_sysctl.rb 408 B

1234567891011121314151617
  1. #
  2. # Cookbook:: podman
  3. # Recipe:: default
  4. #
  5. # Copyright:: 2022, The Authors, All Rights Reserved.
  6. sysctl 'kernel.unprivileged_userns_clone' do
  7. value 1
  8. comment 'Allow ns creation'
  9. only_if { ::File.exists?('/proc/sys/kernel/unprivileged_userns_clone') }
  10. end
  11. sysctl 'net.ipv4.ping_group_range' do
  12. value '0 2000000'
  13. comment 'Enable unprivileged ping'
  14. not_if { node['virtualization']['system'] }
  15. end