On Mon, 2024-03-11 at 15:08 -0700, Mike Wright wrote:
Try this ( works with lxc.apparmor.context ).
lxc.selinux.context = generated
Same result.
...and also ~/.local/lxc/default.conf with these contents:
lxc.include = /etc/lxc/default.conf
The local default.conf was copied from /etc/lxc and edited.
lxc.idmap = u 0 100000 65536 lxc.idmap = g 0 100000 65536
Those lines are already there. This is the complete file:
$ cat ~/.config/lxc/default.conf lxc.net.0.type = veth lxc.net.0.link = lxcbr0 lxc.net.0.flags = up lxc.net.0.hwaddr = 00:16:3e:xx:xx:xx lxc.idmap = u 0 100000 65536 lxc.idmap = g 0 100000 65536 lxc.cgroup.devices.allow=a lxc.selinux.context = generated
poc