Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

deps/softwarecontainer-dependencies.sh: Fix lxc and python3-lxc insta… #104

Open
wants to merge 3 commits into
base: master
Choose a base branch
from

Conversation

alivenets
Copy link

…llation

Remove unneeded LXC packages

Install python3-lxc from source

Signed-off-by: Alexander Livenets [email protected]

@sashko sashko requested review from JEderonn and pookimon April 10, 2020 17:41
@alivenets alivenets force-pushed the fix-lxc-3-install-scripts branch from 8365af5 to d5778cf Compare April 13, 2020 16:43
Copy link

@JEderonn JEderonn left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please update the commit message with a better description. Thx.

Remove remaining LXC packages which are installed as a part of Ubuntu
installation. Since LXC is installed manually, some remaining artifacts
may break behavior of library and tools

Signed-off-by: Alexander Livenets <[email protected]>
@alivenets alivenets force-pushed the fix-lxc-3-install-scripts branch 2 times, most recently from 8a57543 to 6871bdf Compare April 17, 2020 21:03
python3-lxc Ubuntu package depends on LXC packages, therefore LXC of
conflicting version will be installed.

This commits fixes installation of python-lxc by installing it from
source.

Signed-off-by: Alexander Livenets <[email protected]>
@alivenets alivenets force-pushed the fix-lxc-3-install-scripts branch from 6871bdf to 7600b91 Compare April 17, 2020 23:08
@JEderonn
Copy link

Please update the commit message with a better description. Thx.

Looks better, but 7600b91 still lacks a "why" seccomp and apparmor are enabled.

@alivenets alivenets force-pushed the fix-lxc-3-install-scripts branch from 7600b91 to 5c2b093 Compare April 20, 2020 16:42
@alivenets alivenets requested a review from JEderonn April 21, 2020 16:13
Copy link

@JEderonn JEderonn left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved, looks good but have not tested the scripts

@sashko
Copy link
Collaborator

sashko commented Apr 22, 2020

Fix title in 5c2b093 though, please.

Add `--enable-apparmor` and `--enable-seccomp` flags at LXC
configuration stage

AppArmor is required to allow to apply additional MAC restrictions to
container described in AppArmor profile.

seccomp is required to apply additional restrictions on system calls
from container using seccomp syscall blacklist and whitelist.

Signed-off-by: Alexander Livenets <[email protected]>
@alivenets alivenets force-pushed the fix-lxc-3-install-scripts branch from 5c2b093 to b3af3b6 Compare April 22, 2020 15:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants