opensource/podman
1
0
Fork 0
mirror of https://github.com/containers/podman.git synced 2025-11-28 17:18:58 +08:00
Code Issues Packages Projects Releases Wiki Activity

Add AppArmor key to quadlet .container files

Browse Source 
Fixes: #27095
Signed-off-by: givensuman <givensuman@duck.com>
This commit is contained in:
givensuman
2025-10-30 21:02:20 -04:00
parent 23e6a89d36
commit e7b50c33df
4 changed files with 19 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
docs/source/markdown/podman-systemd.unit.5.md
View File

@@ -305,6 +305,7 @@ Valid options for `[Container]` are listed below:
| AddDevice=/dev/foo | --device /dev/foo |
| AddHost=example\.com:192.168.10.11 | --add-host example.com:192.168.10.11 |
| Annotation="XYZ" | --annotation "XYZ" |
| AppArmor="alternate-profile" | --security-opt apparmor=alternate-profile |
| AutoUpdate=registry | --label "io.containers.autoupdate=registry" |
| CgroupsMode=no-conmon | --cgroups=no-conmon |
| ContainerName=name | --name name |
@@ -428,6 +429,10 @@ similar to `Environment`.
This key can be listed multiple times.
### `AppArmor=`
Sets the apparmor confinement profile for the container. A value of `unconfined` turns off apparmor confinement.
### `AutoUpdate=`
Indicates whether the container will be auto-updated ([podman-auto-update(1)](podman-auto-update.1.md)). The following values are supported: