ic-builder 2d2aa3ef38 Toolbox: PVE9 apparmor via lxc.conf, runtime tracefs/debugfs mounts (#826) ...

- PVE 9 dropped 'pct set --raw.lxc': lxc.apparmor.profile goes straight
  into /etc/pve/lxc/<vmid>.conf and PVE::LXC honors it over the generated
  profile (verified: /proc/self/attr/current = unconfined)
- pct skips virtual-fs bind sources (mp /proc,/sys/kernel/* landed empty):
  keep cgroupfs + /var/log binds, wrapper mounts tracefs/debugfs at start
- bpftrace PROVEN against host kernel (2689 tracepoints, live syscall
  counts showing host pvestatd/vgs); bcc-tools -> bpfcc-tools (bookworm)
- smartctl on SAT devices needs -d sat (recipes updated)

Redmine: https://projects.knownelement.com/issues/826

2026-09-06 19:07:22 -05:00

..

Dockerfile

Fleet monitoring: sysstat 28d + perfsnap/PSI/iotop timers + on-demand toolbox container (#826)

2026-09-06 18:50:07 -05:00

knelperf-toolbox

Toolbox: PVE9 apparmor via lxc.conf, runtime tracefs/debugfs mounts (#826)

2026-09-06 19:07:22 -05:00

lxc-toolbox.sh

Toolbox: PVE9 apparmor via lxc.conf, runtime tracefs/debugfs mounts (#826)

2026-09-06 19:07:22 -05:00

toolbox-pkgs.txt

Toolbox: PVE9 apparmor via lxc.conf, runtime tracefs/debugfs mounts (#826)

2026-09-06 19:07:22 -05:00