lxc.rootfs = /home/root/12.09_rootfs

lxc.devttydir = lxc
lxc.tty = 4
lxc.pts = 1024

lxc.mount.auto  = proc:rw sys:ro
lxc.mount.entry = tmpfs tmp tmpfs size=8192k,mode=1777   0 0

The following capabilities are configured to be dropped
## Capabilities
lxc.cap.drop = sys_module
lxc.cap.drop = sys_boot
lxc.cap.drop = sys_admin
lxc.cap.drop = sys_nice
#lxc.cap.drop = audit_con  
lxc.cap.drop = audit_write
lxc.cap.drop = sys_rawio
lxc.cap.drop = mac_admin
lxc.cap.drop = mac_override
lxc.cap.drop = mknod
# this allow OpenWRT/netifd to configure the network setings inside the
# conatiner
#lxc.cap.drop = net_admin
#lxc.cap.drop = net_raw

# to run and shutdown procd
lxc.haltsignal = SIGUSR1
lxc.stopsignal = SIGINT
lxc.kmsg = 1

lxc.network.type = veth
lxc.network.flags = up
# Bridge net on the host
lxc.network.link = br0
# link name on the guest
lxc.network.name = veth100
lxc.network.mtu = 1500

# Default cgroups - all denied except those whitelisted
lxc.cgroup.devices.deny = a
## /dev/null and zero
lxc.cgroup.devices.allow = c 1:3 rwm
lxc.cgroup.devices.allow = c 1:5 rwm
## consoles
lxc.cgroup.devices.allow = c 5:0 rwm
lxc.cgroup.devices.allow = c 5:1 rwm
## /dev/{,u}random
lxc.cgroup.devices.allow = c 1:8 rwm
lxc.cgroup.devices.allow = c 1:9 rwm
## /dev/pts/*
lxc.cgroup.devices.allow = c 5:2 rwm
lxc.cgroup.devices.allow = c 136:* rwm
## rtc
lxc.cgroup.devices.allow = c 254:0 rm
## fuse
lxc.cgroup.devices.allow = c 10:229 rwm
## tun
lxc.cgroup.devices.allow = c 10:200 rwm
## dev/tty0
lxc.cgroup.devices.allow = c 4:0 rwm
## dev/tty1
lxc.cgroup.devices.allow = c 4:1 rwm

