From f55df9f3300b70a1e8703ebae3efcb807734d7c3 Mon Sep 17 00:00:00 2001 From: Jonathan Rosser Date: Mon, 22 Jul 2024 17:50:31 +0100 Subject: [PATCH] Use the 'generated' apparmor profile for all containers Depends-On: https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/924994 Depends-On: https://review.opendev.org/c/openstack/openstack-ansible-repo_server/+/925571 Change-Id: I038d2e03b794aacdf68f0e6daf660b7d6bfe6c41 --- inventory/group_vars/all_containers.yml | 5 ----- 1 file changed, 5 deletions(-) diff --git a/inventory/group_vars/all_containers.yml b/inventory/group_vars/all_containers.yml index c219427bd7..15facbc310 100644 --- a/inventory/group_vars/all_containers.yml +++ b/inventory/group_vars/all_containers.yml @@ -13,11 +13,6 @@ # See the License for the specific language governing permissions and # limitations under the License. -# This is the default LXC AppArmor profile -# Groups which need the unbound profile have a specific override -lxc_container_config_list: - - "lxc.apparmor.profile={{ (hostvars[physical_host]['ansible_facts']['distribution'] == 'Debian' ) | ternary('unconfined', 'lxc-openstack') }}" - # Needed by playbooks/common-tasks/os-lxc-container-setup.yml lxc_container_log_path: "/var/log/lxc"