From d7454bf1a04fcb54152bf047dc9dab45611b7e5a Mon Sep 17 00:00:00 2001 From: cmspam Date: Mon, 29 Apr 2024 00:03:50 +0900 Subject: [PATCH] Added AppArmor section resolves #3 --- README.md | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/README.md b/README.md index 5d2c3e5..0120952 100644 --- a/README.md +++ b/README.md @@ -76,6 +76,21 @@ We can fix this by adding the following kernel boot parameter, then reboot: If someone comes up with a way to continue to use unified hierarchy with working cpuset functionality, please let me know. +# AppArmor + +If you have AppArmor enabled on your setup, you may need to add permissions to dnsmasq so that it can work with Incus without permission errors. Here is an example of how to do so with OpenSuse Tumbleweed, but it should be similar for other distributions. + +Please edit the file: +```/etc/apparmor.d/usr.sbin.dnsmasq``` + +You will find a line like below, for Tumbleweed it was line 56 or so: + ```/var/log/dnsmasq*.log w,``` + +Under that line, please add + ```/var/lib/incus/** rw,``` + + + # OpenVSwitch If you use OpenVSwitch, add this line to your docker/podman command: