Re: [PATCH 3/3] ipc namespace: copy settings from parent namespace
From: Manfred Spraul
Date: Tue Aug 12 2014 - 16:39:16 EST
On 08/12/2014 12:37 PM, Eric W. Biederman wrote:
Manfred Spraul <manfred@xxxxxxxxxxxxxxxx> writes:
I know this is the wrong answer, but:
Sigh. Patches for new code during the merge window. It is a really
rotten time to look at new things.
Right now, each new IPC namespace starts with the kernel default values.
In principle I agree.
This means that changes that were made to the limits get overwritten.
With this patch, a new namespace inherits the settings from the parent
namespace, which is less surprising.
In practice I have to ask what have you done to survey applications
that use the ipc namespace to see if they will break with this change in
What I find are problems caused by the current behavior.
The e.g. sysvshm limits were not updated for many years and many
applications only ran properly if sysvshm limits are increased.
(now the defaults are large, but only since ~3.15)
Increasing is simple: sysctl kernel.shmmax=<>, but somehow this
must happen inside the container.
Right now, the most common approach seems to be the solution from the
Just marc /proc as read-write and do it manually.
With the patch, the kernel would propagate the value from parent to child.
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/