Recently, I started looking at LXC as a virtualization platform. I have already created a container, and set it up to use via libvirt.
This works so far, but when I shut down the container, /var/lib/lxc (which is on a separate file system) is remounted as ro on the host.
I have already searched for the problem, and found as a solution to drop some capabilities for LXC (e.g. here, it is suggested to drop sys_module, mac_admin and mac_override). However, even if I keep no capabilities at all (lxc.cap.keep=none), the file system is still remounted.
So how to properly prevent a container from randomly remounting file systems on the host?
