====== Virtualization ======
===== LXC =====
==== NFS mount ====
* Error messages came up when mounting NFS directory in a system running on LXC container.mount: [ip address]:/shared/storage/ is write-protected, mounting read-only
mount: cannot mount [ip address]:/shared/storage/ read-only
When I saw /var/log/messages:Jun 4 00:33:00 virt kernel: [407261.190708] audit: type=1400 audit(1465000380.283:50): apparmor="DENIED" operation="mount" info="failed type match" error=-13 profile="lxc-container-default" name="/local/mount/point/" pid=23343 comm="mount" fstype="nfs" srcname="[ip address]:/shared/storage/" flags="ro"
* Configure the host of the LXC container to add an option in AppArmor configuration related to LXC.# nano /etc/apparmor/lxc/lxc-default
...
mount fstype=nfs,
}
* Restart apparmor service.# systemctl restart apparmor.service