lxc patch 10
This commit is contained in:
@@ -11,7 +11,7 @@ fi
|
|||||||
lxc-start -n "$CONTAINER" 2>/dev/null || true
|
lxc-start -n "$CONTAINER" 2>/dev/null || true
|
||||||
|
|
||||||
if [[ -n "$SSH_ORIGINAL_COMMAND" ]]; then
|
if [[ -n "$SSH_ORIGINAL_COMMAND" ]]; then
|
||||||
exec lxc-attach -n "$CONTAINER" -- /bin/bash -c "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin; $SSH_ORIGINAL_COMMAND"
|
exec sudo lxc-attach --clear-env -n "$CONTAINER" -- /bin/bash -c "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin; $SSH_ORIGINAL_COMMAND"
|
||||||
else
|
else
|
||||||
exec lxc-attach -n "$CONTAINER" -- /bin/login -f root
|
exec sudo lxc-attach --clear-env -n "$CONTAINER" -- /bin/login -f root
|
||||||
fi
|
fi
|
||||||
|
|||||||
@@ -5,6 +5,14 @@
|
|||||||
lxcfs.enable = true;
|
lxcfs.enable = true;
|
||||||
};
|
};
|
||||||
|
|
||||||
|
security.sudo.extraRules = [{
|
||||||
|
groups = [ "labmates" ];
|
||||||
|
commands = [
|
||||||
|
{ command = "/run/current-system/sw/bin/lxc-attach"; options = [ "NOPASSWD" ]; }
|
||||||
|
{ command = "/run/current-system/sw/bin/lxc-start"; options = [ "NOPASSWD" ]; }
|
||||||
|
];
|
||||||
|
}];
|
||||||
|
|
||||||
networking.networkmanager.unmanaged = [ "br0" ];
|
networking.networkmanager.unmanaged = [ "br0" ];
|
||||||
|
|
||||||
virtualisation.lxc.defaultConfig = ''
|
virtualisation.lxc.defaultConfig = ''
|
||||||
|
|||||||
Reference in New Issue
Block a user