diff --git a/lxc/templates/default.conf b/lxc/templates/default.conf index a656fd3c..c4b38d42 100644 --- a/lxc/templates/default.conf +++ b/lxc/templates/default.conf @@ -32,3 +32,8 @@ lxc.arch = x86_64 # Start containers on boot by default lxc.start.auto = 1 + +{% if ansible_distribution_major_version is version('9', '>') %} +# Set LXC container unconfined in AppArmor +lxc.apparmor.profile = unconfined +{% endif %}