Ssh to lxc container from a different machine

LXC
1

I am looking for clear documentation for how to ssh to a lxc from a different machine.
The container 10.0.3.215
is on host 192.168.1.78
I can ssh to 192.168.1.78 from 192.168.1.80
But I can’t seem to find any resource for how to ssh from 192.168.1.80 to 10.0.3.215 ?
Most resources talk about lxd proxy.
Thank you

2

If using LXD, then those resources are correct, you’d add a proxy device to do this.

If using regular LXC (lxc-start, lxc-create, …), then there is no built-in way to do this and it’d be up to you to write firewall NAT rules on your system to forward a port to the container.

3

Thanks. I am focusing on learning to work with lxc.
So - I need to port forwording say port 2222 on my host machine (192.168.1.78) to port 22 on the lxc container (10.0.3.215) ?
Then ssh to 192.168.1.78:2222 and it will be forwarded to 10.0.3.215:22 - am I correct here?
only question is how do I actually do this? is there a doc with examples or could you recommend what should I search for?
Thank you

4

iptables -t nat -A PREROUTING -d 192.168.1.78 -p tcp --dport 2222 -j DNAT --to 10.0.3.215:22 or something along those lines