Some commands: ```console $ lxc image alias list images: $ lxc info $ lxc config edit $ lxc config show $ lxc exec bash $ lxc config set limits.memory 512MB $ lxc config set limits.cpu 2 $ lxc config device set root size 20GB $ lxc launch images:debian/11 $ lxc config set environment.LC_ALL=en_US.UTF-8 $ lxc list $ lxc storage volume list $ #mode privileged $ lxc launch ubuntu:20.04 test -c security.privileged=true -c security.nesting=true $ lxc config device add test ssh proxy listen=tcp:0.0.0.0:2222 connect=tcp:127.0.0.1:22 $ #Create a backups volume in the local (default) pool (ZFS) and use it for backups $ lxc storage volume create local backups $ lxc config set storage.backups_volume local/backups $ #Create a images volume in the local (default) pool (ZFS) and use it for images (containers images downloaded) $ lxc storage volume create local images $ lxc config set storage.images_volume local/images $ lxc config device add $containerName $deviceName disk source=/home/foo path=/home/foo ``` Path: - /var/lib/lxd/ - /var/snap/lxd/common/lxd/ Entering LXD namespace managed by snap (to access ZFS mount points for example): ```console # nsenter -t $(cat /var/snap/lxd/common/lxd.pid) -m ``` Some packages I like to install on fresh containers install: ``` vim postfix logrotate etckeeper iputils-ping dnsutils ``` Some initial steps: - Enable journald - Set hostname (create /etc/hostname on Archlinux!) - Configure postfix Disable getty for old containers images: ```console # sed -i 's/^tty/# tty/g' /etc/inittab # systemctl disable getty@tty{1..4} # reboot ``` Nginx memo: ```nginx set_real_ip_from W.X.Y.Z; #real_ip_recursive on; real_ip_header X-Forwarded-For; log_format custom '$http_x_forwarded_for - $remote_user [$time_local] ' '"$request" $status $body_bytes_sent ' '"$http_referer" "$http_user_agent"'; access_log /var/log/nginx/access.log custom; ```