisioning** False **default** None **inheritance** leaf **scope order** specific > generic **depends** create_pg in [True] **convert** integer ================= ================================================================ Kernel default value is used, which usually is 1024 shares. In a cpu-bound situation, ensure the service does not use more than its share of cpu ressource. The actual percentile depends on shares allowed to other services. .. _container.lxc.pg_cpus: :kw:`pg_cpus` ============= ================= ================================================================ **scopable** True **required** False **provisioning** False **default** None **inheritance** leaf **scope order** specific > generic **depends** create_pg in [True] ================= ================================================================ Allow service process to bind only the specified cpus. Cpus are specified as list or range : 0,1,2 or 0-2 .. _container.lxc.pg_mem_limit: :kw:`pg_mem_limit` ================== ================= ================================================================ **scopable** True **required** False **provisioning** False **default** None **inheritance** leaf **scope order** specific > generic **depends** create_pg in [True] **convert** size ================= ================================================================ Ensures the service does not use more than specified memory (in bytes). The Out-Of-Memory killer get triggered in case of tresspassing. .. _container.lxc.pg_mem_oom_control: :kw:`pg_mem_oom_control` ======================== ================= ================================================================ **scopable** True **required** False **provisioning** False **default** None **inheritance** leaf **scope order** specific > generic **depends** create_pg in [True] **convert** integer ================= ================================================================ A flag (0 or 1) that enables or disables the Out of Memory killer for a cgroup. If enabled (0), tasks that attempt to consume more memory than they are allowed are immediately killed by the OOM killer. The OOM killer is enabled by default in every cgroup using the memory subsystem; to disable it, write 1. .. _container.lxc.pg_mem_swappiness: :kw:`pg_mem_swappiness` ======================= ================= ================================================================ **scopable** True **required** False **provisioning** False **default** None **inheritance** leaf **scope order** specific > generic **depends** create_pg in [True] **convert** integer ================= ================================================================ Set a swappiness value for the process group. .. _container.lxc.pg_mems: :kw:`pg_mems` ============= ================= ================================================================ **scopable** True **required** False **provisioning** False **default** None **inheritance** leaf **scope order** specific > generic **depends** create_pg in [True] ================= ================================================================ Allow service process to bind only the specified memory nodes. Memory nodes are specified as list or range : 0,1,2 or 0-2 .. _container.lxc.pg_vmem_limit: :kw:`pg_vmem_limit` =================== ================= ================================================================ **scopable** True **required** False **provisioning** False **default** None **inheritance** leaf **scope order** specific > generic **depends** create_pg in [True] **convert** size ================= ================================================================ Ensures the service does not use more than specified memory+swap (in bytes). The Out-Of-Memory killer get triggered in case of tresspassing. The specified value must be greater than :kw:`pg_mem_limit`. .. _container.lxc.post_provision: :kw:`post_provision` ==================== ================= ================================================================ **scopable** True **required** False **provisioning** False **default** None **inheritance** leaf > head **scope order** specific > generic ================= ================================================================ A command or script to execute after the resource :c-action:`provision` action. Errors do not interrupt the action. .. _container.lxc.post_start: :kw:`post_start` ================ ================= ================================================================ **scopable** True **required** False **provisioning** False **default** None **inheritance** leaf > head **scope order** specific > generic ================= ================================================================ A command or script to execute after the resource :c-action:`start` action. Errors do not interrupt the action. .. _container.lxc.post_stop: :kw:`post_stop` =============== ================= ================================================================ **scopable** True **required** False **provisioning** False **default** None **inheritance** leaf > head **scope order** specific > generic ================= ================================================================ A command or script to execute after the resource :c-action:`stop` action. Errors do not interrupt the action. .. _container.lxc.post_unprovision: :kw:`post_unprovision` ====================== ================= ================================================================ **scopable** True **required** False **provisioning** False **default** None **inheritance** leaf > head **scope order** specific > generic ================= ================================================================ A command or script to execute after the resource :c-action:`unprovision` action. Errors do not interrupt the action. .. _container.lxc.pre_provision: :kw:`pre_provision` =================== ================= ================================================================ **scopable** True **required** False **provisioning** False **default** None **inheritance** leaf > head **scope order** specific > generic ================= ================================================================ A command or script to execute before the resource :c-action:`provision` action. Errors do not interrupt the action. .. _container.lxc.pre_start: :kw:`pre_start` =============== ================= ================================================================ **scopable** True **required** False **provisioning** False **default** None **inheritance** leaf > head **scope order** specific > generic ================= ================================================================ A command or script to execute before the resource :c-action:`start` action. Errors do not interrupt the action. .. _container.lxc.pre_stop: :kw:`pre_stop` ============== ================= ================================================================ **scopable** True **required** False **provisioning** False **default** None **inheritance** leaf > head **scope order** specific > generic ================= ================================================================ A command or script to execute before the resource :c-action:`stop` action. Errors do not interrupt the action. .. _container.lxc.pre_unprovision: :kw:`pre_unprovision` ===================== ================= ================================================================ **scopable** True **required** False **provisioning** False **default** None **inheritance** leaf > head **scope order** specific > generic ================= ================================================================ A command or script to execute before the resource :c-action:`unprovision` action. Errors do not interrupt the action. .. _container.lxc.promote_rw: :kw:`promote_rw` ================ ================= ================================================================ **scopable** False **required** False **provisioning** False **default** False **inheritance** leaf > head **scope order** specific > generic **candidates** True | False **convert** boolean ================= ================================================================ If set to ``true``, OpenSVC will try to promote the base devices to read-write on start. .. _container.lxc.provision: :kw:`provision` =============== ================= ================================================================ **scopable** True **required** False **provisioning** False **default** True **inheritance** leaf > head **scope order** specific > generic **candidates** True | False **convert** boolean ================= ================================================================ Set to false to skip the resource on provision and unprovision actions. Warning: provisioning implies destructive operations like formating. Unprovisioning does not keep a copy of the service data. .. _container.lxc.provision_requires: :kw:`provision_requires` ======================== ================= ================================================================ **scopable** True **required** False **provisioning** False **default** **inheritance** leaf > head **scope order** specific > generic ================= ================================================================ A whitespace-separated list of conditions to meet to accept running a 'provision' action. A condition is expressed as ``(,...)``. If states are omitted, ``up,stdby up`` is used as the default expected states. .. _container.lxc.restart: :kw:`restart` ============= ================= ================================================================ **scopable** True **required** False **provisioning** False **default** 0 **inheritance** leaf > head **scope order** specific > generic **convert** integer ================= ================================================================ The agent will try to restart a resource times before falling back to the monitor action. A resource restart is triggered if the resource is not disabled and its status is not up, and the node is not frozen, and the service instance is not frozen and its local expect is set to ``started``. If a resource has a restart set to a value >0, its status is evaluated at the frequency defined by :kw:`DEFAULT.monitor_schedule` instead of the frequency defined by :kw:`DEFAULT.status_schedule`. .. _container.lxc.scsireserv: :kw:`scsireserv` ================ ================= ================================================================ **scopable** False **required** False **provisioning** False **default** False **inheritance** leaf > head **scope order** specific > generic **candidates** True | False **convert** boolean ================= ================================================================ If set to ``true``, OpenSVC will try to acquire a type-5 (write exclusive, registrant only) scsi3 persistent reservation on every path to every disks held by this resource. Existing reservations are preempted to not block service start-up. If the start-up was not legitimate the data are still protected from being written over from both nodes. If set to ``false`` or not set, :kw:`scsireserv` can be activated on a per-resource basis. .. _container.lxc.shared: :kw:`shared` ============ ================= ================================================================ **scopable** True **required** False **provisioning** False **default** False **inheritance** leaf > head **scope order** specific > generic **candidates** True | False **convert** boolean ================= ================================================================ Set to ``true`` to skip the resource on provision and unprovision actions if the action has already been done by a peer. Shared resources, like vg built on SAN disks must be provisioned once. All resources depending on a shared resource must also be flagged as shared. .. _container.lxc.standby: :kw:`standby` ============= ================= ================================================================ **scopable** True **required** False **provisioning** False **default** False **inheritance** leaf > head **scope order** specific > generic **candidates** True | False **convert** boolean ================= ================================================================ Always start the resource, even on standby instances. The daemon is responsible for starting standby resources. A resource can be set standby on a subset of nodes using keyword scoping. A typical use-case is sync'ed fs on non-shared disks: the remote fs must be mounted to not overflow the underlying fs. .. warning:: Don't set shared resources standby: fs on shared disks for example. .. _container.lxc.start_requires: :kw:`start_requires` ==================== ================= ================================================================ **scopable** True **required** False **provisioning** False **default** **inheritance** leaf > head **scope order** specific > generic ================= ================================================================ A whitespace-separated list of conditions to meet to accept running a 'start' action. A condition is expressed as ``(,...)``. If states are omitted, ``up,stdby up`` is used as the default expected states. .. _container.lxc.stop_requires: :kw:`stop_requires` =================== ================= ================================================================ **scopable** True **required** False **provisioning** False **default** **inheritance** leaf > head **scope order** specific > generic ================= ================================================================ A whitespace-separated list of conditions to meet to accept running a 'stop' action. A condition is expressed as ``(,...)``. If states are omitted, ``up,stdby up`` is used as the default expected states. .. _container.lxc.subset: :kw:`subset` ============ ================= ================================================================ **scopable** True **required** False **provisioning** False **default** None **inheritance** leaf **scope order** specific > generic ================= ================================================================ Assign the resource to a specific subset. .. _container.lxc.tags: :kw:`tags` ========== ================= ================================================================ **scopable** True **required** False **provisioning** False **default** **inheritance** leaf > head **scope order** specific > generic **convert** set ================= ================================================================ A list of tags. Arbitrary tags can be used to limit action scope to resources with a specific tag. Some tags can influence the driver behaviour. For example :c-tag:`noaction` avoids any state changing action from the driver and implies ``optional=true``, :c-tag:`nostatus` forces the status to n/a. .. _container.lxc.unprovision: :kw:`unprovision` ================= ================= ================================================================ **scopable** True **required** False **provisioning** False **default** True **inheritance** leaf > head **scope order** specific > generic **candidates** True | False **convert** boolean ================= ================================================================ Set to false to skip the resource on unprovision actions. Warning: Unprovisioning does not keep a copy of the service data. .. _container.lxc.unprovision_requires: :kw:`unprovision_requires` ========================== ================= ================================================================ **scopable** True **required** False **provisioning** False **default** **inheritance** leaf > head **scope order** specific > generic ================= ================================================================ A whitespace-separated list of conditions to meet to accept running a 'unprovision' action. A condition is expressed as ``(,...)``. If states are omitted, ``up,stdby up`` is used as the default expected states.