Is anyone aware of a documented list of kernel settings that can and can not be changed while inside a container?
This is what I have found so far:
Parameters that can be modified inside the container.
net.ipv4.ip_forward
net.ipv4.conf.default.proxy_arp
net.ipv4.conf.default.rp_filter
net.ipv4.conf.default.accept_source_route
kernel.msgmnb
kernel.msgmax
kernel.shmmax
kernel.shmall
net.ipv4.conf.all.arp_announce
Parameters that can NOT be modified inside the container.
kernel.sysrq
kernel.core_uses_pid
net.ipv4.tcp_syncookies
fs.file-max
net.core.rmem_max
net.core.wmem_max
net.core.rmem_default
net.core.wmem_default
net.core.optmem_max
net.core.netdev_max_backlog
Example: While inside the container doing something like this will not work:
# echo 262070 > /proc/sys/fs/file-max
# cat /proc/sys/fs/file-max
65535
#
I noticed if am on the hardware node I can change the settings by using "sysctl". But that will affect all the containers on the system.
Is there away to set certain settings for only specific containers and not all of them?