Using Container Images

The images from the OpenNebula container marketplaces (Docker Hub, Turnkey Linux, and Linux Containers) are just filesystem images. Depending on the hypervisor some extra configuration might be required.


More info on Kernel images can be found here.


Container images are not supported for vCenter hypervisor.

DockerHub Applications

DockerHub uses a CMD or Entrypoint mechanism to automatically start the target application in the container. This process is not automatically triggered in your imported images. Please use the START_SCRIPT of the contextualization process to execute the command that starts the application.

Using Container Images with LXC

As container images are just filesystem images when using LXC no extra configuration is required.

Using Container Images with Firecracker

In order to deploy a Firecracker MicroVM using one of the images mentioned above, an uncompressed kernel image is required. The Firecracker project provides a recommended configuration file for building the kernel image. This configuration file provides the minimum required dependencies for booting a MicroVM.

Once the image is in ready state, the only thing left to boot the MicroVM is to add the kernel image to the VM template.

Using Container Images with Qemu+KVM

In order to deploy KVM VMs using container images, the PVH entry point can be used to deploy VMs from an uncompressed kernel images with minimal firmware involvement. PVH entry point is a new feature for qemu+kvm which have the following requirements:

  • QEMU >= 4.0

  • Linux kernel >= 4.21

  • CONFIG_PVH enabled for the guest kernel.

If the requirements are fulfilled, the only thing needed to boot the container image as a VM is to add the kernel image to the VM template and set the root device (e.g vda).


The kernel used for this must be properly configured to use PVH entrypoint and must also contains any configuration required by the services executed within. The recommended way of running container images with KVM is using Firecracker VMM.

Getting Kernel Images

The kernel images can be either directly build by using the kernel configuration files provided by Firecracker or OpenNebula or can be directly downloaded from OpenNebula marketplace:


The provided kernel images and configuration files have a basic configuration, custom kernel can be built to satisfy different use cases, as long as they fulfill the requirements specified above for the corresponding hypervisor. The configuration used for building the kernel images above can be found in the same link.