Skip to content

L
lxc
Commit b85ab798 by Serge Hallyn
Options

ubuntu templates: add comments to show how to enable nesting

Signed-off-by: 's avatarSerge Hallyn <serge.hallyn@ubuntu.com>
parent 375c2258
Showing with 6 additions and 0 deletions
templates/lxc-ubuntu-cloud.in
...@@ -59,6 +59,9 @@ lxc.cap.drop = sys_module mac_admin mac_override sys_time ...@@ -59,6 +59,9 @@ lxc.cap.drop = sys_module mac_admin mac_override sys_time
# When using LXC with apparmor, uncomment the next line to run unconfined: # When using LXC with apparmor, uncomment the next line to run unconfined:
#lxc.aa_profile = unconfined #lxc.aa_profile = unconfined
# To support container nesting on an Ubuntu host, uncomment next two lines:
#lxc.aa_profile = lxc-container-default-with-nesting
#lxc.hook.mount = /usr/share/lxc/hooks/mountcgroups
lxc.cgroup.devices.deny = a lxc.cgroup.devices.deny = a
# Allow any mknod (but not using the node) # Allow any mknod (but not using the node)
......
templates/lxc-ubuntu.in
...@@ -382,6 +382,9 @@ lxc.cap.drop = sys_module mac_admin mac_override sys_time ...@@ -382,6 +382,9 @@ lxc.cap.drop = sys_module mac_admin mac_override sys_time
# When using LXC with apparmor, uncomment the next line to run unconfined: # When using LXC with apparmor, uncomment the next line to run unconfined:
#lxc.aa_profile = unconfined #lxc.aa_profile = unconfined
# To support container nesting on an Ubuntu host, uncomment next two lines:
#lxc.aa_profile = lxc-container-default-with-nesting
#lxc.hook.mount = /usr/share/lxc/hooks/mountcgroups
lxc.cgroup.devices.deny = a lxc.cgroup.devices.deny = a
# Allow any mknod (but not using the node) # Allow any mknod (but not using the node)
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment