# Is possible to change VM configuration to - Security Nesting

**URL:** <https://forum.opennebula.io/t/is-possible-to-change-vm-configuration-to-security-nesting/8428>\
**Category:** Installation & Configuration\
**Created:** [May 10, 2020, 5:48am UTC](https://forum.opennebula.io/t/is-possible-to-change-vm-configuration-to-security-nesting/8428 "2020-05-10T05:48:14Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Mahdi\_Khosravi](https://yyz1.discourse-cdn.com/flex031/user_avatar/forum.opennebula.io/mahdi_khosravi/32/6434_2.png) [@Mahdi\_Khosravi](https://forum.opennebula.io/u/Mahdi_Khosravi)\
**Post date:** [May 10, 2020, 5:48am UTC](https://forum.opennebula.io/t/is-possible-to-change-vm-configuration-to-security-nesting/8428/1 "2020-05-10T05:48:14Z")

</div>

Hi,

I chenged template parameter configuration to LXD\_SECURITY\_NESTING=“yes”  
when I deployed New VM this parameter set to new VM and my problem has fixed but VMS that used to be this template parameter does not work for VMS that were created before this change

```auto
netemplate show 4
TEMPLATE 4 INFORMATION                                                          
ID : 4                   
NAME : ubuntu_xenial - LXD 
USER : oneadmin            
GROUP : oneadmin            
LOCK : None                
REGISTER TIME : 03/09 18:06:51      

PERMISSIONS                                                                     
OWNER : um-                 
GROUP : ---                 
OTHER : ---                 

TEMPLATE CONTENTS                                                               
CONTEXT=[
  NETWORK="YES",
  PASSWORD="$PASSWORD",
  SET_HOSTNAME="$SET_HOSTNAME",
  SSH_PUBLIC_KEY="$USER[SSH_PUBLIC_KEY]",
  USERNAME="$USERNAME" ]
CPU="2"
DISK=[
  IMAGE_ID="5" ]
GRAPHICS=[
  LISTEN="0.0.0.0",
  TYPE="VNC" ]
HYPERVISOR="lxd"
INPUTS_ORDER="PASSWORD,USERNAME,SET_HOSTNAME"
LXD_PROFILE=""
**LXD_SECURITY_NESTING="yes"**
LXD_SECURITY_PRIVILEGED="yes"
MEMORY="4096"
MEMORY_UNIT_COST="MB"
OS=[
  BOOT="" ]
USER_INPUTS=[
  PASSWORD="M|text|PASSWORD",
  SET_HOSTNAME="M|text|HOSTNAME",
  USERNAME="M|text|USERNAME" ]
VCPU="2"

```

also when I am running onevm updateconf $VMID both VMS are the same config and this parameter not be set at this VMconf ,

```auto
$dmesg

[511773.459614] audit: type=1400 audit(1589090167.685:681): apparmor="DENIED" operation="mount" info="failed flags match" error=-13 profile="lxd-one-178_</var/lib/lxd>" name="/" pid=3518244 comm="(ostnamed)" flags="rw, rslave"
[511809.524025] audit: type=1400 audit(1589090203.749:682): apparmor="DENIED" operation="mount" info="failed flags match" error=-13 profile="lxd-one-178_</var/lib/lxd>" name="/" pid=3519527 comm="exe" flags="rw, rslave"
[512328.225907] audit: type=1400 audit(1589090722.449:683): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" label="lxd-one-196_</var/lib/lxd>//&:lxd-one-196_<var-lib-lxd>:unconfined" name="/usr/sbin/tcpdump" pid=3546394 comm="apparmor_parser"

```

 ![image](https://canada1.discourse-cdn.com/flex031/uploads/opennebula/original/2X/4/4237f33993e0a6e99dabe3f25ceb191e6b176064.png)

Does anyone know where I need to change?