openstack/openstack-ansible-lxc_hosts
Code Issues Proposed changes

Adding rpc_pipefs for lxc-openstack aa profile

Browse Source 
The RPC pipefs is needed for NFS kernel/userspace
interaction and need to be added to the LXC profile.
This is important for containers like glance-api who
can mount NFS onto `/var/lib/glance/images`.

Change-Id: Ib1a697ad9a63dd1f7be66321291882ffab82255a
Closes-Bug: #1774037
This commit is contained in:
Bjoern Teipel 2018-05-29 13:44:44 -05:00
parent 1fa367ed4e
commit 57eb57419d
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
templates/lxc-openstack.apparmor.j2
View File

@ -16,6 +16,7 @@ profile lxc-openstack flags=(attach_disconnected,mediate_deleted) {
mount fstype=fuseblk -> /**, mount fstype=fuseblk -> /**,
mount fstype=nbd* -> /**, mount fstype=nbd* -> /**,
mount fstype=nfs* -> /**, mount fstype=nfs* -> /**,
mount fstype=rpc_pipefs,
mount fstype=devpts, mount fstype=devpts,
# allow System access. # allow System access.