[systemd-devel] systemd-sysctl: improvement in LXC containers

Cameron Norman camerontnorman at gmail.com
Fri Oct 30 11:00:56 PDT 2015


The sysctl service will not apply net rules when /proc/sys is ro but
/proc/sys/net is rw. This occurs under LXC containers.

Perhaps a secondary service which only runs for the net tree should be used
with `ConditionPathIsReadWrite=/proc/sys/net/` and
`ConditionPathIsReadWrite=!/proc/sys/`.

The ExecStart would then be `/usr/lib/systemd/systemd-sysctl --prefix net`.

Problem identified and worked around here:
https://github.com/lxc/lxc/pull/683

Thank you,
--
Cameron Norman
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freedesktop.org/archives/systemd-devel/attachments/20151030/d4569897/attachment.html>


More information about the systemd-devel mailing list