[svlug] hostapd in lxc

[Ivan Sergio Borgonovo]

On 12/30/2016 08:38 PM, Ehud Kaldor wrote:
> Sorry for the time lag.

> I'm using Docker, so I'm not sure all will apply to lxc, but here goes:
> I want to set up my home network (DHCP, DNS, gateway, file server etc.)
> using containers. If for nothing else, than for the experience with
> containers.

Docker is a wrapper around lxc. It should be meant to isolate application.
For me its way too much overhead. Many services are easier to set up and 
they are more efficient if they are on the same container.
Of course you may be concerned about security and you may be willing to 
separate exposed services to services that are only visible on the lan 
etc...
I'm using directly lxc and while macvlan provide more isolation between 
containers and between container and host, I'm using veth bridged with 
the host that at least for me are a good compromise between home setup 
and isolation.
With veth you can have an IP and a MAC for each container.

If I wished it wouldn't be too hard to move a container elsewhere.

I don't have a dhcpd inside a container so I can't say if eg. it could 
be a problem the order containers wake up.
But unless it is an exercise I don't get how this could be useful and 
comfortable (static IP for host + dhcp server in one container).

-- 
Ivan Sergio Borgonovo
http://www.webthatworks.it http://www.borgonovo.net