summaryrefslogtreecommitdiff
path: root/rootless.md
diff options
context:
space:
mode:
authorMichal Sekletar <msekleta@redhat.com>2019-09-09 16:28:47 +0200
committerMichal Sekletar <msekleta@redhat.com>2019-09-18 14:19:50 +0200
commitf9ebc8394e9125e49ae35a2b4231f4ed58096f8c (patch)
treeb4465aad9b6bf54874dda618f0ad8147af038865 /rootless.md
parent143caa98bf07eef1a4d46da2cc56603a3ef739b8 (diff)
downloadpodman-f9ebc8394e9125e49ae35a2b4231f4ed58096f8c.tar.gz
podman-f9ebc8394e9125e49ae35a2b4231f4ed58096f8c.tar.bz2
podman-f9ebc8394e9125e49ae35a2b4231f4ed58096f8c.zip
Add a note on systemd shortcomings in rootless containers
Document that it is expected for some of the systemd API's to not work correctly/at all in rootless containers. Fixes: #3957 Signed-off-by: Michal Sekletar <msekleta@redhat.com>
Diffstat (limited to 'rootless.md')
-rw-r--r--rootless.md3
1 files changed, 3 insertions, 0 deletions
diff --git a/rootless.md b/rootless.md
index 960430d54..53463dccc 100644
--- a/rootless.md
+++ b/rootless.md
@@ -14,6 +14,9 @@ can easily fail
* No cgroup V1 Support
* cgroup V1 does not safely support cgroup delegation.
* However, cgroup V2 provides cgroup delegation and is available on Fedora starting with version 29 and other Linux distributions.
+* Some systemd's unit configuration options do not work in the rootless container
+ * systemd fails to apply several options and failures are silently ignored (e.g. CPUShares, MemoryLimit).
+ * Use of certain options will cause service startup failures (e.g. PrivateNetwork).
* Can not share container images with CRI-O or other users
* Difficult to use additional stores for sharing content
* Does not work on NFS or parallel filesystem homedirs (e.g. [GPFS](https://www.ibm.com/support/knowledgecenter/en/SSFKCN/gpfs_welcome.html))