summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorOpenShift Merge Robot <openshift-merge-robot@users.noreply.github.com>2019-09-18 16:00:22 +0200
committerGitHub <noreply@github.com>2019-09-18 16:00:22 +0200
commit2c51d6f800a1ed472da3b88b4f987ab73953c8d0 (patch)
treeb4465aad9b6bf54874dda618f0ad8147af038865
parent143caa98bf07eef1a4d46da2cc56603a3ef739b8 (diff)
parentf9ebc8394e9125e49ae35a2b4231f4ed58096f8c (diff)
downloadpodman-2c51d6f800a1ed472da3b88b4f987ab73953c8d0.tar.gz
podman-2c51d6f800a1ed472da3b88b4f987ab73953c8d0.tar.bz2
podman-2c51d6f800a1ed472da3b88b4f987ab73953c8d0.zip
Merge pull request #3972 from msekletar/systemd-rootless-docs
Add a note on systemd shortcomings in rootless containers
-rw-r--r--rootless.md3
1 files changed, 3 insertions, 0 deletions
diff --git a/rootless.md b/rootless.md
index 960430d54..53463dccc 100644
--- a/rootless.md
+++ b/rootless.md
@@ -14,6 +14,9 @@ can easily fail
* No cgroup V1 Support
* cgroup V1 does not safely support cgroup delegation.
* However, cgroup V2 provides cgroup delegation and is available on Fedora starting with version 29 and other Linux distributions.
+* Some systemd's unit configuration options do not work in the rootless container
+ * systemd fails to apply several options and failures are silently ignored (e.g. CPUShares, MemoryLimit).
+ * Use of certain options will cause service startup failures (e.g. PrivateNetwork).
* Can not share container images with CRI-O or other users
* Difficult to use additional stores for sharing content
* Does not work on NFS or parallel filesystem homedirs (e.g. [GPFS](https://www.ibm.com/support/knowledgecenter/en/SSFKCN/gpfs_welcome.html))