summaryrefslogtreecommitdiff
path: root/roles/k8s/files/lxc-config
blob: 6b57b932ca31941ae32f7badefeddab4b3c28ba0 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
# Nesting containers
lxc.include = /usr/share/lxc/config/nesting.conf

# Distribution configuration
lxc.include = /usr/share/lxc/config/common.conf
lxc.arch = x86_64

# Allow all cgroups
lxc.cgroup.devices.allow = a

# Override mounts
lxc.mount.auto = cgroup:mixed proc:rw sys:mixed

# Clear capability drops
lxc.cap.drop =

# Bind points
lxc.mount.entry = /dev/kmsg dev/kmsg none defaults,bind,create=file

# Container specific configuration
lxc.apparmor.profile = unconfined
lxc.apparmor.allow_nesting = 1