Template changes from move to Ubuntu 12

templates/config.tmpl

@@ -6,25 +6,38 @@ lxc.network.name = eth0
 lxc.mount = <%= path %>/fstab
 lxc.rootfs = <%= path %>/rootfs
 
+lxc.devttydir = lxc
 lxc.tty = 4
 lxc.pts = 1024
-lxc.cgroup.devices.deny = a
+lxc.cap.drop = sys_module mac_admin
+lxc.pivotdir = lxc_putold
 
+lxc.cgroup.devices.deny = a
+# Allow any mknod (but not using the node)
+lxc.cgroup.devices.allow = c *:* m
+lxc.cgroup.devices.allow = b *:* m
 # /dev/null and zero
 lxc.cgroup.devices.allow = c 1:3 rwm
 lxc.cgroup.devices.allow = c 1:5 rwm
 # consoles
 lxc.cgroup.devices.allow = c 5:1 rwm
 lxc.cgroup.devices.allow = c 5:0 rwm
-lxc.cgroup.devices.allow = c 4:0 rwm
-lxc.cgroup.devices.allow = c 4:1 rwm
-lxc.cgroup.devices.allow = c 4:2 rwm
-lxc.cgroup.devices.allow = c 4:3 rwm
+#lxc.cgroup.devices.allow = c 4:0 rwm
+#lxc.cgroup.devices.allow = c 4:1 rwm
 # /dev/{,u}random
 lxc.cgroup.devices.allow = c 1:9 rwm
 lxc.cgroup.devices.allow = c 1:8 rwm
 lxc.cgroup.devices.allow = c 136:* rwm
 lxc.cgroup.devices.allow = c 5:2 rwm
 # rtc
 lxc.cgroup.devices.allow = c 254:0 rwm
-
+#fuse
+lxc.cgroup.devices.allow = c 10:229 rwm
+#tun
+lxc.cgroup.devices.allow = c 10:200 rwm
+#full
+lxc.cgroup.devices.allow = c 1:7 rwm
+#hpet
+lxc.cgroup.devices.allow = c 10:228 rwm
+#kvm
+lxc.cgroup.devices.allow = c 10:232 rwm

templates/fstab.tmpl

@@ -1,8 +1,9 @@
 none <%= path %>/rootfs/dev/pts devpts defaults 0 0
 none <%= path %>/rootfs/proc proc defaults 0 0
 none <%= path %>/rootfs/sys sysfs defaults 0 0
-none <%= path %>/rootfs/var/lock tmpfs defaults 0 0
-none <%= path %>/rootfs/var/run tmpfs defaults 0 0
+# none <%= path %>/rootfs/var/lock tmpfs defaults 0 0
+# none <%= path %>/rootfs/var/run tmpfs defaults 0 0
+/lib/modules  <%= path %>/rootfs/lib/modules  none bind,ro 0 0
 <% mountings.each do |e| %>
 <%= e.path %> <%= Pathname.new(path).join('rootfs' + e.container_path) %> none bind 0 0
 <% end %>

templates/sources.list.tmpl

@@ -1,63 +1,3 @@
-# 
-# deb cdrom:[Ubuntu-Server 10.10 _Maverick Meerkat_ - Release i386 (20101007)]/ maverick main restricted
-
-#deb cdrom:[Ubuntu-Server 10.10 _Maverick Meerkat_ - Release i386 (20101007)]/ maverick main restricted
-# See http://help.ubuntu.com/community/UpgradeNotes for how to upgrade to
-# newer versions of the distribution.
-
-deb http://us.archive.ubuntu.com/ubuntu/ maverick main restricted
-deb-src http://us.archive.ubuntu.com/ubuntu/ maverick main restricted
-
-## Major bug fix updates produced after the final release of the
-## distribution.
-deb http://us.archive.ubuntu.com/ubuntu/ maverick-updates main restricted
-deb-src http://us.archive.ubuntu.com/ubuntu/ maverick-updates main restricted
-
-## N.B. software from this repository is ENTIRELY UNSUPPORTED by the Ubuntu
-## team. Also, please note that software in universe WILL NOT receive any
-## review or updates from the Ubuntu security team.
-deb http://us.archive.ubuntu.com/ubuntu/ maverick universe
-deb-src http://us.archive.ubuntu.com/ubuntu/ maverick universe
-deb http://us.archive.ubuntu.com/ubuntu/ maverick-updates universe
-deb-src http://us.archive.ubuntu.com/ubuntu/ maverick-updates universe
-
-## N.B. software from this repository is ENTIRELY UNSUPPORTED by the Ubuntu 
-## team, and may not be under a free licence. Please satisfy yourself as to 
-## your rights to use the software. Also, please note that software in 
-## multiverse WILL NOT receive any review or updates from the Ubuntu
-## security team.
-deb http://us.archive.ubuntu.com/ubuntu/ maverick multiverse
-deb-src http://us.archive.ubuntu.com/ubuntu/ maverick multiverse
-deb http://us.archive.ubuntu.com/ubuntu/ maverick-updates multiverse
-deb-src http://us.archive.ubuntu.com/ubuntu/ maverick-updates multiverse
-
-## Uncomment the following two lines to add software from the 'backports'
-## repository.
-## N.B. software from this repository may not have been tested as
-## extensively as that contained in the main release, although it includes
-## newer versions of some applications which may provide useful features.
-## Also, please note that software in backports WILL NOT receive any review
-## or updates from the Ubuntu security team.
-# deb http://us.archive.ubuntu.com/ubuntu/ maverick-backports main restricted universe multiverse
-# deb-src http://us.archive.ubuntu.com/ubuntu/ maverick-backports main restricted universe multiverse
-
-## Uncomment the following two lines to add software from Canonical's
-## 'partner' repository.
-## This software is not part of Ubuntu, but is offered by Canonical and the
-## respective vendors as a service to Ubuntu users.
-# deb http://archive.canonical.com/ubuntu maverick partner
-# deb-src http://archive.canonical.com/ubuntu maverick partner
-
-## Uncomment the following two lines to add software from Ubuntu's
-## 'extras' repository.
-## This software is not part of Ubuntu, but is offered by third-party
-## developers who want to ship their latest software.
-# deb http://extras.ubuntu.com/ubuntu maverick main
-# deb-src http://extras.ubuntu.com/ubuntu maverick main
-
-deb http://security.ubuntu.com/ubuntu maverick-security main restricted
-deb-src http://security.ubuntu.com/ubuntu maverick-security main restricted
-deb http://security.ubuntu.com/ubuntu maverick-security universe
-deb-src http://security.ubuntu.com/ubuntu maverick-security universe
-deb http://security.ubuntu.com/ubuntu maverick-security multiverse
-deb-src http://security.ubuntu.com/ubuntu maverick-security multiverse
+deb http://archive.ubuntu.com/ubuntu precise main restricted universe multiverse
+deb http://archive.ubuntu.com/ubuntu precise-updates main restricted universe multiverse
+deb http://security.ubuntu.com/ubuntu precise-security main restricted universe multiverse