lxc.network.type = veth
lxc.network.hwaddr = 00:16:3e:77:13:86
lxc.network.link = lxcbr0
lxc.network.flags = up

lxc.rootfs = /var/lib/lxc/saucy-i386-20130701-1012/rootfs
lxc.mount = /var/lib/lxc/saucy-i386-20130701-1012/fstab
lxc.pivotdir = lxc_putold

lxc.hook.pre-start = /var/lib/lxc/saucy-i386-20130701-1012/tools/scripts/pre-start.sh
lxc.hook.pre-mount = /var/lib/lxc/saucy-i386-20130701-1012/tools/scripts/pre-mount.sh
lxc.hook.mount = /usr/share/lxc/hooks/mountcgroups
lxc.hook.post-stop = /var/lib/lxc/saucy-i386-20130701-1012/tools/scripts/post-stop.sh

lxc.devttydir = lxc
lxc.tty = 4
lxc.pts = 1024

lxc.utsname = saucy-i386-20130701-1012
lxc.arch = i386
lxc.cap.drop = sys_module mac_admin mac_override

# When using LXC with apparmor, uncomment the next line to run unconfined:
#lxc.aa_profile = unconfined

lxc.cgroup.devices.deny = a
# Allow any mknod (but not using the node)
lxc.cgroup.devices.allow = c *:* m
lxc.cgroup.devices.allow = b *:* m
# /dev/null and zero
lxc.cgroup.devices.allow = c 1:3 rwm
lxc.cgroup.devices.allow = c 1:5 rwm
# consoles
lxc.cgroup.devices.allow = c 5:1 rwm
lxc.cgroup.devices.allow = c 5:0 rwm
#lxc.cgroup.devices.allow = c 4:0 rwm
#lxc.cgroup.devices.allow = c 4:1 rwm
# /dev/{,u}random
lxc.cgroup.devices.allow = c 1:9 rwm
lxc.cgroup.devices.allow = c 1:8 rwm
lxc.cgroup.devices.allow = c 136:* rwm
lxc.cgroup.devices.allow = c 5:2 rwm
# rtc
lxc.cgroup.devices.allow = c 254:0 rwm
#fuse
lxc.cgroup.devices.allow = c 10:229 rwm
#tun
lxc.cgroup.devices.allow = c 10:200 rwm
#full
lxc.cgroup.devices.allow = c 1:7 rwm
#hpet
lxc.cgroup.devices.allow = c 10:228 rwm
#kvm
lxc.cgroup.devices.allow = c 10:232 rwm

# dri
lxc.cgroup.devices.allow = c 226:* rwm
# snd
lxc.cgroup.devices.allow = c 116:* rwm
# tty
lxc.cgroup.devices.allow = c 4:7 rwm
# input
lxc.cgroup.devices.allow = c 13:* rwm
# uinput
lxc.cgroup.devices.allow = c 10:223 rwm

lxc.loglevel = 1

# Restrict memory usage of the container
lxc.cgroup.memory.limit_in_bytes = 2G
lxc.cgroup.memory.memsw.limit_in_bytes = 2560M