How to convert `raw.lxc: lxc.cgroup.devices.allow ...` into a proper LXD `config: {}`?


An awesome guy, @stgraber, just explained how to convert lxc.mount.entry into a proper LXD config.

Now, I’m wondering if there is a similar solution for lxc.cgroup.devices.allow

For me Ceph OSD Containers, that I’m using with ceph-ansible via openstack-ansible, I need the following raw.lxc too (otherwise, ceph-ansible can’t create LVM2 volumes within the container):

  raw.lxc: |-
    lxc.cgroup.devices.allow = b 253:* rwm
    lxc.mount.entry=/proc/sys/vm proc/sys/vm proc bind,rw 0 0
    lxc.mount.entry=/proc/sys/fs proc/sys/fs proc bind,rw 0 0

Now I know how to use type disks to replace those “lxc.mount.entry”…

Do you guys have another magic block for the “lxc.cgroup.devices.allow”?! I would LOVE that! LOL

Thank you!