On Wed, Dec 3, 2014 at 12:05 PM, Stéphane Graber <[email protected]> wrote: > On Tue, Dec 02, 2014 at 10:34:56PM -0500, Stéphane Graber wrote: >> On Tue, Dec 02, 2014 at 10:02:34PM -0500, S.Çağlar Onur wrote: >> > Hey, >> > >> > Seems like [1] is causing problems for trusty (I'm using daily stable >> > builds) as its AppArmor version does not understand "unix" directive >> > >> > [root@eleksi:~/eleksi(master)] /etc/init.d/apparmor reload >> > * Reloading AppArmor profiles >> > >> > ppArmor parser error for /etc/apparmor.d/lxc-containers in >> > /etc/apparmor.d/abstractions/lxc/container-base at line 41: syntax >> > error, unexpected TOK_OPENPAREN, expecting TOK_MODE >> > >> > Commenting out following helps but not sure whether that's a correct thing >> > to do >> > >> > 37 # Allow receive via unix sockets from anywhere. Note: if >> > per-container >> > 38 # profiles are supported, for container isolation this should be >> > changed to >> > 39 # something like: >> > 40 # unix (receive) peer=(label=unconfined), >> > 41 #unix (receive), >> > 42 >> > 43 # Allow all unix in the container >> > 44 #unix peer=(label=@{profile_name}), >> > >> > [1] >> > https://github.com/lxc/lxc/commit/d9bae9c84b21642876107f32ba6c51ff3350c372 >> > >> > Best, >> >> Good catch, I'll update the stable PPA packaging to drop the unix lines >> on 14.04. We already have a bunch of those (detecting apparmor version >> and stripping the stanzas that go introduced in later versions). >> >> So yeah, removing or commenting out those lines is the right thing to >> do, but the packaging should do that for you usually :) >> >> -- >> Stéphane Graber >> Ubuntu developer >> http://www.ubuntu.com > > I updated the packaging branch and a build is currently in progress, the > next PPA upload should work fine on 14.04.
Thanks Stéphane! > -- > Stéphane Graber > Ubuntu developer > http://www.ubuntu.com > > _______________________________________________ > lxc-devel mailing list > [email protected] > http://lists.linuxcontainers.org/listinfo/lxc-devel > -- S.Çağlar Onur <[email protected]> _______________________________________________ lxc-devel mailing list [email protected] http://lists.linuxcontainers.org/listinfo/lxc-devel
