projects / mirror_lxc.git / blame
| Commit | Line | Data |
|---|---|---|
| 5b99af00 SG |
1 | # This derives from the global common config |
| 2 | lxc.include = @LXCTEMPLATECONFIG@/common.conf | |
| 3 | ||
| 4 | # Doesn't support consoles in /dev/lxc/ | |
| 5 | lxc.devttydir = | |
| 00fe5e1d | 6 | |
| 00fe5e1d SG |
7 | # When using LXC with apparmor, the container will be confined by default. |
| 8 | # If you wish for it to instead run unconfined, copy the following line | |
| 9 | # (uncommented) to the container's configuration file. | |
| 10 | #lxc.aa_profile = unconfined | |
| 11 | ||
| 00fe5e1d SG |
12 | # If you wish to allow mounting block filesystems, then use the following |
| 13 | # line instead, and make sure to grant access to the block device and/or loop | |
| 14 | # devices below in lxc.cgroup.devices.allow. | |
| 15 | #lxc.aa_profile = lxc-container-default-with-mounting | |
| 16 | ||
| 5b99af00 | 17 | # Extra cgroup device access |
| 00fe5e1d SG |
18 | ## rtc |
| 19 | lxc.cgroup.devices.allow = c 254:0 rm | |
| 00fe5e1d SG |
20 | ## tun |
| 21 | lxc.cgroup.devices.allow = c 10:200 rwm | |
| 00fe5e1d SG |
22 | ## hpet |
| 23 | lxc.cgroup.devices.allow = c 10:228 rwm | |
| 24 | ## kvm | |
| 25 | lxc.cgroup.devices.allow = c 10:232 rwm | |
| 26 | ## To use loop devices, copy the following line to the container's | |
| 27 | ## configuration file (uncommented). | |
| 28 | #lxc.cgroup.devices.allow = b 7:* rwm |