From 8413f6b9e6c377bfcdc674257e9090ba0f934ebd Mon Sep 17 00:00:00 2001
From: Jeroen Rijken <jeroen.rijken@xs4all.nl>
Date: Sun, 10 Jul 2022 11:51:15 +0200
Subject: [PATCH] Allow containerd to access SSL certs for pulling container
 images.

---
 apparmor.d/groups/virt/containerd | 1 +
 1 file changed, 1 insertion(+)

diff --git a/apparmor.d/groups/virt/containerd b/apparmor.d/groups/virt/containerd
index c40c454e..c44b9300 100644
--- a/apparmor.d/groups/virt/containerd
+++ b/apparmor.d/groups/virt/containerd
@@ -9,6 +9,7 @@ include <tunables/global>
 @{exec_path} = /{usr/,}bin/containerd
 profile containerd @{exec_path} {
   include <abstractions/base>
+  include <abstractions/ssl_certs>
   include <abstractions/nameservice-strict>
 
   capability dac_read_search,