18 lines
522 B
Plaintext
18 lines
522 B
Plaintext
# Nested podman inside the sandbox. Nested containers share the sandbox's
|
|
# netns by default so they see its DNS and loopback forwarders; either way they
|
|
# have no route out.
|
|
[containers]
|
|
netns = "host"
|
|
# The sandbox's /proc is masked and /proc/sys read-only, and it may not set
|
|
# hostnames or cgroups, so nested containers share those with it.
|
|
default_sysctls = []
|
|
volumes = ["/proc:/proc"]
|
|
utsns = "host"
|
|
ipcns = "host"
|
|
cgroupns = "host"
|
|
cgroups = "disabled"
|
|
|
|
[engine]
|
|
cgroup_manager = "cgroupfs"
|
|
events_logger = "file"
|