mirror of
https://github.com/containers/podman.git
synced 2025-05-31 07:27:13 +08:00
4675103c22
As promised, harder and harder to review. Please take your time with this one. For IPC, I went with the list form. For net, I used the single- sentence form instead of a one-element list. The container/pod diffs are clumsy, sorry. Maybe it's time to start thinking of a more flexible conditional mechanism, but I'd really like to avoid that so I hope this is acceptable. In the first sentence I went with 'namespaced' (final 'd') in all instances. I also got rid of the 'new' in 'new pod' in pod-clone. Signed-off-by: Ed Santiago <santiago@redhat.com>
22 lines
701 B
Markdown
22 lines
701 B
Markdown
#### **--sysctl**=*name=value*
|
|
|
|
Configure namespaced kernel parameters <<at runtime|for all containers in the pod>>.
|
|
|
|
For the IPC namespace, the following sysctls are allowed:
|
|
|
|
- kernel.msgmax
|
|
- kernel.msgmnb
|
|
- kernel.msgmni
|
|
- kernel.sem
|
|
- kernel.shmall
|
|
- kernel.shmmax
|
|
- kernel.shmmni
|
|
- kernel.shm_rmid_forced
|
|
- Sysctls beginning with fs.mqueue.\*
|
|
|
|
Note: <<if you use the **--ipc=host** option|if the ipc namespace is not shared within the pod>>, the above sysctls are not allowed.
|
|
|
|
For the network namespace, only sysctls beginning with net.\* are allowed.
|
|
|
|
Note: <<if you use the **--network=host** option|if the network namespace is not shared within the pod>>, the above sysctls are not allowed.
|