commit ffb701f8a3a325e0c321fb2d3e37eea25e66a8af
Author: kevin <email address hidden>
Date: Mon Aug 24 16:24:02 2015 +0100
Removed default lxc profile on container create
Having the lxc container create role drop the lxc-openstack apparmor
profile on all containers anytime its executed leads to the possibility
of the lxc container create task overwriting the running profile on a given
container. If this happens its likley to cause service interruption until the
correct profile is loaded for all containers its effected by the action.
To fix this issue the default "lxc-openstack" profile has been removed from the
lxc contianer create task and added to all plays that are known to be executed
within an lxc container. This will ensure that the profile is untouched on
subsequent runs of the lxc-container-create.yml play.
Reviewed: https:/ /review. openstack. org/216301 /git.openstack. org/cgit/ stackforge/ os-ansible- deployment/ commit/ ?id=ffb701f8a3a 325e0c321fb2d3e 37eea25e66a8af
Committed: https:/
Submitter: Jenkins
Branch: master
commit ffb701f8a3a325e 0c321fb2d3e37ee a25e66a8af
Author: kevin <email address hidden>
Date: Mon Aug 24 16:24:02 2015 +0100
Removed default lxc profile on container create
Having the lxc container create role drop the lxc-openstack apparmor
profile on all containers anytime its executed leads to the possibility
of the lxc container create task overwriting the running profile on a given
container. If this happens its likley to cause service interruption until the
correct profile is loaded for all containers its effected by the action.
To fix this issue the default "lxc-openstack" profile has been removed from the create. yml play.
lxc contianer create task and added to all plays that are known to be executed
within an lxc container. This will ensure that the profile is untouched on
subsequent runs of the lxc-container-
Change-Id: Ifa4640be60c18f 1232cc7c8b281fb 1dfc0119e56
Closes-Bug: 1487130