Containers (25.10.4)

I migrated some VMs to Incus when that was briefly possible. They ran graphical environments much better, and before Incus is dropped I’d like to move their functions to containers. I’m having some difficulties though. I probably misunderstand some of the LXC fundamentals/philosophy.

Firstly VMs and Incus supported graphical remote access (Via SPICE and VNC respectively). I can only access shell on the LXC containers. Has hypervisor level graphical access been removed? Not having to set up VNC via shell is nice.

Secondly, in the LXC containers I can enumerate all the drives on the host. Do LXC containers have to run that close to metal? Is there a way to reduce their access to the host? Or at least have them ‘see’ datasets rather than raw drives?

Thirdly, where is the container image list pulled from? And can I add to it locally?

On 25.10 LXCs still use incus as backend (truenas 26 will switch the lxc backend from incus to libvirt) and as far as i can remember they never used spice only a webshell

Yes since they share the hosts kernel. You can bind mount Datasets to folders inside the lxc
Here’s an example of my mapped Datasets:

1 Like