diff options
| author | OpenShift Merge Robot <openshift-merge-robot@users.noreply.github.com> | 2020-02-13 02:34:42 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2020-02-13 02:34:42 +0100 |
| commit | a65f6b888ac4df13efec70c0d86c61af9090e3b7 (patch) | |
| tree | 81c6598455eddfb6c4861265e76596b1bf561b5d /docs | |
| parent | 2281cbdd6d5b1b7bca99a605ffc8625b6bee7eb3 (diff) | |
| parent | d3260738d330b6141fec5f11f1a3a91f40365018 (diff) | |
| download | podman-a65f6b888ac4df13efec70c0d86c61af9090e3b7.tar.gz podman-a65f6b888ac4df13efec70c0d86c61af9090e3b7.tar.bz2 podman-a65f6b888ac4df13efec70c0d86c61af9090e3b7.zip | |
Merge pull request #5152 from QiWang19/device-cgroup-rule
support device-cgroup-rule
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/source/markdown/podman-create.1.md | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/docs/source/markdown/podman-create.1.md b/docs/source/markdown/podman-create.1.md index 977382e61..ca38be6a1 100644 --- a/docs/source/markdown/podman-create.1.md +++ b/docs/source/markdown/podman-create.1.md @@ -209,6 +209,13 @@ Note: if the user only has access rights via a group then accessing the device from inside a rootless container will fail. The `crun` runtime offers a workaround for this by adding the option `--annotation run.oci.keep_original_groups=1`. +**--device-cgroup-rule**="type major:minor mode" + +Add a rule to the cgroup allowed devices list. The rule is expected to be in the format specified in the Linux kernel documentation (Documentation/cgroup-v1/devices.txt): + - type: a (all), c (char), or b (block); + - major and minor: either a number, or * for all; + - mode: a composition of r (read), w (write), and m (mknod(2)). + **--device-read-bps**=*path* Limit read rate (bytes per second) from a device (e.g. --device-read-bps=/dev/sda:1mb) |