export host-only net/core and net/ipv4 parameters to a container as read-only
export host-only net/core and net/ipv4 parameters to a container as read-only
For Oracle applications to run inside the Linux container, certain
net/core, net/ipv4 sysctl parameters need to be available.
On UEK2 and later kernels upto v3.5, these parameters were exported
as *read-only* to a container. However, in the newer kernels, upstream
has abandoned exporting it even in read-only mode.
To be able to support these applications unmodified on UEK4, we need to
restore that functionality. This patch does just that.
There is a plan to explore this further to come up with list of *must have*
parameters to be available inside containers and then propose upstream to
move them in the network namespace sysctls.
Orabug:
21880402
This patch is a backport from UEK3 (Orabug
21151210)
Acked-by: Guru Anbalagane <guru.anbalagane@oracle.com>
Signed-off-by: Thomas Tanaka <thomas.tanaka@oracle.com>