docker
/
docs
mirror of https://github.com/docker/docs.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #1 from jpetazzo/2392-add-kernel-docs 

Add warning about SYS_BOOT capability with pre-3.4 kernels and pre-0.8 LXC.
This commit is contained in:
Mathieu Le Marec - Pasquet 2013-11-15 07:58:54 -08:00
parent b64ce8e33c 8145e57cee
commit 76ab8fa00f
1 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
docs/sources/installation/kernel.rst
View File

@ -25,6 +25,7 @@ If you cannot or do not want to use the "official" kernels,
here is some technical background about the features (both optional and here is some technical background about the features (both optional and
mandatory) that docker needs to run successfully. mandatory) that docker needs to run successfully.
Linux version 3.8 or above Linux version 3.8 or above
-------------------------- --------------------------
@ -39,6 +40,15 @@ The symptoms include:
- kernel crash causing the machine to freeze for a few minutes, or even - kernel crash causing the machine to freeze for a few minutes, or even
completely. completely.
Additionally, kernels prior 3.4 did not implement ``reboot_pid_ns``,
which means that the ``reboot()`` syscall could reboot the host machine,
instead of terminating the container. To work around that problem,
LXC userland tools (since version 0.8) automatically drop the ``SYS_BOOT``
capability when necessary. Still, if you run a pre-3.4 kernel with pre-0.8
LXC tools, be aware that containers can reboot the whole host! This is
not something that Docker wants to address in the short term, since you
shouldn't use kernels prior 3.8 with Docker anyway.
While it is still possible to use older kernels for development, it is While it is still possible to use older kernels for development, it is
really not advised to do so. really not advised to do so.