Chooseing apparmor config on lxc creation

[aghadjip]

Hey Folks,

I have an apparmor profile *_with_NFS that I add to LXCs that need NFS. I rather not all containers get this config. It would be nice to be able to define an lxc at creation to use various profiles. Is this possible? Rather not have to edit each container config file.

How are others doing it?

 

[t.lamprecht]

You can just set this through the WebUI, go to the Cóntainers Option Tab and Edit the "Features" entry:

 

[aghadjip]

You can just set this through the WebUI, go to the Cóntainers Option Tab and Edit the "Features" entry:
View attachment 9299

Oh thats fun, thanks. do you happen to know the values that each item injects? Does it write to the lxc config directly or have another method. Is there a corresponding API value for that setting? It would make automating easier.

 

[t.lamprecht]

It adds:

lxc.apparmor.raw = mount fstype=nfs

to the generated apparmor profile on start.
See: https://git.proxmox.com/?p=pve-cont...fb3a3fb1e859cb705375ef4bb42b279a;hb=HEAD#l491
commit which added this: https://git.proxmox.com/?p=pve-cont...8;hp=d494e03c2d92a63f8ba3db8b3341db115190dfa9

 

[t.lamprecht]

Is there a corresponding API value for that setting

Yes, the WebUI wraps a bit around to make it less complicated, as normally you could set other FStypes too. You can set it via CLI with:

pct set 103 --features mount=nfs;cifs;fuse

(this time besides nfs also fuse and cifs would be allowed) or over API see: https://pve.proxmox.com/pve-docs/api-viewer/index.html
and go to the /nodes/{node}/lxc/{vmid}/config in the sidepanel