mirror of
https://github.com/containers/podman.git
synced 2025-07-28 19:02:48 +08:00
c9c2f644da
In each options/foo.md, keep a list of where the option is used. This will be valuable to anyone making future edits, and to those reviewing those edits. This may be a controversial commit, because those crossref lists are autogenerated as a side effect of the script that reads them. It definitely violates POLA. And one day, some kind person will reconcile (e.g.) --label, using it in more man pages, and maybe forget to git-commit the rewritten file, and CI will fail. I think this is a tough tradeoff, but worth doing. Without this, it's much too easy for someone to change an option file in a way that renders it inapplicable/misleading for some podman commands. Signed-off-by: Ed Santiago <santiago@redhat.com>
26 lines
876 B
Markdown
26 lines
876 B
Markdown
####> This option file is used in:
|
|
####> podman create, pod clone, pod create, run
|
|
####> If you edit this file, make sure your changes
|
|
####> are applicable to all of those.
|
|
#### **--sysctl**=*name=value*
|
|
|
|
Configure namespaced kernel parameters <<at runtime|for all containers in the pod>>.
|
|
|
|
For the IPC namespace, the following sysctls are allowed:
|
|
|
|
- kernel.msgmax
|
|
- kernel.msgmnb
|
|
- kernel.msgmni
|
|
- kernel.sem
|
|
- kernel.shmall
|
|
- kernel.shmmax
|
|
- kernel.shmmni
|
|
- kernel.shm_rmid_forced
|
|
- Sysctls beginning with fs.mqueue.\*
|
|
|
|
Note: <<if you use the **--ipc=host** option|if the ipc namespace is not shared within the pod>>, the above sysctls are not allowed.
|
|
|
|
For the network namespace, only sysctls beginning with net.\* are allowed.
|
|
|
|
Note: <<if you use the **--network=host** option|if the network namespace is not shared within the pod>>, the above sysctls are not allowed.
|