Hi, I am trying to install app apparmor apparmor-utils on a container running on ubuntu machine with alpine.
On my host system apparmor is working fine and when checking apparmor status i can see profiles are loaded
apparmor_status
apparmor module is loaded.
34 profiles are loaded.
34 profiles are in enforce mode.
now when i exec into container and install apparmor apparmor-utils setup completes successfully, however no app armour profile is loaded sucessfully
apparmor_status
apparmor module is loaded.
apparmor filesystem is not mounted.
When i try to create a sample profile and try to load the same in container
cat /etc/apparmor.d/profile
#include <tunables/global>
/usr/bin/myapp {
# AppArmor rules for the application
capability net_bind_service,
network inet,
/usr/bin/myapp rix,
/var/log/myapp.log w,
}
62e064aa521d:/# apparmor_status
apparmor module is loaded.
apparmor filesystem is not mounted.
62e064aa521d:/#
62e064aa521d:/#
62e064aa521d:/# apparmor_parser -r /etc/apparmor.d/profile
Cache read/write disabled: interface file missing. (Kernel needs AppArmor 2.4 compatibility patch.)
Warning: unable to find a suitable fs in /proc/mounts, is it mounted?
Use --subdomainfs to override.