-
Notifications
You must be signed in to change notification settings - Fork 33
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
deps/softwarecontainer-dependencies.sh: Fix lxc and python3-lxc insta… #104
base: master
Are you sure you want to change the base?
Conversation
8365af5
to
d5778cf
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Please update the commit message with a better description. Thx.
Remove remaining LXC packages which are installed as a part of Ubuntu installation. Since LXC is installed manually, some remaining artifacts may break behavior of library and tools Signed-off-by: Alexander Livenets <[email protected]>
8a57543
to
6871bdf
Compare
python3-lxc Ubuntu package depends on LXC packages, therefore LXC of conflicting version will be installed. This commits fixes installation of python-lxc by installing it from source. Signed-off-by: Alexander Livenets <[email protected]>
6871bdf
to
7600b91
Compare
Looks better, but 7600b91 still lacks a "why" seccomp and apparmor are enabled. |
7600b91
to
5c2b093
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Approved, looks good but have not tested the scripts
Fix title in 5c2b093 though, please. |
Add `--enable-apparmor` and `--enable-seccomp` flags at LXC configuration stage AppArmor is required to allow to apply additional MAC restrictions to container described in AppArmor profile. seccomp is required to apply additional restrictions on system calls from container using seccomp syscall blacklist and whitelist. Signed-off-by: Alexander Livenets <[email protected]>
5c2b093
to
b3af3b6
Compare
…llation
Remove unneeded LXC packages
Install python3-lxc from source
Signed-off-by: Alexander Livenets [email protected]