ffb701f8a3
Having the lxc container create role drop the lxc-openstack apparmor profile on all containers anytime its executed leads to the possibility of the lxc container create task overwriting the running profile on a given container. If this happens its likley to cause service interruption until the correct profile is loaded for all containers its effected by the action. To fix this issue the default "lxc-openstack" profile has been removed from the lxc contianer create task and added to all plays that are known to be executed within an lxc container. This will ensure that the profile is untouched on subsequent runs of the lxc-container-create.yml play. Change-Id: Ifa4640be60c18f1232cc7c8b281fb1dfc0119e56 Closes-Bug: 1487130 |
||
|---|---|---|
| .. | ||
| defaults | ||
| handlers | ||
| meta | ||
| tasks | ||
| templates | ||
| CONTRIBUTING.rst | ||
| LICENSE | ||
| README.rst | ||
OpenStack LXC container create
- tags
-
openstack, lxc, container, cloud, ansible
- category
-
*nix
Role for creating LXC containers. This role has been setup for use in OpenStack. This role will create several directories on the LXC host for use in bind mounted storage within the container.
- Example Play:
-
- name: Create container(s) hosts: all_containers gather_facts: false user: root roles: - { role: "lxc_container_create", tags: [ "lxc-container-create" ] } - Example Inventory:
-
{ "all_containers": { "children": [ "group_of_containers" ], "hosts": [] }, "lxc_hosts": { "children": [], "hosts": [ "infra1" ] }, "group_of_containers": { "children": [], "hosts": [ "container1" ] }, "_meta": { "hostvars": { "infra1": { "ansible_ssh_host": "192.168.0.1", "container_address": "192.168.0.1", "container_name": "infra1", "container_networks": { "management_address": { "bridge": "br-mgmt", "interface": "eth1", "netmask": "255.255.252.0", "type": "veth" } }, "properties": { "container_release": "trusty", "is_metal": true } }, "container1": { "ansible_ssh_host": "10.0.0.1", "container_address": "10.0.0.1", "container_name": "container1", "container_networks": { "management_address": { "address": "10.0.0.1", "bridge": "br-mgmt", "interface": "eth1", "netmask": "255.255.252.0", "type": "veth" } }, "physical_host": "infra1", "physical_host_group": "lxc_hosts", "properties": { "container_release": "trusty", } } } } }