<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Service on Amit Agarwal Linux Blog</title>
    <link>/tags/service/</link>
    <description>Recent content in Service on Amit Agarwal Linux Blog</description>
    <generator>Hugo -- gohugo.io</generator>
    <language>en</language>
    <lastBuildDate>Wed, 26 Mar 2014 13:37:40 +0000</lastBuildDate>
    
	<atom:link href="/tags/service/index.xml" rel="self" type="application/rss+xml" />
    
    
    <item>
      <title>Sandbox apache (httpd) for better security.</title>
      <link>/2014/03/26/sandbox-apache-httpd-security/</link>
      <pubDate>Wed, 26 Mar 2014 13:37:40 +0000</pubDate>
      
      <guid>/2014/03/26/sandbox-apache-httpd-security/</guid>
      <description>&lt;p&gt;Apache/httpd is something which you would like to have contained. And now fedora provides a native way/mechanism to to so with virt-sandbox-service. With this, you can create a virtualized sanbox service and then connect/list/manage such with virsh.&lt;/p&gt;
&lt;p&gt;We will be using LXC.&lt;/p&gt;
&lt;p&gt;Basically its couple of commands and you have a contained service running.&lt;/p&gt;
&lt;pre class=&#34;brush:shell&#34;&gt;# List all the containers
virsh -c lxc:/// list

# Create the sandbox, all default parameters. Will take dhcp address.
virt-sandbox-service create -C  --username amitag -u httpd.service httpd_conta

# Create the container with static IP.
virt-sandbox-service create -C  --username amitag -u httpd.service -N \
address=192.168.122.11/24%192.168.122.255  httpd_conta#Enable and start the service.
virt-sandbox-service start httpd_conta
virt-sandbox-service enable httpd_conta#Delete the container if not required any more.
virt-sandbox-service delete  httpd_conta&lt;/pre&gt;
&lt;p&gt; &lt;/p&gt;</description>
    </item>
    
  </channel>
</rss>
