Recent content by Julian J. M.

Well, to answer my question, just in case someone else finds this. Copy the default profile: Then edit and add the mount options line: # Do not load this file. Rather, load /etc/apparmor.d/lxc-containers, which # will source all profiles under /etc/apparmor.d/lxc profile...

After migrating an openvz container to LXC, we are having some issues with the way ISPConfig mounts the log folder for each website. Logs reside in /var/log/ispconfig/httpd/website/, but the website roots are in /var/www/whatever ISPConfig uses bind mount on the log folders, and it's being...

Good question! :-D Thanks man, that's what I needed.

What I mean is that it opens all ports to members of that ipset. 1) accept port TCP/22 block (default policy) 2) accept ipset spain accept port TCP/22 (redundant) block (default policy) 3) block ip set NOT spain accept port TCP/22 block (default policy) I currently have 1). I can do 2) but...

I have the default input rule for the VMs as DROP, and then enable specific ports based on the services that machine provides. What I'm trying to do is to, explicitly block everything from outside of my country. I can create an ipset "spain", with all the network ranges, and I could just...

I'm runing Proxmox 4.2 with zfs local storage. I've created a template we want to use to deploy new machines. When I clone the template I can choose between Full Clone and Linked Clone. The first one just creates a new zfs block device and copies all the data from the template. The ondisk data...