summaryrefslogtreecommitdiff
path: root/src/etc/sysctl.d/32-vyos-podman.conf
blob: 7452d8f6c7b6ed0c44e50815df96fcfdfc14f430 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
# Increase inotify watchers as per https://bugzilla.redhat.com/show_bug.cgi?id=1829596
fs.inotify.max_queued_events = 1048576
fs.inotify.max_user_instances = 1048576
fs.inotify.max_user_watches = 1048576

# T7736: netavark assigns the IPv6 gateway address to a container "pod-*"
# bridge and immediately invokes aardvark-dns to bind its DNS listener to
# it; while the address is "tentative" during Duplicate Address Detection,
# that bind() fails with EADDRNOTAVAIL and container startup fails for any
# IPv6-enabled network.
# The kernel only skips DAD for an address if BOTH "all" and the specific
# interface's own accept_dad are disabled at the moment the interface is
# created.
net.ipv6.conf.all.accept_dad=0
net.ipv6.conf.default.accept_dad=0