mirror of
https://git.proxmox.com/git/mirror_lxc
synced 2025-08-03 02:46:50 +00:00
ed0ef61a77
That mount hook predates the lxc.mount.auto = cgroup option. So mention that instead. Perhaps we should simply drop the mountcgroup hook from the tree, but I'm not doing that in this patch. Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>
45 lines
1.8 KiB
Plaintext
45 lines
1.8 KiB
Plaintext
# This derives from the global common config
|
|
lxc.include = @LXCTEMPLATECONFIG@/common.conf
|
|
|
|
# Default mount entries
|
|
lxc.mount.entry = proc proc proc nodev,noexec,nosuid 0 0
|
|
lxc.mount.entry = sysfs sys sysfs defaults 0 0
|
|
lxc.mount.entry = /sys/fs/fuse/connections sys/fs/fuse/connections none bind,optional 0 0
|
|
lxc.mount.entry = /sys/kernel/debug sys/kernel/debug none bind,optional 0 0
|
|
lxc.mount.entry = /sys/kernel/security sys/kernel/security none bind,optional 0 0
|
|
lxc.mount.entry = /sys/fs/pstore sys/fs/pstore none bind,optional 0 0
|
|
|
|
# When using LXC with apparmor, the container will be confined by default.
|
|
# If you wish for it to instead run unconfined, copy the following line
|
|
# (uncommented) to the container's configuration file.
|
|
#lxc.aa_profile = unconfined
|
|
|
|
# To support container nesting on an Ubuntu host while retaining most of
|
|
# apparmor's added security, use the following two lines instead.
|
|
#lxc.aa_profile = lxc-container-default-with-nesting
|
|
#lxc.mount.auto = cgroup:mixed
|
|
|
|
# Uncomment the following line to autodetect squid-deb-proxy configuration on the
|
|
# host and forward it to the guest at start time.
|
|
#lxc.hook.pre-start = /usr/share/lxc/hooks/squid-deb-proxy-client
|
|
|
|
# If you wish to allow mounting block filesystems, then use the following
|
|
# line instead, and make sure to grant access to the block device and/or loop
|
|
# devices below in lxc.cgroup.devices.allow.
|
|
#lxc.aa_profile = lxc-container-default-with-mounting
|
|
|
|
# Extra cgroup device access
|
|
## rtc
|
|
lxc.cgroup.devices.allow = c 254:0 rm
|
|
## fuse
|
|
lxc.cgroup.devices.allow = c 10:229 rwm
|
|
## tun
|
|
lxc.cgroup.devices.allow = c 10:200 rwm
|
|
## hpet
|
|
lxc.cgroup.devices.allow = c 10:228 rwm
|
|
## kvm
|
|
lxc.cgroup.devices.allow = c 10:232 rwm
|
|
## To use loop devices, copy the following line to the container's
|
|
## configuration file (uncommented).
|
|
#lxc.cgroup.devices.allow = b 7:* rwm
|