[systemd-devel] systemd-sysctl: improvement in LXC containers

Andrei Borzenkov arvidjaar at gmail.com
Sat Oct 31 00:14:58 PDT 2015


30.10.2015 21:00, Cameron Norman пишет:
> The sysctl service will not apply net rules when /proc/sys is ro but
> /proc/sys/net is rw. This occurs under LXC containers.
>
> Perhaps a secondary service which only runs for the net tree should be used
> with `ConditionPathIsReadWrite=/proc/sys/net/` and
> `ConditionPathIsReadWrite=!/proc/sys/`.
>

But this does not really scale. May be it should simply drop condition 
and proceed with settings that can be done.

> The ExecStart would then be `/usr/lib/systemd/systemd-sysctl --prefix net`.
>
> Problem identified and worked around here:
> https://github.com/lxc/lxc/pull/683
>
> Thank you,
> --
> Cameron Norman
>
>
>
> _______________________________________________
> systemd-devel mailing list
> systemd-devel at lists.freedesktop.org
> http://lists.freedesktop.org/mailman/listinfo/systemd-devel
>



More information about the systemd-devel mailing list