I've built microk8s from the feature/scrict branch, upon installing the snap and launching microk8s.kubectl I get only those denials: [ 4349.918214] audit: type=1400 audit(1542369829.324:196): apparmor="DENIED" operation="open" profile="snap.microk8s.daemon-proxy" name="/sys/kernel/mm/hugepages/" pid=11145 comm="kube-proxy" requested_mask="r" denied_mask="r" fsuid=0 ouid=0 [ 4349.921932] audit: type=1400 audit(1542369829.328:197): apparmor="DENIED" operation="exec" profile="snap.microk8s.daemon-proxy" name="/bin/kmod" pid=11222 comm="kube-proxy" requested_mask="x" denied_mask="x" fsuid=0 ouid=0 [ 4349.922386] audit: type=1400 audit(1542369829.328:198): apparmor="DENIED" operation="exec" profile="snap.microk8s.daemon-proxy" name="/bin/kmod" pid=11223 comm="kube-proxy" requested_mask="x" denied_mask="x" fsuid=0 ouid=0 [ 4349.922744] audit: type=1400 audit(1542369829.328:199): apparmor="DENIED" operation="exec" profile="snap.microk8s.daemon-proxy" name="/bin/kmod" pid=11224 comm="kube-proxy" requested_mask="x" denied_mask="x" fsuid=0 ouid=0 [ 4349.923147] audit: type=1400 audit(1542369829.328:200): apparmor="DENIED" operation="exec" profile="snap.microk8s.daemon-proxy" name="/bin/kmod" pid=11225 comm="kube-proxy" requested_mask="x" denied_mask="x" fsuid=0 ouid=0 [ 4349.923556] audit: type=1400 audit(1542369829.328:201): apparmor="DENIED" operation="exec" profile="snap.microk8s.daemon-proxy" name="/bin/kmod" pid=11226 comm="kube-proxy" requested_mask="x" denied_mask="x" fsuid=0 ouid=0 [ 4349.924542] audit: type=1400 audit(1542369829.328:202): apparmor="DENIED" operation="open" profile="snap.microk8s.daemon-proxy" name="/proc/modules" pid=11227 comm="cut" requested_mask="r" denied_mask="r" fsuid=0 ouid=0 [ 4350.244108] audit: type=1400 audit(1542369829.648:203): apparmor="DENIED" operation="open" profile="snap.microk8s.daemon-proxy" name="/sys/kernel/mm/hugepages/" pid=11284 comm="kube-proxy" requested_mask="r" denied_mask="r" fsuid=0 ouid=0 [ 4350.247745] audit: type=1400 audit(1542369829.652:204): apparmor="DENIED" operation="exec" profile="snap.microk8s.daemon-proxy" name="/bin/kmod" pid=11349 comm="kube-proxy" requested_mask="x" denied_mask="x" fsuid=0 ouid=0 [ 4350.248020] audit: type=1400 audit(1542369829.652:205): apparmor="DENIED" operation="exec" profile="snap.microk8s.daemon-proxy" name="/bin/kmod" pid=11350 comm="kube-proxy" requested_mask="x" denied_mask="x" fsuid=0 ouid=0 [ 4355.214907] audit: type=1400 audit(1542369834.620:241): apparmor="DENIED" operation="mkdir" profile="snap.microk8s.daemon-controller-manager" name="/run/kubernetes/" pid=12275 comm="kube-controller" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [ 4355.226638] audit: type=1400 audit(1542369834.632:242): apparmor="DENIED" operation="mkdir" profile="snap.microk8s.daemon-apiserver" name="/run/kubernetes/" pid=12150 comm="kube-apiserver" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [ 4356.005864] audit: type=1400 audit(1542369835.412:243): apparmor="DENIED" operation="mkdir" profile="snap.microk8s.daemon-apiserver" name="/run/kubernetes/" pid=12351 comm="kube-apiserver" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 The mount profile contains: zyga@fyke:/var/lib/snapd/mount$ cat snap.microk8s.fstab none /var/lib/cni none x-snapd.kind=symlink,x-snapd.symlink=/var/snap/microk8s/common/var/lib/cni,x-snapd.origin=layout 0 0 /snap/microk8s/x1/var/log/containers /var/log/containers none rbind,rw,x-snapd.origin=layout 0 0 /snap/microk8s/x1/var/log/pods /var/log/pods none rbind,rw,x-snapd.origin=layout 0 0 zyga@fyke:/run/snapd/ns$ cat snap.microk8s.fstab tmpfs /var/lib tmpfs x-snapd.synthetic,x-snapd.needed-by=/var/lib/cni,mode=0755,uid=0,gid=0 0 0 /var/lib/cloud /var/lib/cloud none rbind,x-snapd.synthetic,x-snapd.needed-by=/var/lib/cni,x-snapd.detach 0 0 /var/lib/console-conf /var/lib/console-conf none rbind,x-snapd.synthetic,x-snapd.needed-by=/var/lib/cni,x-snapd.detach 0 0 /var/lib/dbus /var/lib/dbus none rbind,x-snapd.synthetic,x-snapd.needed-by=/var/lib/cni,x-snapd.detach 0 0 /var/lib/extrausers /var/lib/extrausers none rbind,x-snapd.synthetic,x-snapd.needed-by=/var/lib/cni,x-snapd.detach 0 0 /var/lib/misc /var/lib/misc none rbind,x-snapd.synthetic,x-snapd.needed-by=/var/lib/cni,x-snapd.detach 0 0 /var/lib/pam /var/lib/pam none rbind,x-snapd.synthetic,x-snapd.needed-by=/var/lib/cni,x-snapd.detach 0 0 /var/lib/polkit-1 /var/lib/polkit-1 none rbind,x-snapd.synthetic,x-snapd.needed-by=/var/lib/cni,x-snapd.detach 0 0 /var/lib/private /var/lib/private none rbind,x-snapd.synthetic,x-snapd.needed-by=/var/lib/cni,x-snapd.detach 0 0 /var/lib/python /var/lib/python none rbind,x-snapd.synthetic,x-snapd.needed-by=/var/lib/cni,x-snapd.detach 0 0 /var/lib/snapd /var/lib/snapd none rbind,x-snapd.synthetic,x-snapd.needed-by=/var/lib/cni,x-snapd.detach 0 0 /var/lib/sudo /var/lib/sudo none rbind,x-snapd.synthetic,x-snapd.needed-by=/var/lib/cni,x-snapd.detach 0 0 /var/lib/systemd /var/lib/systemd none rbind,x-snapd.synthetic,x-snapd.needed-by=/var/lib/cni,x-snapd.detach 0 0 /var/lib/ucf /var/lib/ucf none rbind,x-snapd.synthetic,x-snapd.needed-by=/var/lib/cni,x-snapd.detach 0 0 /var/lib/vim /var/lib/vim none rbind,x-snapd.synthetic,x-snapd.needed-by=/var/lib/cni,x-snapd.detach 0 0 none /var/lib/cni none x-snapd.kind=symlink,x-snapd.symlink=/var/snap/microk8s/common/var/lib/cni,x-snapd.origin=layout 0 0 tmpfs /var/log tmpfs x-snapd.synthetic,x-snapd.needed-by=/var/log/containers,mode=0775,uid=0,gid=106 0 0 /var/log/Xorg.0.log /var/log/Xorg.0.log none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/alternatives.log /var/log/alternatives.log none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/alternatives.log.1 /var/log/alternatives.log.1 none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/alternatives.log.2.gz /var/log/alternatives.log.2.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/alternatives.log.3.gz /var/log/alternatives.log.3.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/alternatives.log.4.gz /var/log/alternatives.log.4.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/alternatives.log.5.gz /var/log/alternatives.log.5.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/alternatives.log.6.gz /var/log/alternatives.log.6.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/apparmor.init.log /var/log/apparmor.init.log none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/apparmor_parser.log /var/log/apparmor_parser.log none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/apport.log /var/log/apport.log none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/apport.log.1 /var/log/apport.log.1 none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/apport.log.2.gz /var/log/apport.log.2.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/apport.log.3.gz /var/log/apport.log.3.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/apport.log.4.gz /var/log/apport.log.4.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/apport.log.5.gz /var/log/apport.log.5.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/apport.log.6.gz /var/log/apport.log.6.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/apport.log.7.gz /var/log/apport.log.7.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/apt /var/log/apt none rbind,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers,x-snapd.detach 0 0 /var/log/auth.log /var/log/auth.log none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/auth.log.1 /var/log/auth.log.1 none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/auth.log.2.gz /var/log/auth.log.2.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/auth.log.3.gz /var/log/auth.log.3.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/auth.log.4.gz /var/log/auth.log.4.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/bootstrap.log /var/log/bootstrap.log none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/btmp /var/log/btmp none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/btmp.1 /var/log/btmp.1 none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/cups /var/log/cups none rbind,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers,x-snapd.detach 0 0 /var/log/dist-upgrade /var/log/dist-upgrade none rbind,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers,x-snapd.detach 0 0 /var/log/dpkg.log /var/log/dpkg.log none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/dpkg.log.1 /var/log/dpkg.log.1 none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/dpkg.log.2.gz /var/log/dpkg.log.2.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/dpkg.log.3.gz /var/log/dpkg.log.3.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/dpkg.log.4.gz /var/log/dpkg.log.4.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/dpkg.log.5.gz /var/log/dpkg.log.5.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/dpkg.log.6.gz /var/log/dpkg.log.6.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/faillog /var/log/faillog none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/fontconfig.log /var/log/fontconfig.log none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/gdm3 /var/log/gdm3 none rbind,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers,x-snapd.detach 0 0 /var/log/gpu-manager.log /var/log/gpu-manager.log none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/hp /var/log/hp none rbind,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers,x-snapd.detach 0 0 /var/log/installer /var/log/installer none rbind,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers,x-snapd.detach 0 0 /var/log/journal /var/log/journal none rbind,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers,x-snapd.detach 0 0 /var/log/kern.log /var/log/kern.log none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/kern.log.1 /var/log/kern.log.1 none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/kern.log.2.gz /var/log/kern.log.2.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/kern.log.3.gz /var/log/kern.log.3.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/kern.log.4.gz /var/log/kern.log.4.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/lastlog /var/log/lastlog none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/openvpn /var/log/openvpn none rbind,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers,x-snapd.detach 0 0 /var/log/private /var/log/private none rbind,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers,x-snapd.detach 0 0 /var/log/speech-dispatcher /var/log/speech-dispatcher none rbind,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers,x-snapd.detach 0 0 /var/log/syslog /var/log/syslog none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/syslog.1 /var/log/syslog.1 none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/syslog.2.gz /var/log/syslog.2.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/syslog.3.gz /var/log/syslog.3.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/syslog.4.gz /var/log/syslog.4.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/syslog.5.gz /var/log/syslog.5.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/syslog.6.gz /var/log/syslog.6.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/syslog.7.gz /var/log/syslog.7.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/tallylog /var/log/tallylog none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/unattended-upgrades /var/log/unattended-upgrades none rbind,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers,x-snapd.detach 0 0 /var/log/vmware /var/log/vmware none rbind,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers,x-snapd.detach 0 0 /var/log/vmware-network.1.log /var/log/vmware-network.1.log none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/vmware-network.2.log /var/log/vmware-network.2.log none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/vmware-network.3.log /var/log/vmware-network.3.log none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/vmware-network.4.log /var/log/vmware-network.4.log none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/vmware-network.5.log /var/log/vmware-network.5.log none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/vmware-network.6.log /var/log/vmware-network.6.log none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/vmware-network.7.log /var/log/vmware-network.7.log none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/vmware-network.8.log /var/log/vmware-network.8.log none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/vmware-network.9.log /var/log/vmware-network.9.log none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/vmware-network.log /var/log/vmware-network.log none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/vmware-vmsvc.1.log /var/log/vmware-vmsvc.1.log none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/vmware-vmsvc.2.log /var/log/vmware-vmsvc.2.log none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/vmware-vmsvc.3.log /var/log/vmware-vmsvc.3.log none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/vmware-vmsvc.log /var/log/vmware-vmsvc.log none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/wtmp /var/log/wtmp none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/wtmp.1 /var/log/wtmp.1 none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 tmpfs /snap/microk8s/x1/ tmpfs x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers,mode=0755,uid=0,gid=0 0 0 /snap/microk8s/x1/ISSUE_TEMPLATE.md /snap/microk8s/x1/ISSUE_TEMPLATE.md none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers 0 0 /snap/microk8s/x1/LICENSE /snap/microk8s/x1/LICENSE none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers 0 0 /snap/microk8s/x1/README.md /snap/microk8s/x1/README.md none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers 0 0 /snap/microk8s/x1/actions /snap/microk8s/x1/actions none rbind,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers,x-snapd.detach 0 0 /snap/microk8s/x1/basic_auth.csv /snap/microk8s/x1/basic_auth.csv none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers 0 0 /snap/microk8s/x1/bin /snap/microk8s/x1/bin none rbind,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers,x-snapd.detach 0 0 /snap/microk8s/x1/build /snap/microk8s/x1/build none rbind,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers,x-snapd.detach 0 0 /snap/microk8s/x1/build-scripts /snap/microk8s/x1/build-scripts none rbind,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers,x-snapd.detach 0 0 /snap/microk8s/x1/certs /snap/microk8s/x1/certs none rbind,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers,x-snapd.detach 0 0 /snap/microk8s/x1/certs-beta /snap/microk8s/x1/certs-beta none rbind,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers,x-snapd.detach 0 0 /snap/microk8s/x1/client.config /snap/microk8s/x1/client.config none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers 0 0 /snap/microk8s/x1/command-config.wrapper /snap/microk8s/x1/command-config.wrapper none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers 0 0 /snap/microk8s/x1/command-daemon-apiserver.wrapper /snap/microk8s/x1/command-daemon-apiserver.wrapper none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers 0 0 /snap/microk8s/x1/command-daemon-controller-manager.wrapper /snap/microk8s/x1/command-daemon-controller-manager.wrapper none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers 0 0 /snap/microk8s/x1/command-daemon-docker.wrapper /snap/microk8s/x1/command-daemon-docker.wrapper none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers 0 0 /snap/microk8s/x1/command-daemon-etcd.wrapper /snap/microk8s/x1/command-daemon-etcd.wrapper none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers 0 0 /snap/microk8s/x1/command-daemon-kubelet.wrapper /snap/microk8s/x1/command-daemon-kubelet.wrapper none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers 0 0 /snap/microk8s/x1/command-daemon-proxy.wrapper /snap/microk8s/x1/command-daemon-proxy.wrapper none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers 0 0 /snap/microk8s/x1/command-daemon-scheduler.wrapper /snap/microk8s/x1/command-daemon-scheduler.wrapper none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers 0 0 /snap/microk8s/x1/command-disable.wrapper /snap/microk8s/x1/command-disable.wrapper none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers 0 0 /snap/microk8s/x1/command-docker.wrapper /snap/microk8s/x1/command-docker.wrapper none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers 0 0 /snap/microk8s/x1/command-enable.wrapper /snap/microk8s/x1/command-enable.wrapper none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers 0 0 /snap/microk8s/x1/command-inspect.wrapper /snap/microk8s/x1/command-inspect.wrapper none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers 0 0 /snap/microk8s/x1/command-istioctl.wrapper /snap/microk8s/x1/command-istioctl.wrapper none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers 0 0 /snap/microk8s/x1/command-kubectl.wrapper /snap/microk8s/x1/command-kubectl.wrapper none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers 0 0 /snap/microk8s/x1/command-reset.wrapper /snap/microk8s/x1/command-reset.wrapper none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers 0 0 /snap/microk8s/x1/configs /snap/microk8s/x1/configs none rbind,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers,x-snapd.detach 0 0 /snap/microk8s/x1/default-args /snap/microk8s/x1/default-args none rbind,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers,x-snapd.detach 0 0 /snap/microk8s/x1/docker-profile /snap/microk8s/x1/docker-profile none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers 0 0 /snap/microk8s/x1/docs /snap/microk8s/x1/docs none rbind,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers,x-snapd.detach 0 0 /snap/microk8s/x1/etc /snap/microk8s/x1/etc none rbind,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers,x-snapd.detach 0 0 /snap/microk8s/x1/etcd /snap/microk8s/x1/etcd none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers 0 0 /snap/microk8s/x1/etcdctl /snap/microk8s/x1/etcdctl none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers 0 0 /snap/microk8s/x1/include /snap/microk8s/x1/include none rbind,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers,x-snapd.detach 0 0 /snap/microk8s/x1/inspect.sh /snap/microk8s/x1/inspect.sh none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers 0 0 /snap/microk8s/x1/istioctl /snap/microk8s/x1/istioctl none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers 0 0 /snap/microk8s/x1/known_token.csv /snap/microk8s/x1/known_token.csv none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers 0 0 /snap/microk8s/x1/kube-apiserver /snap/microk8s/x1/kube-apiserver none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers 0 0 /snap/microk8s/x1/kube-controller-manager /snap/microk8s/x1/kube-controller-manager none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers 0 0 /snap/microk8s/x1/kube-proxy /snap/microk8s/x1/kube-proxy none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers 0 0 /snap/microk8s/x1/kube-scheduler /snap/microk8s/x1/kube-scheduler none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers 0 0 /snap/microk8s/x1/kubectl /snap/microk8s/x1/kubectl none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers 0 0 /snap/microk8s/x1/kubelet /snap/microk8s/x1/kubelet none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers 0 0 /snap/microk8s/x1/kubeproxy.config /snap/microk8s/x1/kubeproxy.config none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers 0 0 /snap/microk8s/x1/lib /snap/microk8s/x1/lib none rbind,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers,x-snapd.detach 0 0 /snap/microk8s/x1/meta /snap/microk8s/x1/meta none rbind,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers,x-snapd.detach 0 0 /snap/microk8s/x1/microk8s-config.wrapper /snap/microk8s/x1/microk8s-config.wrapper none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers 0 0 /snap/microk8s/x1/microk8s-disable.wrapper /snap/microk8s/x1/microk8s-disable.wrapper none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers 0 0 /snap/microk8s/x1/microk8s-docker.wrapper /snap/microk8s/x1/microk8s-docker.wrapper none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers 0 0 /snap/microk8s/x1/microk8s-enable.wrapper /snap/microk8s/x1/microk8s-enable.wrapper none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers 0 0 /snap/microk8s/x1/microk8s-istioctl.wrapper /snap/microk8s/x1/microk8s-istioctl.wrapper none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers 0 0 /snap/microk8s/x1/microk8s-reset.wrapper /snap/microk8s/x1/microk8s-reset.wrapper none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers 0 0 /snap/microk8s/x1/microk8s-resources /snap/microk8s/x1/microk8s-resources none rbind,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers,x-snapd.detach 0 0 /snap/microk8s/x1/opt /snap/microk8s/x1/opt none rbind,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers,x-snapd.detach 0 0 /snap/microk8s/x1/run-docker-with-args /snap/microk8s/x1/run-docker-with-args none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers 0 0 /snap/microk8s/x1/run-etcd-with-args /snap/microk8s/x1/run-etcd-with-args none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers 0 0 /snap/microk8s/x1/run-with-config-args /snap/microk8s/x1/run-with-config-args none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers 0 0 /snap/microk8s/x1/sbin /snap/microk8s/x1/sbin none rbind,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers,x-snapd.detach 0 0 /snap/microk8s/x1/scripts /snap/microk8s/x1/scripts none rbind,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers,x-snapd.detach 0 0 /snap/microk8s/x1/share /snap/microk8s/x1/share none rbind,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers,x-snapd.detach 0 0 /snap/microk8s/x1/snap /snap/microk8s/x1/snap none rbind,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers,x-snapd.detach 0 0 /snap/microk8s/x1/tests /snap/microk8s/x1/tests none rbind,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers,x-snapd.detach 0 0 /snap/microk8s/x1/usr /snap/microk8s/x1/usr none rbind,x-snapd.synthetic,x-snapd.needed-by=/snap/microk8s/x1/var/log/containers,x-snapd.detach 0 0 /snap/microk8s/x1/var/log/containers /var/log/containers none rbind,rw,x-snapd.origin=layout 0 0 /snap/microk8s/x1/var/log/pods /var/log/pods none rbind,rw,x-snapd.origin=layout 0 0 Having read the mount profile I would suggest to optimise the startup by ensuring there are empty directories in $SNAP/var/log/containers and $SNAP/var/log/pods - then the mount table would be much smaller. With that change I managed to reduce the effective mount profile to: zyga@fyke:/run/snapd/ns$ cat snap.microk8s.fstab tmpfs /var/lib tmpfs x-snapd.synthetic,x-snapd.needed-by=/var/lib/cni,mode=0755,uid=0,gid=0 0 0 /var/lib/cloud /var/lib/cloud none rbind,x-snapd.synthetic,x-snapd.needed-by=/var/lib/cni,x-snapd.detach 0 0 /var/lib/console-conf /var/lib/console-conf none rbind,x-snapd.synthetic,x-snapd.needed-by=/var/lib/cni,x-snapd.detach 0 0 /var/lib/dbus /var/lib/dbus none rbind,x-snapd.synthetic,x-snapd.needed-by=/var/lib/cni,x-snapd.detach 0 0 /var/lib/extrausers /var/lib/extrausers none rbind,x-snapd.synthetic,x-snapd.needed-by=/var/lib/cni,x-snapd.detach 0 0 /var/lib/misc /var/lib/misc none rbind,x-snapd.synthetic,x-snapd.needed-by=/var/lib/cni,x-snapd.detach 0 0 /var/lib/pam /var/lib/pam none rbind,x-snapd.synthetic,x-snapd.needed-by=/var/lib/cni,x-snapd.detach 0 0 /var/lib/polkit-1 /var/lib/polkit-1 none rbind,x-snapd.synthetic,x-snapd.needed-by=/var/lib/cni,x-snapd.detach 0 0 /var/lib/private /var/lib/private none rbind,x-snapd.synthetic,x-snapd.needed-by=/var/lib/cni,x-snapd.detach 0 0 /var/lib/python /var/lib/python none rbind,x-snapd.synthetic,x-snapd.needed-by=/var/lib/cni,x-snapd.detach 0 0 /var/lib/snapd /var/lib/snapd none rbind,x-snapd.synthetic,x-snapd.needed-by=/var/lib/cni,x-snapd.detach 0 0 /var/lib/sudo /var/lib/sudo none rbind,x-snapd.synthetic,x-snapd.needed-by=/var/lib/cni,x-snapd.detach 0 0 /var/lib/systemd /var/lib/systemd none rbind,x-snapd.synthetic,x-snapd.needed-by=/var/lib/cni,x-snapd.detach 0 0 /var/lib/ucf /var/lib/ucf none rbind,x-snapd.synthetic,x-snapd.needed-by=/var/lib/cni,x-snapd.detach 0 0 /var/lib/vim /var/lib/vim none rbind,x-snapd.synthetic,x-snapd.needed-by=/var/lib/cni,x-snapd.detach 0 0 none /var/lib/cni none x-snapd.kind=symlink,x-snapd.symlink=/var/snap/microk8s/common/var/lib/cni,x-snapd.origin=layout 0 0 tmpfs /var/log tmpfs x-snapd.synthetic,x-snapd.needed-by=/var/log/containers,mode=0775,uid=0,gid=106 0 0 /var/log/Xorg.0.log /var/log/Xorg.0.log none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/alternatives.log /var/log/alternatives.log none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/alternatives.log.1 /var/log/alternatives.log.1 none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/alternatives.log.2.gz /var/log/alternatives.log.2.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/alternatives.log.3.gz /var/log/alternatives.log.3.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/alternatives.log.4.gz /var/log/alternatives.log.4.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/alternatives.log.5.gz /var/log/alternatives.log.5.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/alternatives.log.6.gz /var/log/alternatives.log.6.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/apparmor.init.log /var/log/apparmor.init.log none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/apparmor_parser.log /var/log/apparmor_parser.log none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/apport.log /var/log/apport.log none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/apport.log.1 /var/log/apport.log.1 none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/apport.log.2.gz /var/log/apport.log.2.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/apport.log.3.gz /var/log/apport.log.3.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/apport.log.4.gz /var/log/apport.log.4.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/apport.log.5.gz /var/log/apport.log.5.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/apport.log.6.gz /var/log/apport.log.6.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/apport.log.7.gz /var/log/apport.log.7.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/apt /var/log/apt none rbind,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers,x-snapd.detach 0 0 /var/log/auth.log /var/log/auth.log none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/auth.log.1 /var/log/auth.log.1 none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/auth.log.2.gz /var/log/auth.log.2.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/auth.log.3.gz /var/log/auth.log.3.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/auth.log.4.gz /var/log/auth.log.4.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/bootstrap.log /var/log/bootstrap.log none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/btmp /var/log/btmp none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/btmp.1 /var/log/btmp.1 none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/cups /var/log/cups none rbind,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers,x-snapd.detach 0 0 /var/log/dist-upgrade /var/log/dist-upgrade none rbind,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers,x-snapd.detach 0 0 /var/log/dpkg.log /var/log/dpkg.log none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/dpkg.log.1 /var/log/dpkg.log.1 none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/dpkg.log.2.gz /var/log/dpkg.log.2.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/dpkg.log.3.gz /var/log/dpkg.log.3.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/dpkg.log.4.gz /var/log/dpkg.log.4.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/dpkg.log.5.gz /var/log/dpkg.log.5.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/dpkg.log.6.gz /var/log/dpkg.log.6.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/faillog /var/log/faillog none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/fontconfig.log /var/log/fontconfig.log none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/gdm3 /var/log/gdm3 none rbind,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers,x-snapd.detach 0 0 /var/log/gpu-manager.log /var/log/gpu-manager.log none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/hp /var/log/hp none rbind,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers,x-snapd.detach 0 0 /var/log/installer /var/log/installer none rbind,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers,x-snapd.detach 0 0 /var/log/journal /var/log/journal none rbind,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers,x-snapd.detach 0 0 /var/log/kern.log /var/log/kern.log none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/kern.log.1 /var/log/kern.log.1 none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/kern.log.2.gz /var/log/kern.log.2.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/kern.log.3.gz /var/log/kern.log.3.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/kern.log.4.gz /var/log/kern.log.4.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/lastlog /var/log/lastlog none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/openvpn /var/log/openvpn none rbind,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers,x-snapd.detach 0 0 /var/log/private /var/log/private none rbind,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers,x-snapd.detach 0 0 /var/log/speech-dispatcher /var/log/speech-dispatcher none rbind,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers,x-snapd.detach 0 0 /var/log/syslog /var/log/syslog none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/syslog.1 /var/log/syslog.1 none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/syslog.2.gz /var/log/syslog.2.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/syslog.3.gz /var/log/syslog.3.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/syslog.4.gz /var/log/syslog.4.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/syslog.5.gz /var/log/syslog.5.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/syslog.6.gz /var/log/syslog.6.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/syslog.7.gz /var/log/syslog.7.gz none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/tallylog /var/log/tallylog none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/unattended-upgrades /var/log/unattended-upgrades none rbind,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers,x-snapd.detach 0 0 /var/log/vmware /var/log/vmware none rbind,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers,x-snapd.detach 0 0 /var/log/vmware-network.1.log /var/log/vmware-network.1.log none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/vmware-network.2.log /var/log/vmware-network.2.log none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/vmware-network.3.log /var/log/vmware-network.3.log none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/vmware-network.4.log /var/log/vmware-network.4.log none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/vmware-network.5.log /var/log/vmware-network.5.log none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/vmware-network.6.log /var/log/vmware-network.6.log none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/vmware-network.7.log /var/log/vmware-network.7.log none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/vmware-network.8.log /var/log/vmware-network.8.log none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/vmware-network.9.log /var/log/vmware-network.9.log none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/vmware-network.log /var/log/vmware-network.log none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/vmware-vmsvc.1.log /var/log/vmware-vmsvc.1.log none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/vmware-vmsvc.2.log /var/log/vmware-vmsvc.2.log none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/vmware-vmsvc.3.log /var/log/vmware-vmsvc.3.log none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/vmware-vmsvc.log /var/log/vmware-vmsvc.log none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/wtmp /var/log/wtmp none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /var/log/wtmp.1 /var/log/wtmp.1 none bind,x-snapd.kind=file,x-snapd.synthetic,x-snapd.needed-by=/var/log/containers 0 0 /snap/microk8s/x1/var/log/containers /var/log/containers none rbind,rw,x-snapd.origin=layout 0 0 /snap/microk8s/x1/var/log/pods /var/log/pods none rbind,rw,x-snapd.origin=layout 0 0 As such I believe this issue is fixed with snapd 2.36.1.