mirror of
https://git.proxmox.com/git/mirror_lxc
synced 2025-07-29 08:13:16 +00:00
nesting: remove the nesting hint from configuration templates
we're having it inserted in every config by the lxcapi_create itself. Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>
This commit is contained in:
parent
49a2ed808c
commit
e6bff191fb
@ -9,10 +9,6 @@ lxc.devttydir =
|
|||||||
# (uncommented) to the container's configuration file.
|
# (uncommented) to the container's configuration file.
|
||||||
#lxc.aa_profile = unconfined
|
#lxc.aa_profile = unconfined
|
||||||
|
|
||||||
# To support container nesting on an Ubuntu host while retaining most of
|
|
||||||
# apparmor's added security, use the following line instead.
|
|
||||||
#lxc.aa_profile = lxc-container-default-with-nesting
|
|
||||||
|
|
||||||
# If you wish to allow mounting block filesystems, then use the following
|
# If you wish to allow mounting block filesystems, then use the following
|
||||||
# line instead, and make sure to grant access to the block device and/or loop
|
# line instead, and make sure to grant access to the block device and/or loop
|
||||||
# devices below in lxc.cgroup.devices.allow.
|
# devices below in lxc.cgroup.devices.allow.
|
||||||
|
@ -12,10 +12,6 @@ lxc.mount.entry = mqueue dev/mqueue mqueue rw,relatime,create=dir,optional 0 0
|
|||||||
# (uncommented) to the container's configuration file.
|
# (uncommented) to the container's configuration file.
|
||||||
#lxc.aa_profile = unconfined
|
#lxc.aa_profile = unconfined
|
||||||
|
|
||||||
# To support container nesting on an Ubuntu host while retaining most of
|
|
||||||
# apparmor's added security, use the following line instead.
|
|
||||||
#lxc.aa_profile = lxc-container-default-with-nesting
|
|
||||||
|
|
||||||
# Uncomment the following line to autodetect squid-deb-proxy configuration on the
|
# Uncomment the following line to autodetect squid-deb-proxy configuration on the
|
||||||
# host and forward it to the guest at start time.
|
# host and forward it to the guest at start time.
|
||||||
#lxc.hook.pre-start = /usr/share/lxc/hooks/squid-deb-proxy-client
|
#lxc.hook.pre-start = /usr/share/lxc/hooks/squid-deb-proxy-client
|
||||||
|
@ -130,8 +130,6 @@ lxc.cap.drop = sys_module mac_admin mac_override sys_time
|
|||||||
|
|
||||||
# When using LXC with apparmor, uncomment the next line to run unconfined:
|
# When using LXC with apparmor, uncomment the next line to run unconfined:
|
||||||
#lxc.aa_profile = unconfined
|
#lxc.aa_profile = unconfined
|
||||||
# To support container nesting on an Ubuntu host, uncomment next two lines:
|
|
||||||
#lxc.aa_profile = lxc-container-default-with-nesting
|
|
||||||
lxc.mount.auto = cgroup:mixed proc:mixed sys:mixed
|
lxc.mount.auto = cgroup:mixed proc:mixed sys:mixed
|
||||||
|
|
||||||
lxc.cgroup.devices.deny = a
|
lxc.cgroup.devices.deny = a
|
||||||
|
Loading…
Reference in New Issue
Block a user