Is there any way to create and use a bridge inside a VE? I have a DNAT-ed OpenVPN server inside a VE, and I would like to create a bridged OpenVPN setup for the local VEs. brctl addbr br0 add bridge failed: Invalid argument strace brctl addbr br0 execve("/usr/sbin/brctl", ["brctl", "addbr", "br0"], [/* 11 vars */]) = 0 uname({sys="Linux", node="meta", ...}) = 0 brk(0) = 0x804e000 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory) mmap2(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7fe7000 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) open("/etc/ld.so.cache", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFREG|0644, st_size=15630, ...}) = 0 mmap2(NULL, 15630, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7fe3000 close(3) = 0 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory) open("/lib/tls/libc.so.6", O_RDONLY) = 3 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\240O\1"..., 512) = 512 fstat64(3, {st_mode=S_IFREG|0644, st_size=1241392, ...}) = 0 mmap2(NULL, 1251484, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb7eb1000 mmap2(0xb7fd9000, 28672, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x127) = 0xb7fd9000 mmap2(0xb7fe0000, 10396, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xb7fe0000 close(3) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7eb0000 mprotect(0xb7fd9000, 20480, PROT_READ) = 0 set_thread_area({entry_number:-1 -> 6, base_addr:0xb7eb06c0, limit:1048575, seg_32bit:1, contents:0, read_exec_only:0, limit_in_pages:1, seg_not_present:0, useable:1}) = 0 munmap(0xb7fe3000, 15630) = 0 socket(PF_INET, SOCK_STREAM, IPPROTO_IP) = 3 ioctl(3, 0x89a0, 0xbfcbff1d) = -1 EPERM (Operation not permitted) ioctl(3, SIOCSIFBR, 0xbfcbfa08) = -1 EINVAL (Invalid argument) write(2, "add bridge failed: Invalid argum"..., 36add bridge failed: Invalid argument ) = 36 exit_group(1) = ? Any idea?
bridhes can't be used iside VE, only on host-node. Probably this article can help you: http://wiki.openvz.org/Virtual_Ethernet_device#Virtual_ether net_devices_can_be_joined_in_one_bridge Vasily.