#2315 closed task (invalid)
Make LXC containers referenceable by name by resolver
Reported by: | strk | Owned by: | |
---|---|---|---|
Priority: | normal | Milestone: | |
Component: | SysAdmin | Keywords: | |
Cc: |
Description
See https://blog.simos.info/how-to-use-lxd-container-hostnames-on-the-host-in-ubuntu-18-04/
It would help generalizing the ssh configuration from client to reach each and every container...
Change History (9)
comment:1 by , 6 years ago
Resolution: | → fixed |
---|---|
Status: | new → closed |
comment:2 by , 6 years ago
Resolution: | fixed |
---|---|
Status: | closed → reopened |
Re-opening, as name resolution seems to be still unstable (see #2318)
comment:3 by , 6 years ago
Resolution: | → fixed |
---|---|
Status: | reopened → closed |
closing this as I think that was a fluke.
comment:4 by , 6 years ago
Resolution: | fixed |
---|---|
Status: | closed → reopened |
Really? This is what happens right now from download.osgeo.org:
strk@download:~$ host secure.lxd Host secure.lxd not found: 3(NXDOMAIN) strk@download:~$ host secure.lxc Host secure.lxc not found: 3(NXDOMAIN) strk@download:~$ host secure Host secure not found: 2(SERVFAIL)
comment:5 by , 6 years ago
Resolution: | → invalid |
---|---|
Status: | reopened → closed |
That's cause you have the name wrong. It's new-secure, not secure.
We can change the name of the container if it'll make you feel better.
comment:6 by , 6 years ago
It actually would :)
Using old-
for old and unprefixed for current would be more consistent :)
comment:7 by , 6 years ago
Done
and updated
https://git.osgeo.org/gitea/sac/osgeo7/wiki/secure
with details of the renaming.
Also changed read me to reflect the new name
now you should be able to access via secure.lxd
comment:8 by , 6 years ago
Thanks, confirmed. My .ssh/config now looks like this:
Host osgeo-* ProxyCommand ssh download.osgeo.org -W $(sed -e "s/^osgeo-//;s/$/.lxd/" <<< "%h"):%p
And I can successfully do:
ssh osgeo-secure
For the time being this is already possible from any LXC container (at least the "download" one) so I'm closing this as done, to some extent.