docs: containers.conf: CHROOT
Correct a sentence stating that Podman would not run with CHROOT. It only did for a short period of time but CHROOT had to be added back since many uses (e.g., in-container builds) depend on it. Signed-off-by: Valentin Rothberg <vrothberg@redhat.com>
This commit is contained in:
parent
0ddd9bf082
commit
e4b4d65199
|
|
@ -111,8 +111,7 @@ default_capabilities = [
|
||||||
```
|
```
|
||||||
|
|
||||||
Note, by default container engines using containers.conf, run with less
|
Note, by default container engines using containers.conf, run with less
|
||||||
capabilities than Docker. Docker runs additionally with "AUDIT_WRITE", "MKNOD",
|
capabilities than Docker. Docker runs additionally with "AUDIT_WRITE", "MKNOD" and "NET_RAW". If you need to add one of these capabilities for a
|
||||||
"NET_RAW", "CHROOT". If you need to add one of these capabilities for a
|
|
||||||
particular container, you can use the --cap-add option or edit your system's containers.conf.
|
particular container, you can use the --cap-add option or edit your system's containers.conf.
|
||||||
|
|
||||||
**default_sysctls**=[]
|
**default_sysctls**=[]
|
||||||
|
|
|
||||||
Loading…
Reference in New Issue