apparmor: support for lxc profiles

2017-01-10 23:01:03 +01:00
parent 3aca77a7f2
commit 30a554acfb
2 changed files with 15 additions and 9 deletions
@@ -62,19 +62,17 @@ in
            </citerefentry>.
          '';
      };
-
  };

  ###### implementation

  config = mkIf cfg.enable {
-
    environment.systemPackages = [ pkgs.lxc ];
-
    environment.etc."lxc/lxc.conf".text = cfg.systemConfig;
    environment.etc."lxc/lxc-usernet".text = cfg.usernetConfig;
    environment.etc."lxc/default.conf".text = cfg.defaultConfig;

+    security.apparmor.packages = [ pkgs.lxc ];
+    security.apparmor.profiles = [ "${pkgs.lxc}/etc/apparmor.d/lxc-containers" ];
  };
-
 }