Bug 1287286 - Need a way to differentiate which sysctls are per namespace?
Need a way to differentiate which sysctls are per namespace?
Status: NEW
Product: Fedora
Classification: Fedora
Component: kernel (Show other bugs)
Unspecified Unspecified
unspecified Severity unspecified
: ---
: ---
Assigned To: Kernel Maintainer List
Fedora Extras Quality Assurance
Depends On:
Blocks: 1287287
  Show dependency treegraph
Reported: 2015-12-01 16:45 EST by Daniel Walsh
Modified: 2017-12-19 13:53 EST (History)
7 users (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
: 1287287 (view as bug list)
Last Closed:
Type: Bug
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)

  None (edit)
Description Daniel Walsh 2015-12-01 16:45:12 EST
In Docker we want to allow users to specify container specific sysctls, the problem we have is there is no way to figure out which sysctls are per namespace as opposed to which ones are for the entire system.

We need a way to ask the kernel this, or to pass a flag to say fail to set it if this is a global sysctl.
Comment 1 Neil Horman 2017-12-19 13:00:47 EST
what about a mount option to hide any sysctls that are not per namespace?
Comment 2 Neil Horman 2017-12-19 13:53:19 EST
actually, scratch that, theres no real way to differentiate per-namespace vs global sysctls in the kernel.  that information is codified in the code that stores/reads the sysctl data.  I can keep looking at other ways to do this, but there may not be much hope here

Note You need to log in before you can comment on or make changes to this bug.