Merge pull request #666 from Ponce/slackware-template

config/templates/Makefile.am

@@ -25,6 +25,8 @@ templatesconfig_DATA = \
 	oracle.userns.conf \
 	plamo.common.conf \
 	plamo.userns.conf \
+	slackware.common.conf \
+	slackware.userns.conf \
 	ubuntu-cloud.common.conf \
 	ubuntu-cloud.lucid.conf \
 	ubuntu-cloud.userns.conf \

config/templates/slackware.common.conf.in

+# This derives from the global common config
+lxc.include = @LXCTEMPLATECONFIG@/common.conf
+
+# Doesn't support consoles in /dev/lxc/
+lxc.devttydir =
+
+# Extra cgroup device access
+## rtc
+lxc.cgroup.devices.allow = c 254:0 rm
+## tun
+lxc.cgroup.devices.allow = c 10:200 rwm
+## hpet
+lxc.cgroup.devices.allow = c 10:228 rwm
+## kvm
+lxc.cgroup.devices.allow = c 10:232 rwm
+## To use loop devices, copy the following line to the container's
+## configuration file (uncommented).
+#lxc.cgroup.devices.allow = b 7:* rwm
+
+# mount /dev/shm as tmpfs
+lxc.mount.entry = none dev/shm tmpfs rw,nosuid,nodev,create=dir
+
+# Capabilities
+# Uncomment these if you don't run anything that needs the capability, and
+# would like the container to run with less privilege.
+# Note that some are already dropped in common.conf.
+#
+# Dropping sys_admin disables container root from doing a lot of things
+# that could be bad like re-mounting lxc fstab entries rw for example,
+# but also disables some useful things like being able to nfs mount, and
+# things that are already namespaced with ns_capable() kernel checks, like
+# hostname(1).
+#
+# Some of these don't apply in Slackware but are here for future reference.
+#
+# lxc.cap.drop = sys_admin        # breaks systemd
+# lxc.cap.drop = net_raw          # breaks dhcp/ping
+# lxc.cap.drop = setgid           # breaks login (initgroups/setgroups)
+# lxc.cap.drop = dac_read_search  # breaks login (pam unix_chkpwd)
+# lxc.cap.drop = setuid           # breaks sshd,nfs statd
+# lxc.cap.drop = audit_control    # breaks sshd (set_loginuid failed)
+# lxc.cap.drop = audit_write
+# lxc.cap.drop = setpcap          # breaks journald
+# lxc.cap.drop = sys_resources    # breaks systemd
+#
+lxc.cap.drop = mknod setfcap setpcap

config/templates/slackware.userns.conf.in

+# This derives from the global userns config
+lxc.include = @LXCTEMPLATECONFIG@/userns.conf

configure.ac

@@ -654,6 +654,8 @@ AC_CONFIG_FILES([
 	config/templates/oracle.userns.conf
 	config/templates/plamo.common.conf
 	config/templates/plamo.userns.conf
+	config/templates/slackware.common.conf
+	config/templates/slackware.userns.conf
 	config/templates/ubuntu-cloud.common.conf
 	config/templates/ubuntu-cloud.lucid.conf
 	config/templates/ubuntu-cloud.userns.conf
@@ -806,6 +808,7 @@ AC_CONFIG_FILES([
 	templates/lxc-opensuse
 	templates/lxc-oracle
 	templates/lxc-plamo
+	templates/lxc-slackware
 	templates/lxc-sshd
 	templates/lxc-ubuntu
 	templates/lxc-ubuntu-cloud

templates/Makefile.am

@@ -15,6 +15,7 @@ templates_SCRIPTS = \
 	lxc-opensuse \
 	lxc-oracle \
 	lxc-plamo \
+	lxc-slackware \
 	lxc-sshd \
 	lxc-ubuntu \
 	lxc-ubuntu-cloud