(In reply to Johannes Kastl from comment #9) > Sorry for the late answer, I was on and off with this. > > zypper in apparmor-profiles and a start of apparmor.service (before > installing lxc) is enough to get this going. > > And it seems you need apparmor to use lxc, even if you want your containers > to be unconfined (which is the default on openSUSE, as apparmor is using > some features that are not in the upstream kernel yet, IIRC). Ok fair enough then. > > I think this should be reflected in the packages dependencies, however I am > not sure if this is worth a maintenance release for Leap 42.2. But this is a real problem right. I mean, you 'zypper in lxc' and you expect it to work in 42.2. So in my opinion I think that dependencies need to be fixed there as well.