do not set the root password in the debian template closes #302 Signed-off-by: Evgeni Golov <evgeni@debian.org>

squeeze is not a supported release anymore, drop the key Signed-off-by: Evgeni Golov <evgeni@debian.org>

templates/lxc-debian.in: handle ppc hostarch -> powerpc Signed-off-by: Santiago Ruano Rincón <santiago@debian.org> Signed-off-by: Evgeni Golov <evgeni@debian.org>

templates/lxc-debian.in: Fix typo in calling dpkg with --print-foreign-architectures option Signed-off-by: Santiago Ruano Rincón <santiago@debian.org> Signed-off-by: Evgeni Golov <evgeni@debian.org>

templates: fix getty service startup Commit bf39edb39ecaea25801d716aebef798885277992 broke the handling of the getty service file with an '@' character in filename. So the startup condition was not fixed. Because the parameter was quoted with the causal commit, the escaping has to be removed. Signed-off-by: Andreas Eberlein foodeas@aeberlein.de

debian: Don't depend on libui-dialog-perl This package doesn't exist in stretch anymore, and it's unclear why we were depending on a library to begin with (as opposed to having it brought by whatever needs it). Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

lxc-create -t debian fails on ppc64el arch Template catches arch from uname -m, but for ppc64el system, arch reports ppc64le which doesn't match image repo. Signed-off-by: Thierry Fauck <tfauck@free.fr> Signed-off-by: Serge Hallyn <serge@hallyn.com>

templates: remove creation of bogus directory An incorrect quoting introduced in bf39edb caused a /{lib,etc} folder to appear in Debian templates The very next line : mkdir -p "${rootfs}/etc/systemd/system/getty.target.wants makes creating ${rootfs}/etc/systemd/system/ unnecessary in the first place Signed-off-by: Maxime Besson <maxime.besson@smile.fr>

templates: rm halt.target -> sigpwr.target symlink Given commit 330ae3d350e060e5702a0e5ef5d0faeeeea8df6e: lxccontainer: detect if we should send SIGRTMIN+3 This is required by systemd to cleanly shutdown. Other init systems should not have SIGRTMIN+3 in the blocked signals set. we should stop symlinking halt.target to sigpwr.target for systemd. Signed-off-by: Christian Brauner <cbrauner@suse.de>

templates: Add mips hostarch detection to debian Signed-off-by: James Cowgill <james410@cowgill.org.uk>

templates: make shellcheck (Ubuntu: 0.3.7-5 amd64) most possible happy Signed-off-by: Andreas Freudenberg <andreas.freudenberg@licomonch.net>

templates: add more quotes to variables (at least $rootfs should now be covered) Signed-off-by: Andreas Freudenberg <andreas.freudenberg@licomonch.net>

templates: avoid noisy perl warnings caused by missing locales Signed-off-by: Andreas Freudenberg <andreas.freudenberg@licomonch.net>

lxc-debian: fix regression when creating wheezy containers The regression was introduced by commit 3c39b0b7a2b445e08d2e2aecb05566075f4f3423 which makes it possible to create working stretch containers by forcinig `init` to be in the included package list. However, `init` didn't exit before jessie, so now for wheezy we explicitly include `sysvinit`; sysvinit on wheezy is essential, so it would already be included anyway. Signed-off-by: Antonio Terceiro <terceiro@debian.org>

lxc-debian: make sure init is installed init 1.34 is not "Essential" anymore, in order to make it not required on minimal chroots, docker containers, etc. Because of that we now need to manually include it on systems that are expected to boot. Signed-off-by: Antonio Terceiro <terceiro@debian.org>

update Debian release names Squeeze is EOL now, Stretch is the upcoming stable Signed-off-by: Evgeni Golov <evgeni@golov.de>

only enable Debian's main repository by default This inverts the logic done in c2a85d0 to default to "main only" and allow enabling contrib and non-free on user request. Closes: #625 Signed-off-by: Evgeni Golov <evgeni@debian.org>

use httpredir.debian.org as the default Debian mirror http.debian.net is an alias anyways and httpredir.debian.org is the official name of the service Signed-off-by: Evgeni Golov <evgeni@debian.org>

Fix #520 - multiple instances of agetty on systemd. Fixes issue with double tty login lxc-console Ref #520, #484 Signed-off-by: Aron Podrigal <aronp@guaranteedplus.com>

debian: Fix container creation on missing cache This is currently breaking our daily image builds which happen in a perfectly clean environment without a Debian keyring and without anything in /var/cache/lxc Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

Fetch Debian archive GPG keyrings when they're not available When running the debian template on a non-debian host, it's usual not to have debian-archive-keyring.gpg. When that happens, we skip the signature checking of the release, which is dangerous because it's made over HTTP. This commit adds automatic fetching of Debian release keys. Strongly related to #409 Signed-off-by: Virgil Dupras <hsoft@hardcoded.net>

lxc-debian: We should only check the kernel architecture. The dpkg architecture isn't relevant to LXC, only the kernel arch is. Signed-off-by: Gergely Szasz <szaszg@hu.inter.net> Acked-by: Stéphane Graber <stgraber@ubuntu.com>

Alternative test for dpkg multiarch support in lxc-debian template Signed-off-by: David Noyes <david.j.noyes@gmail.com>

lxc-debian: allow not including contrib/non-free Signed-off-by: Antonio Terceiro <terceiro@debian.org> Acked-by: Serge E. Hallyn <serge.hallyn@ubuntu.com>

lxc-debian: support stretch (Debian 9) images Signed-off-by: Antonio Terceiro <terceiro@debian.org> Acked-by: Serge E. Hallyn <serge.hallyn@ubuntu.com>

Test dpkg for multiarch support in lxc-debian template Signed-off-by: David Noyes <david.j.noyes@gmail.com>

lxc-debian: skip security updates for unstable/sid There is no such thing as security support for unstable/sid. Signed-off-by: Antonio Terceiro <terceiro@debian.org> Acked-by: Stéphane Graber <stgraber@ubuntu.com>

debian template: reconfigure locales Signed-off-by: feng xiahou <xiahoufeng@yahoo.com>

debootstrap failed when $GREP_OPTIONS is set debootstrap failed when $GREP_OPTIONS is set, so we need to unset it in the template Signed-off-by: <feng xiahou xiahoufeng@yahoo.com>

Added container-cache option to templates This change adds in the container-cache option within the mainline default lxc templates. The pupose here is to allow a template to pull from a location that may not be `@LOCALSTATEDIR@/cache/lxc` Signed-off-by: Kevin Carter <kevin.carter@rackspace.com>

Update lxc-debian.in fix "bash: warning: setlocale: LC_ALL: cannot change locale" Signed-off-by: <feng xiahou xiahoufeng@yahoo.com> Acked-by: Stéphane Graber <stgraber@ubuntu.com>

lxc-debian.in: Fixed errors if dbus is not installed The lxc-debian template debootstraps a minimum debian system which does not contain dbus. If systemd is used this will result in getty-static.service to be used instead of getty@ . The systemd default files uses 6 tty's instead of the 4 the script creates. This will lead to repeated error messages in the systemd journal. Signed-off-by: Cyril Bitterich <Cyril.Bitterich@1und1.de> Acked-by: Stéphane Graber <stgraber@ubuntu.com>

Use consistent /proc, /sys and /sys/fs/cgroup (v2) - Implements mixed mode for /sys where it's mounted read-only but with /sys/devices/virtual/net/ writable. - Sets lxc.mount.auto to "cgroup:mixed proc:mixed sys:mixed" for all templates. - Drop any template-specific mount for /proc, /sys or /sys/fs/cgroup. - Get rid of the fstab file by default, using lxc.mount.entry instead. - Set sys:mixed as the default for "sys". sys:mixed is slightly more permissive than sys:ro so this shouldn't be a problem. The read-only bind mount of /sys on top of itself is there so that mountall and other init systems don't attempt to remount /sys read-write. v2 changes: - Fix the mount list, don't specify a source for the remount. - Update the documentation. Signed-off-by: Stéphane Graber <stgraber@ubuntu.com> Acked-by: Serge E. Hallyn <serge.hallyn@ubuntu.com>

improve "lxc-create -t debian -h" help text - document environment variables - add missing --packages switch to command line - describe how to pass template options to lxc-create (since lxc-create -h doesn't tell you) - render help text in the same pretty format as lxc-create does Signed-off-by: Tomáš Posíšek <tpo_deb@sourcepole.ch> Acked-by: Stéphane Graber <stgraber@ubuntu.com>

Set kmsg to 0 by default It's now been proven over and over again that the symlink from /dev/kmsg to /dev/console is harmful for everything but upstart systems. As Ubuntu is now switching over to systemd too, lets switch the default. Upstart users wishing to see boot messages can always set lxc.kmsg = 1 manually in their config (so long as they don't expect to then dist-upgrade the container to systemd succesfuly). Signed-off-by: Stéphane Graber <stgraber@ubuntu.com> Acked-by: Serge E. Hallyn <serge.hallyn@ubuntu.com>

Turn autodev on by default Now that autodev works fine with unprivileged containers and shouldn't come with any side effect, lets turn it on by default. Signed-off-by: Stéphane Graber <stgraber@ubuntu.com> Acked-by: Serge E. Hallyn <serge.hallyn@ubuntu.com>

lxc-debian: protect possibly unset variable with quotes for -z check Signed-off-by: Michael Adam <obnox@samba.org> Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

lxc-debian: document "--clean" in the usage. Signed-off-by: Michael Adam <obnox@samba.org> Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

lxc-debian: fix parsing of option "--clean": it takes no argument. Signed-off-by: Michael Adam <obnox@samba.org> Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

typofixes - https://github.com/vlajos/misspell_fixer Signed-off-by: Veres Lajos <vlajos@gmail.com> Acked-by: Stéphane Graber <stgraber@ubuntu.com>

lxc-debian: mask both Wheezy and Jessie udev services Signed-off-by: Cameron Norman <camerontnorman@gmail.com> Acked-by: Stéphane Graber <stgraber@ubuntu.com>

lxc-debian: adjust init system configurations Do as much as possible to allow containers switching from non-systemd to systemd to work as intended (but nothing that will cause side effects). Use update-rc.d disable instead of remove so the init scripts are not re-enabled when the package is updated Signed-off-by: Cameron Norman <camerontnorman@gmail.com> Acked-by: Stéphane Graber <stgraber@ubuntu.com>

lxc-debian: support systemd as PID 1 Containers with systemd need a somewhat special setup, which I borrowed and adapted from lxc-fedora. These changes are required so that Debian 8 (jessie) containers work properly, and are a no-op for previous Debian versions. Signed-off-by: Antonio Terceiro <terceiro@debian.org> Acked-by: Serge E. Hallyn <serge.hallyn@ubuntu.com>

lxc-debian: Fix default mirrors Fix a typo in the lines inserted in the default sources.list. Change the default mirror to http.debian.net which is (supposedly) more accurate and better than cdn.debian.net for a generic configuration. Use security.debian.org directly for the {release}/updates repository. Signed-off-by: Gu1 <gu1@aeroxteam.fr> Acked-by: Stéphane Graber <stgraber@ubuntu.com>

lxc-debian: added support for package installation - added --mirror, --security-mirror and --package parameters - generate source.list - install packages into final lxc instance Signed-off-by: Alexander Dreweke <alexander@dreweke.net> Acked-by: Stéphane Graber <stgraber@ubuntu.com>

lxc-debian: standardize formatting Signed-off-by: Alexander Dreweke <alexander@dreweke.net> Acked-by: Stéphane Graber <stgraber@ubuntu.com>

lxc-debian: fix formatting added space ">/" -> "> /" Signed-off-by: Alexander Dreweke <alexander@dreweke.net> Acked-by: Stéphane Graber <stgraber@ubuntu.com>

debian: Symlink /etc/mtab /etc/mtab doesn’t exist after bootstrapping a debian container, and will be created as regular file after first start. That leads to at least two errors: - output of `mount` is wrong and get messed up the more often you start/stop the container - /dev/pts/ptmx has wrong permissions Signed-off-by: Holger Amann <holger@sauspiel.de> Acked-by: Stéphane Graber <stgraber@ubuntu.com>

lxc-debian: Don't eat the argument after -c Reported-by: Robie Basak <robie.basak@canonical.com> Signed-off-by: Stéphane Graber <stgraber@ubuntu.com> Acked-by: Serge E. Hallyn <serge.hallyn@ubuntu.com>

templates: Fix bashisms in common code Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

templates: Make sure usual locations are in PATH Signed-off-by: Stéphane Graber <stgraber@ubuntu.com> Acked-by: Serge E. Hallyn <serge.hallyn@ubuntu.com>

templates: improve refusing to run unprivileged For all templates except lxc-ubuntu-cloud and lxc-download, detect not only --mapped-uid but also --mapped-gid and error out. Detecting will not be done after -- parameter because of non-option parameters. Also, change the mode of lxc-archlinux.in 100755 to 100644. Signed-off-by: TAMUKI Shoichi <tamuki@linet.gr.jp> Acked-by: Stéphane Graber <stgraber@ubuntu.com>

templates: Refuse to run unprivileged Only the download and ubuntu-cloud templates work with unprivileged containers, for all others, detect --mapped-uid and error out as early as possible, recommending the use of the download template. Signed-off-by: Stéphane Graber <stgraber@ubuntu.com> Acked-by: Serge Hallyn <serge.hallyn@ubuntu.com>

debian: Switch to config includes Signed-off-by: Stéphane Graber <stgraber@ubuntu.com> Acked-by: Serge E. Hallyn <serge.hallyn@ubuntu.com>

debian: Support ssh host keys regeneration Signed-off-by: Stéphane Graber <stgraber@ubuntu.com> Acked-by: Serge E. Hallyn <serge.hallyn@ubuntu.com>

handle simple bashisms: - [[ ]] -> [ ] - == -> = - source -> . - redirect of fd 200 is error in mksh, use fd 9 - &> /dev/null -> > /dev/null 2>&1 - useless function keyword - echo -e -> printf still left bash shebang which did not validate with checkbashism, mostly due 'type' being reported as bashism Signed-Off-By: Elan Ruusamäe <glen@delfi.ee> Acked-by: Stéphane Graber <stgraber@ubuntu.com>

Some tweak on previous change (timezone) This adds the same code to the Debian-based templates (Ubuntu and Ubuntu Cloud) and also avoids a needless fork. Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

lxc-debian: Make timezone match the host Set timezone in container as on the host Signed-off-by: funditus <funditus@mail.ru> Acked-by: Stéphane Graber <stgraber@ubuntu.com>

use awk, instead of 'grep | awk' Signed-off-by: Elan Ruusamäe <glen@delfi.ee> Acked-by: Stéphane Graber <stgraber@ubuntu.com>

lxc-debian: Add hwaddr handling logic Signed-off-by: Stéphane Graber <stgraber@ubuntu.com> Acked-by: Serge E. Hallyn <serge.hallyn@ubuntu.com>

lxc-debian: Remove perl, use sed instead Signed-off-by: Laurent Vallar <val@zbla.net> Acked-by: Stéphane Graber <stgraber@ubuntu.com>

lxc-debian: Force locales generation Signed-off-by: Laurent Vallar <val@zbla.net> Acked-by: Stéphane Graber <stgraber@ubuntu.com>

lxc-debian: Add --arch option Signed-off-by: Laurent Vallar <val@zbla.net> Acked-by: Stéphane Graber <stgraber@ubuntu.com>

lxc-debian: Add support for --release Signed-off-by: Laurent Vallar <val@zbla.net> Acked-by: Stéphane Graber <stgraber@ubuntu.com>

licensing: Add missing headers and FSF address Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

Move container creation fully into the api 1. implement bdev->create: python and lua: send NULL for bdevtype and bdevspecs. They'll want to be updated to pass those in in a way that makes sense, but I can't think about that right now. 2. templates: pass --rootfs If the container is backed by a device which must be mounted (i.e. lvm) then pass the actual rootfs mount destination to the templates. Note that the lxc.rootfs can be a mounted block device. The template should actually be installing the rootfs under the path where the lxc.rootfs is *mounted*. Still, some people like to run templates by hand and assume purely directory backed containers, so continue to support that use case (i.e. if no --rootfs is listed). Make sure the templates don't re-write lxc.rootfs if it is already in the config. (Most were already checking for that) 3. Replace lxc-create script with lxc_create.c program. Changelog: May 24: when creating a container, create $lxcpath/$name/partial, and flock it. When done, close that file and unlink it. In lxc_container_new() and lxcapi_start(), check for this file. If it is locked, create is ongoing. If it exists but is not locked, create() was killed - remove the container. May 24: dont disk-lock during lxcapi_create. The partial lock is sufficient. Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

templates: deny writes to host's clock (v2) Don't allow write to /dev/rtc0, and remove sys_time. Thanks, Christoph. v2: drop sys_time, sys_module, mac_admin and mac_override in all templates. Reported-by: Christoph Mitasch <cmitasch@thomas-krenn.com> Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

Use "uname -m" instead of "arch" According to "arch"'s manpage, it's identical to "uname -m". Some distros ship uname but don't ship arch, however all distros ship uname, therefore it makes sense to use "uname -m" whenever possible. Signed-off-by: Christian Bühler <christian@cbuehler.de> Acked-by: Stéphane Graber <stgraber@ubuntu.com>

debian template: set arch when dpkg doesn't exist on host Signed-off-by: Dwight Engen <dwight.engen@oracle.com> Acked-by: Serge E. Hallyn <serge.hallyn@ubuntu.com>

templates: Consistent use of locking Move to per-template lock (except for oracle that's per-container). Also ensure that the path used for the lock is relative to LOCALSTATEDIR. Signed-off-by: Stéphane Graber <stgraber@ubuntu.com> Acked-by: Serge E. Hallyn <serge.hallyn@ubuntu.com>

Update for consistent indent This commit updates all scripts using mixed indent to a consistent 4 spaces indent. In the past quite a few of those scripts used tabs to instead of 8 spaces or instead of 4 spaces, sometimes mixing those in the same line and sometimes changing the tab width within the same file. Signed-off-by: Stéphane Graber <stgraber@ubuntu.com> Acked-by: Serge E. Hallyn <serge.hallyn@ubuntu.com>

templates: Make generated config consistent This updates all the templates and the configuration files to consistently use "key = value" everywhere. Signed-off-by: Stéphane Graber <stgraber@ubuntu.com> Acked-by: Serge E. Hallyn <serge.hallyn@ubuntu.com>

templates: use hardlink detection in rsync I'm not sure whether we want this: is -H ubiquitous? Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com> Acked-by: Michael H. Warfield <mhw@WittsEnd.com> Acked-by: Dwight Engen <dwight.engen@oracle.com>

Remove all trailing whitespaces. Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

lxc-create: Make location of container rootfs configurable Make 'dir' an explicit backing store type, which accepts '--dir rootfs' as an option to specify a custom location for the container rootfs. Also update lxc-destroy to now remove the rootfs separately, as removing @LXCPATH@/$name may not hit it. Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

lxc-debian: replace isc-dhcp-server by isc-dhcp-client The DHCP client should be isc-dhcp-client, not isc-dhcp-server. Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com> Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

lxc-debian: specify isc-dhcp-server in package list dhcp3-client does not exist in testing. Bug-Ubuntu: https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1052972 Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

Add SIGINT and SIGPWR handler in lxc-debian This adds a SIGINIT and SIGPWR handler in the default inittab for the Debian template. This allows lxc-shutdown/lxc-restart and their API calls to properly shutdown or reboot the container. Signed-off-by: Rex Tsai (蔡志展) <rex.tsai@canonical.com> Acked-by: Stéphane Graber <stgraber@ubuntu.com>

Add lxc.aa_profile example to all templates LXC has optional apparmor support, default profile is lxc-container-default. This change adds a commented "lxc.aa_profile = default" line to all templates, uncommenting this will bypass apparmor for the container. Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

ubuntu and debian templates: Clean up cache if cache build is interrupted Otherwise the next lxc-create may rsync a bad cache. Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

templates: don't fail on busy flock Just wait until the lock is available. That is a nicer behavior for concurrent lxc-creates. Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com> Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>

templates: use relative paths when creating containers At the same time, allow lxc.mount.entry to specify an absolute target path relative to /var/lib/lxc/CN/rootfs, even if rootfs is a blockdev. Otherwise all such entries are ignored for blockdev-backed containers. Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com> Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>

add lvm support to lxc-create 1. Some templates copy the cached pristine rootfs using 'cp a b' where b is $lxc_path/$name/rootfs. That doesn't do the right thing if rootfs already exists, as it will when it is an lvm or other mount. So switch to 'rsync a/ b/'. (cp can be made to work too of course). 2. Update lxc-create to support backing stores. For now only lvm is implemented. Signed-off-by: Serge Hallyn <serge.hallyn@canonical.com> Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>

Set the utsname on the debian template Signed-off-by: Tzafrir Cohen <tzafrir@cohens.org.il> Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>

Convert all Debian (and derivative) templates from using 'arch' to using 'dpkg --print-architecture' as debootstrap does

templates: don't put devpts in $confdir/container/fstab src/lxc/conf.c will explicitly mount it anyway. Furthermore, the fstab entry, which is getting processed first, did not specify -o newinstance. This can cause the host's devpts entry mount options to change, as in https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/607636. Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>

Fixed a small typo in lxc-debian template "udpate" should be "update" in configure_debian(). Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>

Correcting charset argument when calling locale-gen. Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>

Correcting include argument when calling debootstrap. Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>

Disabling unneeded checkroot.sh initscript in debian template. Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>

Creating missing tty device nodes for squeeze in debian template. Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>

Setting default mirror to cdn.debian.net in debian template. Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>

Setting default suite to squeeze in debian template. Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>

improve lxc-debian template to specify the suite The attached patch adds a variable at the top of lxc-debian to change the SUITE. Currently tested suites are lenny, squeeze, sid. Also, the patch uses the dhcp3-client package instead of dhcp-client which is deprecated in lenny and removed in squeeze. Patch initialy from Mathieu Parent. Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>

fix /proc not mounted in debian container Mount some systemm fs for the container. By default, /proc is no longer mounted in debian. Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>

generate locales on debian Let's do like the ubuntu template and generate locales automatically. Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>

move script templates to an adequate place At present the lxc-{template} scripts are installed in the $bindir. This is not the right place as specified by the FHS, so they go to $libdir/lxc/templates. Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>