diff options
| author | Ed Santiago <santiago@redhat.com> | 2022-08-23 15:28:48 -0600 |
|---|---|---|
| committer | Ed Santiago <santiago@redhat.com> | 2022-08-24 06:58:20 -0600 |
| commit | 33ab7e846acb025dcc905634c6942d1dd6d0a4e2 (patch) | |
| tree | dcd9c4e71442d535fdc436f443c08317fa8dc913 /docs/source/markdown/options/ipc.md | |
| parent | 1bcceadca4850e8efd975d927a5586ad052207ac (diff) | |
| download | podman-33ab7e846acb025dcc905634c6942d1dd6d0a4e2.tar.gz podman-33ab7e846acb025dcc905634c6942d1dd6d0a4e2.tar.bz2 podman-33ab7e846acb025dcc905634c6942d1dd6d0a4e2.zip | |
Man pages: refactor common options: --ipc
This is not an easy one to review, sorry.
I went with the version from podman-create. The differences
against podman-run are subtle: apostrophes, whitespace, and
the arg description in the '####' line. Suggestion for review:
run hack/markdown-preprocess-review, then after you finish
with that, cd /tmp/markdown<TAB>/ipc and use your favorite
two-file diff tool to compare podman-run* against zzz*.
I did not even try to combine the podman-build one; that one
is too different.
Signed-off-by: Ed Santiago <santiago@redhat.com>
Diffstat (limited to 'docs/source/markdown/options/ipc.md')
| -rw-r--r-- | docs/source/markdown/options/ipc.md | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/docs/source/markdown/options/ipc.md b/docs/source/markdown/options/ipc.md new file mode 100644 index 000000000..699b64eec --- /dev/null +++ b/docs/source/markdown/options/ipc.md @@ -0,0 +1,12 @@ +#### **--ipc**=*ipc* + +Set the IPC namespace mode for a container. The default is to create +a private IPC namespace. + +- "": Use Podman's default, defined in containers.conf. +- **container:**_id_: reuses another container's shared memory, semaphores, and message queues +- **host**: use the host's shared memory, semaphores, and message queues inside the container. Note: the host mode gives the container full access to local shared memory and is therefore considered insecure. +- **none**: private IPC namespace, with /dev/shm not mounted. +- **ns:**_path_: path to an IPC namespace to join. +- **private**: private IPC namespace. += **shareable**: private IPC namespace with a possibility to share it with other containers. |