From a4bd5c60d294494edff126d60bb5e0c23e3da05e Mon Sep 17 00:00:00 2001
From: Manuel Thalmann <m@nuth.ch>
Date: Sun, 10 Nov 2024 12:56:48 +0100
Subject: [PATCH] Add settings for allowing VPN access in lxc

---
 scripts/test/arch-install.fish | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/scripts/test/arch-install.fish b/scripts/test/arch-install.fish
index fc7667f7..cc6c6623 100755
--- a/scripts/test/arch-install.fish
+++ b/scripts/test/arch-install.fish
@@ -15,7 +15,11 @@ begin
         "lxc.apparmor.profile = unconfined" \
         "" \
         "# Shared Folder" \
-        "lxc.mount.entry = $(realpath "$dir/../..") $valhallaRoot none bind 0 0"
+        "lxc.mount.entry = $(realpath "$dir/../..") $valhallaRoot none bind 0 0" \
+        "" \
+        "# VPN" \
+        "lxc.cgroup.devices.allow = c 10:200 rwm" \
+        "lxc.mount.entry = /dev/net dev/net none bind,create=dir 0 0"
 end | sudo tee -a "$containerDir/config" > /dev/null
 
 sudo lxc-start "$container"