<p dir="ltr">Then I guess I don't understand why it worked fine up until last week. </p>
<br><div class="gmail_quote"><div dir="ltr">On Tue, Apr 19, 2016, 10:39 AM Tycho Andersen <<a href="mailto:tycho.andersen@canonical.com">tycho.andersen@canonical.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">On Tue, Apr 19, 2016 at 01:42:08PM +0000, Nate Finch wrote:<br>
> On Tue, Apr 19, 2016 at 7:49 AM John Meinel <<a href="mailto:john@arbash-meinel.com" target="_blank">john@arbash-meinel.com</a>> wrote:<br>
><br>
> > ...<br>
> >>><br>
> >><br>
> ><br>
> >><br>
> >>> That's probably the cause of the other confusion in the updated docs -<br>
> >>> now we *do* want the bridge named lxdbr0 not lxcbr0. If the user<br>
> >>> already has lxc setup in some fashion there's a different error from<br>
> >>> juju telling them to run the dpkg-reconfigure command. That should<br>
> >>> presumably always appear whenever there's no usable bridge.<br>
> >>><br>
> >> The flip flopping back and forth on the bridge name is going to cause<br>
> >> havoc even after release. Do we have clear direction now from LXD on how<br>
> >> they plan to handle the competing network bridge names? I understand we're<br>
> >> now saying a dpkg-reconfigure is required, but I'm not clear if / when we<br>
> >> plan to make this easier.<br>
> >><br>
> ><br>
> > So, LXD is going to be installed-by-default on Xenial. Which means that<br>
> > everyone will always have it installed. However, that leads to a problem<br>
> > with having a "standard" subnet dedicated to LXD. While it works for lots<br>
> > of people, there are plenty of cases where that subnet would already be in<br>
> > use elsewhere (in say a company's internal LAN). Which means LXD chose to<br>
> > go with link-local addresses by default. AIUI that means that the<br>
> > containers can talk to the host (and probably the host can route them to<br>
> > the public internet?) but they aren't able to talk to other containers or<br>
> > have inbound traffic.<br>
> > My personal hope is that the dpkg-reconfigure steps can provide a 70%-case<br>
> > safe default set of addresses (possibly using autodetection), and give a<br>
> > nice wizard to help people, while still allowing them to override it in case<br>
> ><br>
><br>
> I really fear for what this will do to adoption. I feel like we're<br>
> throwing the common "it just works" case out the window to enable a very<br>
> small edge case to work slightly better. I'd much rather have defaults<br>
> where juju/lxd just works with most common setups. For the one little<br>
> exception - if the network on your corporate LAN conflicts - we give a nice<br>
> error message and give the user tools to reconfigure.<br>
<br>
The problem here is that there's no way to detect this case (e.g. what<br>
if the network in question is routed behind your default gateway<br>
somehow?). Things just break, and it can be difficult for people to<br>
figure out why.<br>
<br>
LXD's bridge setup defaults to ipv6 link local with an HTTP proxy that<br>
allows apt-get to work. The current dpkg-reconfigure prompts will<br>
suggest reasonable values if you decide you want to enable ipv4.<br>
<br>
> Making everyone<br>
> configure their network (not the easiest or friendliest task even for<br>
> people on our own team), is surely going to cause us to lose a *lot* of<br>
> users with a bad first impression.<br>
><br>
> LXD is our code. Juju is our code. Surely we can code/configure the two<br>
> to work together such that it just works for the 95% case?<br>
<br>
I assure you we're aware of this. Unfortunately there's not a good<br>
answer.<br>
<br>
Tycho<br>
</blockquote></div>