---
# We run all containers in privileged mode. This prevents a lot of
# potential issues with things like subuid/subgid mappings on
# mounted filesystems.

lxd:
  profiles:

    default:
      name: default
      description: Default profile
      config:
        security.privileged: "true"
        user.user-data: |
          timezone: Europe/Amsterdam
      devices:
        root:
          path: /
          pool: default
          type: disk

    demo:
      name: demo
      description: Demo profile
      config:
        security.privileged: "true"
        user.user-data: |
          # cloud-config
          package_upgrade: true
          packages:
            - python3
          timezone: Europe/Amsterdam
      devices:
        if-demo:
          name: if-demo
          nictype: bridged
          parent: br-demo
          type: nic
        root:
          path: /
          pool: default
          type: disk