Public bug reported:
On a debian stretch host with a working apparmor installation, I created
a container (nspawn) and installed apparmor within that container.
Within the container, apparmor can't be started. `systemctl status
apparmor` returns "ConditionSecurity=apparmor was not met". I also noted
that the whole /sys/modules tree is missing within the container.
Invoking `cat /sys/module/apparmor/parameters/enabled` on the host
returns "Y".
Is AA virtualizable for containers? E.g. can multiple containers load
their own AA profiles? If so, what is exactly needed to run apparmor in
a container?
Thanks!
Cheers,
Matthias
** Affects: apparmor (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1765130
Title:
Can't use apparmor-utils in nspawn container
Status in apparmor package in Ubuntu:
New
Bug description:
On a debian stretch host with a working apparmor installation, I
created a container (nspawn) and installed apparmor within that
container.
Within the container, apparmor can't be started. `systemctl status
apparmor` returns "ConditionSecurity=apparmor was not met". I also
noted that the whole /sys/modules tree is missing within the
container. Invoking `cat /sys/module/apparmor/parameters/enabled` on
the host returns "Y".
Is AA virtualizable for containers? E.g. can multiple containers load
their own AA profiles? If so, what is exactly needed to run apparmor
in a container?
Thanks!
Cheers,
Matthias
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1765130/+subscriptions
--
Mailing list: https://launchpad.net/~touch-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~touch-packages
More help : https://help.launchpad.net/ListHelp
