diff --git a/doc/lxc.container.conf.sgml.in b/doc/lxc.container.conf.sgml.in index 69dd09a1b..733519f47 100644 --- a/doc/lxc.container.conf.sgml.in +++ b/doc/lxc.container.conf.sgml.in @@ -912,7 +912,7 @@ proc proc proc nodev,noexec,nosuid 0 0 the container's own cgroup into that directory. The container will be able to write to its own cgroup directory, but not the parents, since they - will be remounted read-only + will be remounted read-only. @@ -986,6 +986,12 @@ proc proc proc nodev,noexec,nosuid 0 0 + + If cgroup namespaces are enabled, then any + auto-mounting request will be ignored, since the container can + mount the filesystems itself, and automounting can confuse the + container init. + Note that if automatic mounting of the cgroup filesystem is enabled, the tmpfs under diff --git a/src/lxc/cgfs.c b/src/lxc/cgfs.c index d41e74c96..97a4e6d90 100644 --- a/src/lxc/cgfs.c +++ b/src/lxc/cgfs.c @@ -1356,6 +1356,9 @@ static bool cgroupfs_mount_cgroup(void *hdata, const char *root, int type) struct cgroup_process_info *info, *base_info; int r, saved_errno = 0; + if (cgns_supported()) + return true; + cgfs_d = hdata; if (!cgfs_d) return false;