# This derives from the global userns config

lxc.include = @LXCTEMPLATECONFIG@/userns.conf

# Extra fstab entries as mountall can't mount those by itself

lxc.mount.entry = /sys/firmware/efi/efivars sys/firmware/efi/efivars none bind,optional 0 0

lxc.mount.entry = /proc/sys/fs/binfmt_misc proc/sys/fs/binfmt_misc none bind,optional 0 0

# Default seccomp policy is not needed for unprivileged containers, and

# non-root users cannot use seccmp without NNP anyway.

lxc.seccomp =