Re: [libvirt-users] Attempt to define unprivileged LXC by libvirt

2018-03-23 Thread Daniel P . Berrangé
On Fri, Mar 23, 2018 at 02:28:11PM +0100, ales drtik wrote: > Thanks for info about that. > This means to use apparmor mandatory, isn't it true? If you enable user namespaces for the container that is sufficient to provide a secure config. None the less we still recommend /also/ adding MAC like

Re: [libvirt-users] Attempt to define unprivileged LXC by libvirt

2018-03-23 Thread ales drtik
Thanks for info about that. This means to use apparmor mandatory, isn't it true? ___ libvirt-users mailing list libvirt-users@redhat.com https://www.redhat.com/mailman/listinfo/libvirt-users

Re: [libvirt-users] Attempt to define unprivileged LXC by libvirt

2018-03-23 Thread Daniel P . Berrangé
On Fri, Mar 23, 2018 at 02:09:39PM +0100, ales drtik wrote: > Hi, > i converted LXC conf to xml by: > > lxcuser@blade1:~/.local/share/lxc/test_deb$ virsh -c lxc:/// domxml-from- > native lxc-tools /home/lxcuser/.local/share/lxc/test_deb/config > > > test_deb >

[libvirt-users] Attempt to define unprivileged LXC by libvirt

2018-03-23 Thread ales drtik
Hi, i converted LXC conf to xml by: lxcuser@blade1:~/.local/share/lxc/test_deb$ virsh -c lxc:/// domxml-from- native lxc-tools /home/lxcuser/.local/share/lxc/test_deb/config test_deb cce77799-89fd-41fd-99c1-101e00844e23 65536 65536 1 exe /sbin/init destroy restart destroy