89ba84c840
This systemd.exec setting will construct a new mount namespace for the docker daemon, and use slave shared-subtree mounts so that volume mounts propogate correctly into containers. By having an unshared mount namespace for the daemon it ensures that mount references are not held by other pids outside of the docker daemon. Frequently this can be seen in EBUSY or "device or resource busy" errors. Signed-off-by: Vincent Batts <vbatts@redhat.com> Upstream-commit: eb76cb2301fc883941bc4ca2d9ebc3a486ab8e0a Component: engine
15 lines
293 B
Desktop File
15 lines
293 B
Desktop File
[Unit]
|
|
Description=Docker Application Container Engine
|
|
Documentation=http://docs.docker.com
|
|
After=network.target docker.socket
|
|
Requires=docker.socket
|
|
|
|
[Service]
|
|
ExecStart=/usr/bin/docker -d -H fd://
|
|
MountFlags=slave
|
|
LimitNOFILE=1048576
|
|
LimitNPROC=1048576
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|