<commit_before>Author: <NAME> <<EMAIL>>
Description: Improving debian default container config.

diff -Naurp lxc.orig/templates/lxc-debian.in lxc/templates/lxc-debian.in
--- lxc.orig/templates/lxc-debian.in	2011-09-21 13:27:35.402467356 +0200
+++ lxc/templates/lxc-debian.in	2011-09-21 13:29:11.658935664 +0200
@@ -217,30 +217,58 @@ copy_configuration()
     rootfs=$2
     name=$3
 
-    cat <<EOF >> $path/config
-lxc.tty = 4
-lxc.pts = 1024
-lxc.rootfs = $rootfs
-lxc.cgroup.devices.deny = a
-# /dev/null and zero
-lxc.cgroup.devices.allow = c 1:3 rwm
-lxc.cgroup.devices.allow = c 1:5 rwm
-# consoles
-lxc.cgroup.devices.allow = c 5:1 rwm
-lxc.cgroup.devices.allow = c 5:0 rwm
-lxc.cgroup.devices.allow = c 4:0 rwm
-lxc.cgroup.devices.allow = c 4:1 rwm
+    cat >> $path/config << EOF
+# $path/config
+
+## Container
+lxc.utsname                             = $name
+lxc.rootfs                              = $rootfs
+lxc.tty                                 = 4
+lxc.pts                                 = 1024
+#lxc.console                            = /var/log/lxc/$name.console
+
+## Capabilities
+lxc.cap.drop                            = sys_admin
+
+## Devices
+#lxc.cgroup.devices.allow               = a
+lxc.cgroup.devices.deny                 = a
+# /dev/null
+lxc.cgroup.devices.allow                = c 1:3 rwm
+# /dev/zero
+lxc.cgroup.devices.allow                = c 1:5 rwm
+# /dev/tty[1-4] consoles
+lxc.cgroup.devices.allow                = c 5:1 rwm
+lxc.cgroup.devices.allow                = c 5:0 rwm
+lxc.cgroup.devices.allow                = c 4:0 rwm
+lxc.cgroup.devices.allow                = c 4:1 rwm
 # /dev/{,u}random
-lxc.cgroup.devices.allow = c 1:9 rwm
-lxc.cgroup.devices.allow = c 1:8 rwm
-lxc.cgroup.devices.allow = c 136:* rwm
-lxc.cgroup.devices.allow = c 5:2 rwm
-# rtc
-lxc.cgroup.devices.allow = c 254:0 rwm
-
-# mounts point
-lxc.mount.entry=proc $rootfs/proc proc nodev,noexec,nosuid 0 0
-lxc.mount.entry=sysfs $rootfs/sys sysfs defaults  0 0
+lxc.cgroup.devices.allow                = c 1:9 rwm
+lxc.cgroup.devices.allow                = c 1:8 rwm
+lxc.cgroup.devices.allow                = c 136:* rwm
+lxc.cgroup.devices.allow                = c 5:2 rwm
+# /dev/rtc
+lxc.cgroup.devices.allow                = c 254:0 rwm
+
+## Limits
+#lxc.cgroup.cpu.shares                  = 1024
+#lxc.cgroup.cpuset.cpus                 = 0
+#lxc.cgroup.memory.limit_in_bytes       = 256M
+#lxc.cgroup.memory.memsw.limit_in_bytes = 1G
+
+## Filesystem
+lxc.mount.entry                         = proc $rootfs/sys proc nodev,noexec,nosuid 0 0
+lxc.mount.entry                         = sysfs $rootfs/sys sysfs defaults,ro 0 0
+#lxc.mount.entry                        = /srv/$name $rootfs/srv/$name none defaults,bind 0 0
+
+## Network
+lxc.network.type                        = veth<commit_msg>Correcting typo in proc mount entry in the default config of the debian template, thanks to <NAME> <<EMAIL>> (Closes: #643715).<commit_after>Author: <NAME> <<EMAIL>>
Description: Improving debian default container config.

diff -Naurp lxc.orig/templates/lxc-debian.in lxc/templates/lxc-debian.in
--- lxc.orig/templates/lxc-debian.in	2011-09-21 13:27:35.402467356 +0200
+++ lxc/templates/lxc-debian.in	2011-09-21 13:29:11.658935664 +0200
@@ -217,30 +217,58 @@ copy_configuration()
     rootfs=$2
     name=$3
 
-    cat <<EOF >> $path/config
-lxc.tty = 4
-lxc.pts = 1024
-lxc.rootfs = $rootfs
-lxc.cgroup.devices.deny = a
-# /dev/null and zero
-lxc.cgroup.devices.allow = c 1:3 rwm
-lxc.cgroup.devices.allow = c 1:5 rwm
-# consoles
-lxc.cgroup.devices.allow = c 5:1 rwm
-lxc.cgroup.devices.allow = c 5:0 rwm
-lxc.cgroup.devices.allow = c 4:0 rwm
-lxc.cgroup.devices.allow = c 4:1 rwm
+    cat >> $path/config << EOF
+# $path/config
+
+## Container
+lxc.utsname                             = $name
+lxc.rootfs                              = $rootfs
+lxc.tty                                 = 4
+lxc.pts                                 = 1024
+#lxc.console                            = /var/log/lxc/$name.console
+
+## Capabilities
+lxc.cap.drop                            = sys_admin
+
+## Devices
+#lxc.cgroup.devices.allow               = a
+lxc.cgroup.devices.deny                 = a
+# /dev/null
+lxc.cgroup.devices.allow                = c 1:3 rwm
+# /dev/zero
+lxc.cgroup.devices.allow                = c 1:5 rwm
+# /dev/tty[1-4] consoles
+lxc.cgroup.devices.allow                = c 5:1 rwm
+lxc.cgroup.devices.allow                = c 5:0 rwm
+lxc.cgroup.devices.allow                = c 4:0 rwm
+lxc.cgroup.devices.allow                = c 4:1 rwm
 # /dev/{,u}random
-lxc.cgroup.devices.allow = c 1:9 rwm
-lxc.cgroup.devices.allow = c 1:8 rwm
-lxc.cgroup.devices.allow = c 136:* rwm
-lxc.cgroup.devices.allow = c 5:2 rwm
-# rtc
-lxc.cgroup.devices.allow = c 254:0 rwm
-
-# mounts point
-lxc.mount.entry=proc $rootfs/proc proc nodev,noexec,nosuid 0 0
-lxc.mount.entry=sysfs $rootfs/sys sysfs defaults  0 0
+lxc.cgroup.devices.allow                = c 1:9 rwm
+lxc.cgroup.devices.allow                = c 1:8 rwm
+lxc.cgroup.devices.allow                = c 136:* rwm
+lxc.cgroup.devices.allow                = c 5:2 rwm
+# /dev/rtc
+lxc.cgroup.devices.allow                = c 254:0 rwm
+
+## Limits
+#lxc.cgroup.cpu.shares                  = 1024
+#lxc.cgroup.cpuset.cpus                 = 0
+#lxc.cgroup.memory.limit_in_bytes       = 256M
+#lxc.cgroup.memory.memsw.limit_in_bytes = 1G
+
+## Filesystem
+lxc.mount.entry                         = proc $rootfs/proc proc nodev,noexec,nosuid 0 0
+lxc.mount.entry                         = sysfs $rootfs/sys sysfs defaults,ro 0 0
+#lxc.mount.entry                        = /srv/$name $rootfs/srv/$name none defaults,bind 0 0
+
+## Network
+lxc.network.type                        = veth
{'fraction_non_alphanumeric': 0.14084995663486558, 'fraction_numerical': 0.05203816131830009, 'mean_word_length': 1.864381520119225, 'pattern_counts': {'":': 0, '<': 20, '<?xml version=': 0, '>': 20, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 4, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '5509667', 'n_tokens_mistral': 2408, 'n_tokens_neox': 2154, 'n_words': 432}