Skip to content
This repository has been archived by the owner on Apr 4, 2023. It is now read-only.
This repository has been archived by the owner on Apr 4, 2023. It is now read-only.

Docker on cgroup_v2 #20

Open
Open
@Xelef2000

Description

Currently, the freeipa-container does not correctly work(the server inside the container fails to start) with docker on cgroup_v2 enabled systems.
If one wants to use docker on a modern distribution, kernel parameters have to be modified to run it (see README).
This is an imperfect solution in my option.

Docker >= 20.10 supports cgroup_v2 but the server still fails to start inside the container.
As far as I can tell, this is due to systemd inside the container.
A solution exists, by enabling user-remapping for docker.
But when enabling this and using the default compose file from this repository, keycloak, vault-enterprise, prometheus, and k3s fail.
For k3s the userns_mode: host parameter needs to be set since user-remapping is not permitted with privileged containers. The other containers still fail to start, even when user-remapping is disabled for those containers with userns_mode: host because the containers file system will still be remapped.

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions