# Nested podman inside the sandbox. Nested containers share the sandbox's
# netns by default so they see its DNS and loopback forwarders; either way they
# have no route out.
[containers]
netns = "host"
# The sandbox's /proc is masked and /proc/sys read-only, and it may not set
# hostnames or cgroups, so nested containers share those with it.
default_sysctls = []
volumes = ["/proc:/proc"]
utsns = "host"
ipcns = "host"
cgroupns = "host"
cgroups = "disabled"

[engine]
cgroup_manager = "cgroupfs"
events_logger = "file"