diff --git a/inst-prxct b/inst-prxct new file mode 100644 index 0000000..b4d757b --- /dev/null +++ b/inst-prxct @@ -0,0 +1,24 @@ +#For proxmox (lxc) containers a custom apparmor rule must be created an used + +# turn off the ct that you want to setup + +#contents of custom rule :/etc/apparmor.d/lxc/lxc-custom-dovecot + +profile lxc-container-custom-dovecot flags=(attach_disconnected,mediate_deleted) { + #include + #include + deny mount fstype=devpts, + mount fstype=cgroup -> /sys/fs/cgroup/**, + mount fstype=cgroup2 -> /sys/fs/cgroup/**, + mount options=(rw, bind, ro), + mount options=(rw, rbind), + mount options=(rw, rshared), + mount options=(rw, bind), + mount options=(ro, remount, noatime, bind), + mount options=(ro, nosuid, noexec, remount, bind, strictatime), +} +#end of contents +systemctl reload apparmor +echo "lxc.apparmor.profile: lxc-container-custom-dovecot" >> /etc/pve/lxc/.conf +#start the container +# if dovecot does not work after continuing ins-instructions.txt please check dsmesg for apparmor="DENIED" \ No newline at end of file