|
...
|
...
|
@@ -235,7 +235,7 @@ By default, Docker containers are "unprivileged" and cannot, for
|
|
235
|
235
|
example, run a Docker daemon inside a Docker container. This is because
|
|
236
|
236
|
by default a container is not allowed to access any devices, but a
|
|
237
|
237
|
"privileged" container is given access to all devices (see [lxc-template.go](
|
|
238
|
|
-https://github.com/dotcloud/docker/blob/master/execdriver/lxc/lxc_template.go)
|
|
|
238
|
+https://github.com/dotcloud/docker/blob/master/daemon/execdriver/lxc/lxc_template.go)
|
|
239
|
239
|
and documentation on [cgroups devices](
|
|
240
|
240
|
https://www.kernel.org/doc/Documentation/cgroups/devices.txt)).
|
|
241
|
241
|
|
|
...
|
...
|
@@ -250,7 +250,7 @@ If the Docker daemon was started using the `lxc` exec-driver
|
|
250
|
250
|
(`docker -d --exec-driver=lxc`) then the operator can also specify LXC options
|
|
251
|
251
|
using one or more `--lxc-conf` parameters. These can be new parameters or
|
|
252
|
252
|
override existing parameters from the [lxc-template.go](
|
|
253
|
|
-https://github.com/dotcloud/docker/blob/master/execdriver/lxc/lxc_template.go).
|
|
|
253
|
+https://github.com/dotcloud/docker/blob/master/daemon/execdriver/lxc/lxc_template.go).
|
|
254
|
254
|
Note that in the future, a given host's docker daemon may not use LXC, so this
|
|
255
|
255
|
is an implementation-specific configuration meant for operators already
|
|
256
|
256
|
familiar with using LXC directly.
|