Merge "Use the 'generated' apparmor profile for all containers"

This commit is contained in:
Zuul 2024-08-06 00:46:14 +00:00 committed by Gerrit Code Review
commit 46c0a58422

View File

@ -13,11 +13,6 @@
# See the License for the specific language governing permissions and # See the License for the specific language governing permissions and
# limitations under the License. # limitations under the License.
# This is the default LXC AppArmor profile
# Groups which need the unbound profile have a specific override
lxc_container_config_list:
- "lxc.apparmor.profile={{ (hostvars[physical_host]['ansible_facts']['distribution'] == 'Debian' ) | ternary('unconfined', 'lxc-openstack') }}"
# Needed by playbooks/common-tasks/os-lxc-container-setup.yml # Needed by playbooks/common-tasks/os-lxc-container-setup.yml
lxc_container_log_path: "/var/log/lxc" lxc_container_log_path: "/var/log/lxc"