docker-install icon indicating copy to clipboard operation
docker-install copied to clipboard

[Docker Rootless] Container fails to run when /proc hidepid=2 is set in fstab file

Open ccpu opened this issue 3 years ago • 1 comments

It appears that Docker rootless needs to see other processes in order to function properly. I encountered this problem while hardening a Linux machine. setting hidepid=2 will stop container to run. What is a workaround that still maintains the hidepid=2 option?

ccpu avatar Nov 27 '22 21:11 ccpu

already solved by someone: create docker.json file and add {"exec-opts": ["native.cgroupdriver=cgroupfs"]} use XDG_CONFIG_HOME env variable to point to that file if not present.

jderriks avatar Sep 25 '24 12:09 jderriks