Skip to content
This repository has been archived by the owner on May 12, 2021. It is now read-only.

"docker run --sysctl ..." not supported #472

Closed
amshinde opened this issue Mar 5, 2019 · 0 comments
Closed

"docker run --sysctl ..." not supported #472

amshinde opened this issue Mar 5, 2019 · 0 comments

Comments

@amshinde
Copy link
Member

amshinde commented Mar 5, 2019

See kata-containers/runtime#185 for more details.

amshinde added a commit to amshinde/agent-1 that referenced this issue Mar 5, 2019
We support most of the namespaced sysctls today as we pass them to
libcontainer as part of the OCI spec. libcontainer then applies them
for the container after veryfing they can be applied.
However, the verification fails for network related sysctls as
libcontainer expects a separate network namespace for network
sysctls. This check fails for us as we create network namspace on
the host side. To fix these, apply the network sysctls manually
and purge them from the spec, leaving other sysctls to be applied
by libcontainer.

Fixes kata-containers#472

Signed-off-by: Archana Shinde <[email protected]>
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant