From f9ebc8394e9125e49ae35a2b4231f4ed58096f8c Mon Sep 17 00:00:00 2001 From: Michal Sekletar Date: Mon, 9 Sep 2019 16:28:47 +0200 Subject: Add a note on systemd shortcomings in rootless containers Document that it is expected for some of the systemd API's to not work correctly/at all in rootless containers. Fixes: #3957 Signed-off-by: Michal Sekletar --- rootless.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/rootless.md b/rootless.md index 960430d54..53463dccc 100644 --- a/rootless.md +++ b/rootless.md @@ -14,6 +14,9 @@ can easily fail * No cgroup V1 Support * cgroup V1 does not safely support cgroup delegation. * However, cgroup V2 provides cgroup delegation and is available on Fedora starting with version 29 and other Linux distributions. +* Some systemd's unit configuration options do not work in the rootless container + * systemd fails to apply several options and failures are silently ignored (e.g. CPUShares, MemoryLimit). + * Use of certain options will cause service startup failures (e.g. PrivateNetwork). * Can not share container images with CRI-O or other users * Difficult to use additional stores for sharing content * Does not work on NFS or parallel filesystem homedirs (e.g. [GPFS](https://www.ibm.com/support/knowledgecenter/en/SSFKCN/gpfs_welcome.html)) -- cgit v1.2.3-54-g00ecf