[libvirt-users] 回复： How to deal with LXC cgroup access control withapparmor ?

thx, Gao feng, If I do not want to disable the cgroup in container , is there any config file ? or do i have to do something to the libvirt source code to skip it ? ------------------ 原始邮件 ------------------ 发件人: "Gao feng&quot;&lt;gaofeng(a)cn.fujitsu.com&gt;; 发送时间: 2013年8月26日(星期一) 下午4:06 收件人: &quot;止语&quot;&lt;zhongjj(a)foxmail.com&gt;; 抄送: &quot;libvirt-users&quot;&lt;libvirt-users(a)redhat.com&gt;; 主题: Re: [libvirt-users] How to deal with LXC cgroup access control withapparmor ? On 08/26/2013 03:42 PM, 止语 wrote: The simplest way is to enable user namespace for libvirt. the below is the configuration you should do to enable user namespace [quote] If you want to enable user namespace,set the idmap element. the uid and gid elements have three attributes: start First user id in container. target The first user id in container will be mapped to this target user id in host. count How many users in container being allowed to map to host's user. <idmap> <uid start='0' target='1000' count='10'/> <gid start='0' target='1000' count='10'/> </idmap> [/quote]