gemian-fixes/lxc-android
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Tidying up and commenting a working set of settings

Browse source
This commit is contained in:
Adam Boardman 2021-01-04 19:33:35 +00:00
parent 28d3c00448
commit b80adb06d0
1 changed files with 4 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
var/lib/lxc/android/config
View file

@ -1,34 +1,31 @@
# Merge networking with primary kernel to allow fuelgauged to talk between its vendor and builtin battery charging modules (none)
lxc.net.0.type = none lxc.net.0.type = none
lxc.rootfs.path = dir:/var/lib/lxc/android/rootfs lxc.rootfs.path = dir:/var/lib/lxc/android/rootfs
#lxc.tty.dir = lxc
lxc.tty.dir = lxc.tty.dir =
lxc.tty.max = 4 lxc.tty.max = 4
lxc.pty.max = 1024 lxc.pty.max = 1024
lxc.arch = arm64 lxc.arch = arm64
# Drop some harmful capabilities # Drop some harmful capabilities, but not all of them
#lxc.cap.drop = mac_admin mac_override sys_time sys_module sys_rawio #lxc.cap.drop = mac_admin mac_override sys_time sys_module sys_rawio
lxc.cap.drop = mac_admin mac_override lxc.cap.drop = mac_admin mac_override
# Blacklist some syscalls which are not safe in privileged containers # Don't blacklist some syscalls which are not safe in privileged containers, but are needed by android init
#lxc.seccomp.profile = /usr/share/lxc/config/common.seccomp #lxc.seccomp.profile = /usr/share/lxc/config/common.seccomp
lxc.hook.pre-start = /var/lib/lxc/android/pre-start.sh lxc.hook.pre-start = /var/lib/lxc/android/pre-start.sh
#this might not be needed? # This is not needed as we do it manually within the systemd startup
#lxc.init_cmd = /init #lxc.init_cmd = /init
lxc.apparmor.profile = unconfined lxc.apparmor.profile = unconfined
lxc.autodev = 0 lxc.autodev = 0
lxc.hook.mount = /usr/share/lxcfs/lxc.mount.hook lxc.hook.mount = /usr/share/lxcfs/lxc.mount.hook
lxc.hook.post-stop = /usr/share/lxcfs/lxc.reboot.hook lxc.hook.post-stop = /usr/share/lxcfs/lxc.reboot.hook
lxc.mount.entry = tmpfs dev tmpfs nosuid 0 0 lxc.mount.entry = tmpfs dev tmpfs nosuid 0 0
lxc.mount.entry = /dev/__properties__ dev/__properties__ bind bind,create=dir 0 0 lxc.mount.entry = /dev/__properties__ dev/__properties__ bind bind,create=dir 0 0
lxc.mount.entry = /dev/socket dev/socket bind bind,create=dir 0 0 lxc.mount.entry = /dev/socket dev/socket bind bind,create=dir 0 0