Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

deps/softwarecontainer-dependencies.sh: Fix lxc and python3-lxc insta… #104

Open
wants to merge 3 commits into
base: master
Choose a base branch
from

Conversation

alivenets
Copy link

…llation

Remove unneeded LXC packages

Install python3-lxc from source

Signed-off-by: Alexander Livenets [email protected]

Copy link

@JEderonn JEderonn left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please update the commit message with a better description. Thx.

Remove remaining LXC packages which are installed as a part of Ubuntu
installation. Since LXC is installed manually, some remaining artifacts
may break behavior of library and tools

Signed-off-by: Alexander Livenets <[email protected]>
@alivenets alivenets force-pushed the fix-lxc-3-install-scripts branch 2 times, most recently from 8a57543 to 6871bdf Compare April 17, 2020 21:03
python3-lxc Ubuntu package depends on LXC packages, therefore LXC of
conflicting version will be installed.

This commits fixes installation of python-lxc by installing it from
source.

Signed-off-by: Alexander Livenets <[email protected]>
@JEderonn
Copy link

Please update the commit message with a better description. Thx.

Looks better, but 7600b91 still lacks a "why" seccomp and apparmor are enabled.

Copy link

@JEderonn JEderonn left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved, looks good but have not tested the scripts

@sashko
Copy link
Collaborator

sashko commented Apr 22, 2020

Fix title in 5c2b093 though, please.

Add `--enable-apparmor` and `--enable-seccomp` flags at LXC
configuration stage

AppArmor is required to allow to apply additional MAC restrictions to
container described in AppArmor profile.

seccomp is required to apply additional restrictions on system calls
from container using seccomp syscall blacklist and whitelist.

Signed-off-by: Alexander Livenets <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants