Well, to answer my question, just in case someone else finds this.
Copy the default profile:
Then edit and add the mount options line:
# Do not load this file. Rather, load /etc/apparmor.d/lxc-containers, which
# will source all profiles under /etc/apparmor.d/lxc
profile...
After migrating an openvz container to LXC, we are having some issues with the way ISPConfig mounts the log folder for each website.
Logs reside in /var/log/ispconfig/httpd/website/, but the website roots are in /var/www/whatever
ISPConfig uses bind mount on the log folders, and it's being...
What I mean is that it opens all ports to members of that ipset.
1)
accept port TCP/22
block (default policy)
2)
accept ipset spain
accept port TCP/22 (redundant)
block (default policy)
3)
block ip set NOT spain
accept port TCP/22
block (default policy)
I currently have 1). I can do 2) but...
I have the default input rule for the VMs as DROP, and then enable specific ports based on the services that machine provides.
What I'm trying to do is to, explicitly block everything from outside of my country.
I can create an ipset "spain", with all the network ranges, and I could just...
I'm runing Proxmox 4.2 with zfs local storage.
I've created a template we want to use to deploy new machines.
When I clone the template I can choose between Full Clone and Linked Clone. The first one just creates a new zfs block device and copies all the data from the template. The ondisk data...
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.