LXD is a system container manager that uses Linux containers (LXC) to provide operating-system-level virtualization. It is secure by default using features like user namespaces, cgroups, and AppArmor. LXD includes a REST API for managing containers, a daemon, and a framework for managing container images. It can perform some hypervisor functions but is not intended as a network, storage, or application container manager.

1. LXD: The hypervisor that isn't
@ .comTycho.Andersen

2. What is ?
Based on Linux Containers (LXC)
Secure by default: user namespaces, cgroups, AppArmor, etc.
A REST API for managing system containers
A daemon that can do hypervisor-y things
A framework for managing container base images

3. What isn't ?
A network management tool
A storage management tool
An application container tool

4. What is ?
Based on Linux Containers (LXC)
Secure by default: user namespaces, cgroups, AppArmor, etc.
A REST API for managing system containers
A daemon that can do hypervisor-y things
A framework for managing container base images

5. API
containers
images
networks
other administrative ones
secured by client certificates and TLS 1.2

6. Creating a container
wget --no-check-certificate --
certificate=~/.config/lxc/client.crt --private-
key=~/.config/lxc/client.key -O - -q
https://127.0.0.1:8443/1.0/containers --
method=POST --body-data='{"name": "manual",
...}'
{"type":"async","operation":"/1.0/operations/ae5b7
213d-4b51-b4e2-825e4ac9d45c"}

7. {"type":"sync","result":"success","metadata":
{"name":"foo", "config":[], "profiles":[],
"status":{"state":"RUNNING", ...}}
}
containersendpoint
wget --no-check-certificate --
certificate=~/.config/lxc/cert.pem --private-
key=~/.config/lxc/key.pem -O - -q
https://127.0.0.1:8443/1.0/containers/foo

8. networksendpoint
wget --no-check-certificate --
certificate=~/.config/lxc/client.crt --private-
key=~/.config/lxc/client.key -O - -q
https://127.0.0.1:8443/1.0/networks
{"type":"sync","result":"success","metadata":[
"/1.0/networks/lo",
"/1.0/networks/wlan0",
"/1.0/networks/lxcbr0",
"/1.0/networks/virbr0"
]}

9. What is ?
Based on Linux Containers (LXC)
Secure by default: user namespaces, cgroups, AppArmor, etc.
A REST API for managing system containers
A daemon that can do hypervisor-y things
A framework for managing container base images

13. What is ?
Based on Linux Containers (LXC)
Secure by default: user namespaces, cgroups, AppArmor, etc.
A REST API for managing system containers
A daemon that can do hypervisor-y things
A framework for managing container base images

14. Image Workflow
Snapshot (running) containers as images
All LXD instances are image servers
Clients can publish private or public images

15. roadmap
0.1 - Last week of January, container management only
0.2 - February 18: Images, experimental migration, bugfixes, oh
my!
0.3 - Summer 2015: Full specification implementation
0.? - Hardware hardened containers

16. Kia ora!
github.com/lxc/lxd