Signed-off-by: ChristoperBiscardi <chris@docker.com>
| ... | ... |
@@ -228,13 +228,11 @@ Whether a container can talk to the world is governed by two factors. |
| 228 | 228 |
Docker will go set `ip_forward` to `1` for you when the server |
| 229 | 229 |
starts up. To check the setting or turn it on manually: |
| 230 | 230 |
|
| 231 |
- ``` |
|
| 232 |
- $ cat /proc/sys/net/ipv4/ip_forward |
|
| 233 |
- 0 |
|
| 234 |
- $ echo 1 > /proc/sys/net/ipv4/ip_forward |
|
| 235 |
- $ cat /proc/sys/net/ipv4/ip_forward |
|
| 236 |
- 1 |
|
| 237 |
- ``` |
|
| 231 |
+ $ cat /proc/sys/net/ipv4/ip_forward |
|
| 232 |
+ 0 |
|
| 233 |
+ $ echo 1 > /proc/sys/net/ipv4/ip_forward |
|
| 234 |
+ $ cat /proc/sys/net/ipv4/ip_forward |
|
| 235 |
+ 1 |
|
| 238 | 236 |
|
| 239 | 237 |
Many using Docker will want `ip_forward` to be on, to at |
| 240 | 238 |
least make communication *possible* between containers and |
| ... | ... |
@@ -463,9 +461,7 @@ your host's interfaces you should set `accept_ra` to `2`. Otherwise IPv6 |
| 463 | 463 |
enabled forwarding will result in rejecting Router Advertisements. E.g., if you |
| 464 | 464 |
want to configure `eth0` via Router Advertisements you should set: |
| 465 | 465 |
|
| 466 |
- ``` |
|
| 467 | 466 |
$ sysctl net.ipv6.conf.eth0.accept_ra=2 |
| 468 |
- ``` |
|
| 469 | 467 |
|
| 470 | 468 |
 |
| 471 | 469 |
|
| ... | ... |
@@ -475,7 +475,6 @@ By default, the container will be able to `read`, `write`, and `mknod` these dev |
| 475 | 475 |
This can be overridden using a third `:rwm` set of options to each `--device` flag: |
| 476 | 476 |
|
| 477 | 477 |
|
| 478 |
-``` |
|
| 479 | 478 |
$ sudo docker run --device=/dev/sda:/dev/xvdc --rm -it ubuntu fdisk /dev/xvdc |
| 480 | 479 |
|
| 481 | 480 |
Command (m for help): q |
| ... | ... |
@@ -489,7 +488,6 @@ This can be overridden using a third `:rwm` set of options to each `--device` fl |
| 489 | 489 |
|
| 490 | 490 |
$ sudo docker run --device=/dev/sda:/dev/xvdc:m --rm -it ubuntu fdisk /dev/xvdc |
| 491 | 491 |
fdisk: unable to open /dev/xvdc: Operation not permitted |
| 492 |
-``` |
|
| 493 | 492 |
|
| 494 | 493 |
In addition to `--privileged`, the operator can have fine grain control over the |
| 495 | 494 |
capabilities using `--cap-add` and `--cap-drop`. By default, Docker has a default |