{
    "namespace": "OS::Nova::LXDFlavor",
    "display_name": "LXD properties",
    "description": "You can pass several options to the LXD container hypervisor that will affect the container's capabilities.",
    "visibility": "public",
    "protected": false,
    "resource_type_associations": [
        {
            "name": "OS::Nova::Flavor"
        }
    ],
    "properties": {
        "lxd:nested_allowed": {
            "title": "Allow nested containers",
            "description": "Allow or disallow creation of nested containers. If True, you can install and run LXD inside the VM itself and provision another level of containers.",
            "type": "string",
            "default": false
        },
        "lxd:privileged_allowed": {
            "title": "Create privileged container",
            "description": "Containers created as Privileged have elevated powers on the compute host. You should not set this option on containers that you don't fully trust.",
            "type": "string",
            "default": false
        },
        "lxd:isolated": {
            "title": "Create idmap isolated containers",
            "description": "Containers created as idmap isolated will run under different subuid/subgid ranges from other containers on the same host, decreasing the risk of cross container compromises within a single compute host.",
            "type": "string",
            "default": false
        }
    }
}
