Merge pull request #1456 from netservers/master

Apparmor on Ubuntu Xenial will not permit containers to mount devices.
2017-04-19 14:25:41 -05:00 · 2017-04-19 14:25:41 -05:00 · c9c65a7072
parent e8e4245e43 f1388dc2c2
commit c9c65a7072
1 changed files with 3 additions and 0 deletions
--- a/roles/ceph-osd/templates/ceph-osd-run.sh.j2
+++ b/roles/ceph-osd/templates/ceph-osd-run.sh.j2
@ -24,6 +24,9 @@ fi
  --rm \
  --net=host \
  --cap-add SYS_ADMIN \
+  {% if ansible_distribution == 'Ubuntu' -%}
+  --security-opt apparmor:unconfined \
+  {% endif -%}
  --pid=host \
  {% if not osd_containerized_deployment_with_kv -%}
  -v /var/lib/ceph:/var/lib/ceph \