<div>Hi Daniel,</div><div>Thanks for the reply.</div><div>I tried out
LXC <a href="http://sf.net" target="_blank">sf.net</a> for creating containers.</div><div><br></div><div>According to following link, RHEL 6.2 will support LXC libvirt API.</div><div>
</div><div><a href="http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html-single/6.2_Technical_Notes/index.html">http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html-single/6.2_Technical_Notes/index.html</a></div>
<div>It further says, Linux Containers are just a Technology Preview. Will RHEL provide libvirt lxc integrated with its future releases?</div><div>And, if I want to work with container for longterm using RHEL, will I need to shift to libvirt LXC?</div>
<div>As of now, from where can I download the libvirt LXC.<br clear="all"></div><div><br></div><div><span>Thanks,</span></div><div><span>Shweta</span><br></div><br><br>
<br><br><div class="gmail_quote">On Tue, Jan 31, 2012 at 5:47 PM, Daniel P. Berrange <span dir="ltr"><<a href="mailto:berrange@redhat.com" target="_blank">berrange@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div>On Tue, Jan 31, 2012 at 05:40:44PM +0530, Shweta Shinde wrote:<br>
> Hi everyone,<br>
> I am interested in the security aspects of LXC.<br>
> How can we use SELinux to secure LXC containers?<br>
> Any information will be very helpful.<br>
<br>
</div>I recently posted patches to libvirt, which extend the sVirt support<br>
from KVM, to also cover our LXC driver. This will ensure strict<br>
confinement of LXC containers using SELinux<br>
<br>
<a href="https://www.redhat.com/archives/libvir-list/2012-January/msg01006.html" target="_blank">https://www.redhat.com/archives/libvir-list/2012-January/msg01006.html</a><br>
<br>
Fedora 17 policy is being enhanced to support this at the same time.<br>
<br>
NB, this only applies to the libvirt LXC userspace driver, which is<br>
completely separate from the LXC <a href="http://sf.net" target="_blank">sf.net</a> userspace.<br>
<br>
Regards,<br>
Daniel<br>
<span><font color="#888888">--<br>
|: <a href="http://berrange.com" target="_blank">http://berrange.com</a> -o- <a href="http://www.flickr.com/photos/dberrange/" target="_blank">http://www.flickr.com/photos/dberrange/</a> :|<br>
|: <a href="http://libvirt.org" target="_blank">http://libvirt.org</a> -o- <a href="http://virt-manager.org" target="_blank">http://virt-manager.org</a> :|<br>
|: <a href="http://autobuild.org" target="_blank">http://autobuild.org</a> -o- <a href="http://search.cpan.org/~danberr/" target="_blank">http://search.cpan.org/~danberr/</a> :|<br>
|: <a href="http://entangle-photo.org" target="_blank">http://entangle-photo.org</a> -o- <a href="http://live.gnome.org/gtk-vnc" target="_blank">http://live.gnome.org/gtk-vnc</a> :|<br>
</font></span></blockquote></div><br>