# Nesting containers
lxc.include = /usr/share/lxc/config/nesting.conf

# Distribution configuration
lxc.include = /usr/share/lxc/config/common.conf
lxc.arch = x86_64

# Allow all cgroups
lxc.cgroup.devices.allow = a

# Override mounts
lxc.mount.auto = cgroup:mixed proc:rw sys:mixed

# Clear capability drops
lxc.cap.drop =

# Bind points
lxc.mount.entry = /dev/kmsg dev/kmsg none defaults,bind,create=file

# Container specific configuration
lxc.apparmor.profile = unconfined
lxc.apparmor.allow_nesting = 1