Apparmor on Ubuntu Xenial will not permit containers to mount devices, even with CAP SYS_ADMIN.

2017-04-19 10:12:04 +01:00 · 2017-04-19 10:12:04 +01:00 · f1388dc2c2
parent e8e4245e43
commit f1388dc2c2
1 changed files with 3 additions and 0 deletions
--- a/roles/ceph-osd/templates/ceph-osd-run.sh.j2
+++ b/roles/ceph-osd/templates/ceph-osd-run.sh.j2
@ -24,6 +24,9 @@ fi
  --rm \
  --net=host \
  --cap-add SYS_ADMIN \
+  {% if ansible_distribution == 'Ubuntu' -%}
+  --security-opt apparmor:unconfined \
+  {% endif -%}
  --pid=host \
  {% if not osd_containerized_deployment_with_kv -%}
  -v /var/lib/ceph:/var/lib/ceph \