nova-lxd/contrib/glance_metadefs/compute-lxd-flavor.json

33 lines
1.4 KiB
JSON

{
"namespace": "OS::Nova::LXDFlavor",
"display_name": "LXD properties",
"description": "You can pass several options to the LXD container hypervisor that will affect the container's capabilities.",
"visibility": "public",
"protected": false,
"resource_type_associations": [
{
"name": "OS::Nova::Flavor"
}
],
"properties": {
"lxd:nested_allowed": {
"title": "Allow nested containers",
"description": "Allow or disallow creation of nested containers. If True, you can install and run LXD inside the VM itself and provision another level of containers.",
"type": "string",
"default": false
},
"lxd:privileged_allowed": {
"title": "Create privileged container",
"description": "Containers created as Privileged have elevated powers on the compute host. You should not set this option on containers that you don't fully trust.",
"type": "string",
"default": false
},
"lxd:isolated": {
"title": "Create idmap isolated containers",
"description": "Containers created as idmap isolated will run under different subuid/subgid ranges from other containers on the same host, decreasing the risk of cross container compromises within a single compute host.",
"type": "string",
"default": false
}
}
}