🔧 How to Export Container Security Policies

Export a container's full configuration — including seccomp, AppArmor, and network settings — as a JSON file for backup or migration.

1. Select the Container

Navigate to the container you want to export in the main list.

2. Export Configuration

Press E to export the container configuration. cella fetches the complete config from the LXD API and saves it as JSON:

{
  "name": "my-container",
  "config": {
    "limits.cpu": "2",
    "limits.memory": "1GB",
    "raw.lxc": "lxc.seccomp.profile = /path/to/seccomp.json",
    "security.nesting": "false",
    ...
  },
  "devices": { ... },
  "profiles": ["default"]
}

3. Export Seccomp Profile

If you've generated a seccomp profile (via G in the Syscall Trace panel), you can save it separately with S. The output is OCI-format JSON:

{
  "defaultAction": "SCMP_ACT_ERRNO",
  "architectures": ["SCMP_ARCH_X86_64"],
  "syscalls": [
    {
      "names": ["read", "write", "open", "close", ...],
      "action": "SCMP_ACT_ALLOW"
    }
  ]
}

4. Export Audit Data

In the Audit panel (A), press S to export the HTTP audit log as JSON.

5. Import Configuration

To re-apply a previously exported config, press I and select the JSON file. cella will apply the config via the LXD API.