diff options
| author | Thedro Neely <thedroneely@gmail.com> | 2020-01-09 03:11:25 -0500 |
|---|---|---|
| committer | Thedro Neely <thedroneely@gmail.com> | 2020-01-09 03:11:25 -0500 |
| commit | cdf16b043c0b8f293a32581dc24c1f156a26d028 (patch) | |
| tree | 17b5352804e2890f6dd934a5b91657ffc939eb33 /roles/k8s/files | |
| parent | b4cb052dcbe94e74c69381bac7c825eb782381d1 (diff) | |
| download | playbooks-cdf16b043c0b8f293a32581dc24c1f156a26d028.tar.gz playbooks-cdf16b043c0b8f293a32581dc24c1f156a26d028.tar.bz2 playbooks-cdf16b043c0b8f293a32581dc24c1f156a26d028.zip | |
roles/k8s/files: Add sample lxc config
Diffstat (limited to 'roles/k8s/files')
| -rw-r--r-- | roles/k8s/files/lxc-config | 35 |
1 files changed, 35 insertions, 0 deletions
diff --git a/roles/k8s/files/lxc-config b/roles/k8s/files/lxc-config new file mode 100644 index 0000000..4afd9e5 --- /dev/null +++ b/roles/k8s/files/lxc-config @@ -0,0 +1,35 @@ +# Template used to create this container: /usr/share/lxc/templates/lxc-download +# Parameters passed to the template: +# For additional config options, please look at lxc.container.conf(5) + +# Uncomment the following line to support nesting containers: +lxc.include = /usr/share/lxc/config/nesting.conf +# (Be aware this has security implications) + +# Distribution configuration +lxc.include = /usr/share/lxc/config/common.conf +lxc.arch = x86_64 + +# Allow all cgroups +lxc.cgroup.devices.allow = a + +# Override mounts +lxc.mount.auto = cgroup:mixed proc:rw sys:mixed + +# Clear capability drops +lxc.cap.drop = + +# Bind points +lxc.mount.entry = /dev/kmsg dev/kmsg none defaults,bind,create=file + +# Container specific configuration +lxc.apparmor.profile = unconfined +lxc.apparmor.allow_nesting = 1 + +# Network configuration +lxc.net.0.type = veth +lxc.net.0.link = lxcbr0 +lxc.net.0.flags = up +lxc.net.0.hwaddr = 00:16:3e:e0:c3:1d +lxc.rootfs.path = dir:/var/lib/lxc/k8s-centos8/rootfs +lxc.uts.name = k8s-centos8 |