summaryrefslogtreecommitdiff
path: root/rootless.md
diff options
context:
space:
mode:
authorJosh Soref <jsoref@users.noreply.github.com>2020-12-21 17:48:43 -0500
committerJosh Soref <jsoref@users.noreply.github.com>2020-12-22 13:34:31 -0500
commit4fa1fce930f13d71f39b65bad3f46f61d961ab51 (patch)
tree3651ceec491317b6ab3aab81c7ab136eb0ff3c02 /rootless.md
parent07663f74c48d11732a3330248f837d5abf86fe9c (diff)
downloadpodman-4fa1fce930f13d71f39b65bad3f46f61d961ab51.tar.gz
podman-4fa1fce930f13d71f39b65bad3f46f61d961ab51.tar.bz2
podman-4fa1fce930f13d71f39b65bad3f46f61d961ab51.zip
Spelling
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
Diffstat (limited to 'rootless.md')
-rw-r--r--rootless.md2
1 files changed, 1 insertions, 1 deletions
diff --git a/rootless.md b/rootless.md
index 22b03e340..9edd5a437 100644
--- a/rootless.md
+++ b/rootless.md
@@ -18,7 +18,7 @@ can easily fail
* Some system unit configuration options do not work in the rootless container
* systemd fails to apply several options and failures are silently ignored (e.g. CPUShares, MemoryLimit). Should work on cgroup V2.
* Use of certain options will cause service startup failures (e.g. PrivateNetwork). The systemd services requiring `PrivateNetwork` can be made to work by passing `--cap-add SYS_ADMIN`, but the security implications should be carefully evaluated. In most cases, it's better to create an override.conf drop-in that sets `PrivateNetwork=no`. This also applies to containers run by root.
-* Can not share container images with CRI-O or other rootfull users
+* Can not share container images with CRI-O or other rootful users
* Difficult to use additional stores for sharing content
* Does not work on NFS or parallel filesystem homedirs (e.g. [GPFS](https://www.ibm.com/support/knowledgecenter/en/SSFKCN/gpfs_welcome.html))
* NFS and parallel filesystems enforce file creation on different UIDs on the server side and does not understand User Namespace.