{"action":"created","issue":{"url":"https://api.github.com/repos/snapcore/snapd/issues/1699","repository_url":"https://api.github.com/repos/snapcore/snapd","labels_url":"https://api.github.com/repos/snapcore/snapd/issues/1699/labels{/name}","comments_url":"https://api.github.com/repos/snapcore/snapd/issues/1699/comments","events_url":"https://api.github.com/repos/snapcore/snapd/issues/1699/events","html_url":"https://github.com/snapcore/snapd/pull/1699","id":171935025,"number":1699,"title":"introduce the \"lxd\" interface","user":{"login":"tych0","id":785111,"avatar_url":"https://avatars.githubusercontent.com/u/785111?v=3","gravatar_id":"","url":"https://api.github.com/users/tych0","html_url":"https://github.com/tych0","followers_url":"https://api.github.com/users/tych0/followers","following_url":"https://api.github.com/users/tych0/following{/other_user}","gists_url":"https://api.github.com/users/tych0/gists{/gist_id}","starred_url":"https://api.github.com/users/tych0/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tych0/subscriptions","organizations_url":"https://api.github.com/users/tych0/orgs","repos_url":"https://api.github.com/users/tych0/repos","events_url":"https://api.github.com/users/tych0/events{/privacy}","received_events_url":"https://api.github.com/users/tych0/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/snapcore/snapd/labels/Blocked","name":"Blocked","color":"d93f0b"}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":13,"created_at":"2016-08-18T15:49:17Z","updated_at":"2016-08-18T21:24:58Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/snapcore/snapd/pulls/1699","html_url":"https://github.com/snapcore/snapd/pull/1699","diff_url":"https://github.com/snapcore/snapd/pull/1699.diff","patch_url":"https://github.com/snapcore/snapd/pull/1699.patch"},"body":"The \"lxd\" interface is special: it is unconfined both in apparmor and in\r\nseccomp. LXD is a bit of a special case, because it needs to do lots of\r\nthings (like load kernel modules, apparmor profiles, create cgroups,\r\nmanipulate namespaces, etc.), so we just leave it unconfined.\r\n\r\nSigned-off-by: Tycho Andersen <tycho.andersen@canonical.com>"},"comment":{"url":"https://api.github.com/repos/snapcore/snapd/issues/comments/240861795","html_url":"https://github.com/snapcore/snapd/pull/1699#issuecomment-240861795","issue_url":"https://api.github.com/repos/snapcore/snapd/issues/1699","id":240861795,"user":{"login":"jdstrand","id":1663079,"avatar_url":"https://avatars.githubusercontent.com/u/1663079?v=3","gravatar_id":"","url":"https://api.github.com/users/jdstrand","html_url":"https://github.com/jdstrand","followers_url":"https://api.github.com/users/jdstrand/followers","following_url":"https://api.github.com/users/jdstrand/following{/other_user}","gists_url":"https://api.github.com/users/jdstrand/gists{/gist_id}","starred_url":"https://api.github.com/users/jdstrand/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jdstrand/subscriptions","organizations_url":"https://api.github.com/users/jdstrand/orgs","repos_url":"https://api.github.com/users/jdstrand/repos","events_url":"https://api.github.com/users/jdstrand/events{/privacy}","received_events_url":"https://api.github.com/users/jdstrand/received_events","type":"User","site_admin":false},"created_at":"2016-08-18T21:24:58Z","updated_at":"2016-08-18T21:24:58Z","body":"\"It would be useful, then, to have a kernel that has working apparmor stacking support, so we can actually run apparmor confined containers inside of the LXD that we're running inside of snappy.\"\r\n\r\nI was told yesterday that this was not a requirement for this PR. What has changed?"}}
{"actor":{"display_login":"jdstrand"}}