====== Virtualization ====== ===== LXC ===== ==== NFS mount ==== * Error messages came up when mounting NFS directory in a system running on LXC container.mount: [ip address]:/shared/storage/ is write-protected, mounting read-only mount: cannot mount [ip address]:/shared/storage/ read-onlyWhen I saw /var/log/messages:Jun 4 00:33:00 virt kernel: [407261.190708] audit: type=1400 audit(1465000380.283:50): apparmor="DENIED" operation="mount" info="failed type match" error=-13 profile="lxc-container-default" name="/local/mount/point/" pid=23343 comm="mount" fstype="nfs" srcname="[ip address]:/shared/storage/" flags="ro" * Configure the host of the LXC container to add an option in AppArmor configuration related to LXC.# nano /etc/apparmor/lxc/lxc-default ... mount fstype=nfs, } * Restart apparmor service.# systemctl restart apparmor.service