Setting lxc.conf with lxc.mount.auto: proc:rw gives unclear results

Sasha

Well-Known Member
Oct 18, 2018
118
4
58
Kazahstan
Look, guys, I have a privileged lxc and need some special isolated (not an overall host) kernel's params for it (software requirement).
It seems setting in lxc.conf lxc.mount.auto: proc:rw gives a solution, but I encountered several cases and I'd appreciate You to help me figuring out that and correctly solve my task.

Required lxc.xonf
Code:
...
lxc.mount.auto: proc:rw
lxc.sysctl.fs.file-max: 6815744
lxc.sysctl.kernel.sem: 250 32000 100 128
lxc.sysctl.kernel.shmmni: 4096
lxc.sysctl.kernel.shmall: 1073741824
lxc.sysctl.kernel.shmmax: 4398046511104
lxc.sysctl.net.core.rmem_default: 262144
lxc.sysctl.net.core.rmem_max: 4194304
lxc.sysctl.net.core.wmem_default: 262144
lxc.sysctl.net.core.wmem_max: 1048576
lxc.sysctl.kernel.panic_on_oops: 1
lxc.sysctl.net.ipv4.conf.all.rp_filter: 2
lxc.sysctl.net.ipv4.conf.default.rp_filter: 2
lxc.sysctl.fs.aio-max-nr: 1048576
lxc.sysctl.net.ipv4.ip_local_port_range: 9000 65500
What really set on lxc
Code:
*********** fs.file-max = 9223372036854775807
kernel.sem = 250 32000 100 128
kernel.shmmni = 4096
kernel.shmall = 1073741824
kernel.shmmax = 4398046511104
***********net.core.rmem_default = 212992
***********net.core.rmem_max = 212992
***********net.core.wmem_default = 212992
***********net.core.wmem_max = 212992
kernel.panic_on_oops = 1
net.ipv4.conf.all.rp_filter = 2
net.ipv4.conf.default.rp_filter = 2
fs.aio-max-nr = 1048576
net.ipv4.ip_local_port_range = 9000 65500
What remains in lxc.conf after host's reboot
Code:
lxc.mount.auto: proc:rw
lxc.sysctl.kernel.sem: 250 32000 100 128
lxc.sysctl.kernel.shmmni: 4096
lxc.sysctl.kernel.shmall: 1073741824
lxc.sysctl.kernel.shmmax: 4398046511104