3fa780d98f
To reduce the number of times a container is restarted during the build process, this patch moves the AA profile definition from the service playbooks to the inventory. This ensures that the profile can be applied when the container is created, rather than after the fact. This, in turn, eliminates the need to restart the container again and wait for SSH connectivity to be restored. There are additional configurations in some playbooks which will require an additional facility in the lxc_container_create role to allow something similar for container command execution. The changes to implement this will follow in another patch once that facility is available. Change-Id: I688640cf06a7ed2554210e49275cc3de10371a23 Depends-On: I4c95a231af3306c5010b168e7cc181deecf1a58d
18 lines
647 B
YAML
18 lines
647 B
YAML
---
|
|
# Copyright 2016, Rackspace US, Inc.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
lxc_container_config_list:
|
|
- "lxc.aa_profile=unconfined"
|