diff options
author | Michal Sekletar <msekleta@redhat.com> | 2019-09-09 16:28:47 +0200 |
---|---|---|
committer | Michal Sekletar <msekleta@redhat.com> | 2019-09-18 14:19:50 +0200 |
commit | f9ebc8394e9125e49ae35a2b4231f4ed58096f8c (patch) | |
tree | b4465aad9b6bf54874dda618f0ad8147af038865 | |
parent | 143caa98bf07eef1a4d46da2cc56603a3ef739b8 (diff) | |
download | podman-f9ebc8394e9125e49ae35a2b4231f4ed58096f8c.tar.gz podman-f9ebc8394e9125e49ae35a2b4231f4ed58096f8c.tar.bz2 podman-f9ebc8394e9125e49ae35a2b4231f4ed58096f8c.zip |
Add a note on systemd shortcomings in rootless containers
Document that it is expected for some of the systemd API's to not work
correctly/at all in rootless containers.
Fixes: #3957
Signed-off-by: Michal Sekletar <msekleta@redhat.com>
-rw-r--r-- | rootless.md | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/rootless.md b/rootless.md index 960430d54..53463dccc 100644 --- a/rootless.md +++ b/rootless.md @@ -14,6 +14,9 @@ can easily fail * No cgroup V1 Support * cgroup V1 does not safely support cgroup delegation. * However, cgroup V2 provides cgroup delegation and is available on Fedora starting with version 29 and other Linux distributions. +* Some systemd's unit configuration options do not work in the rootless container + * systemd fails to apply several options and failures are silently ignored (e.g. CPUShares, MemoryLimit). + * Use of certain options will cause service startup failures (e.g. PrivateNetwork). * Can not share container images with CRI-O or other users * Difficult to use additional stores for sharing content * Does not work on NFS or parallel filesystem homedirs (e.g. [GPFS](https://www.ibm.com/support/knowledgecenter/en/SSFKCN/gpfs_welcome.html)) |