mirror of
https://git.proxmox.com/git/mirror_lxc
synced 2025-06-06 14:03:30 +00:00
Add lxc.aa_profile example to all templates
LXC has optional apparmor support, default profile is lxc-container-default. This change adds a commented "lxc.aa_profile = default" line to all templates, uncommenting this will bypass apparmor for the container. Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
This commit is contained in:
parent
0a8722fd78
commit
69d66f1e72
@ -233,6 +233,9 @@ cat <<EOF >> $path/config
|
|||||||
lxc.utsname = $name
|
lxc.utsname = $name
|
||||||
lxc.tty = 1
|
lxc.tty = 1
|
||||||
lxc.pts = 1
|
lxc.pts = 1
|
||||||
|
|
||||||
|
# When using LXC with apparmor, uncomment the next line to run unconfined:
|
||||||
|
#lxc.aa_profile = unconfined
|
||||||
EOF
|
EOF
|
||||||
|
|
||||||
if [ -d "$rootfs/lib" ]; then
|
if [ -d "$rootfs/lib" ]; then
|
||||||
|
Loading…
Reference in New Issue
Block a user