added secrity options to default profile

2025-06-15 22:53:21 -04:00 · 2025-06-15 22:53:21 -04:00 · 52e26582ba
commit 52e26582ba
parent 63e24789a2
1 changed files with 2 additions and 0 deletions
--- a/incus/main.tf
+++ b/incus/main.tf
@ -5,6 +5,8 @@ resource "incus_profile" "d" {
    "limits.cpu"       = 2
    "security.nesting" = true
    "boot.autostart"   = true
+    "security.privileged" = false
+    "security.syscalls.intercept.mount" = false
  }

  # device {