I pasted the wrong output in my email. The shm settings in my container are actually:<div><br></div><div><div>[root@ct1 ~]# sysctl -a|grep shm</div><div>kernel.shmmax = 33554432</div><div>kernel.shmall = 2097152</div><div>
kernel.shmmni = 4096</div></div><div><br></div><div>Thanks,</div><div>Jan</div><div><br></div><div><div class="gmail_quote">On Mon, May 28, 2012 at 11:55 AM, Jan Den Ouden <span dir="ltr"><<a href="mailto:jan.ml@denouden.info" target="_blank">jan.ml@denouden.info</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi,<div><br></div><div>I'm using kernel 3.2.0 on Linux Mint 13. Inside a container I am running an application which needs a lot of shared memory. On my host I have </div>
<div><br></div><div><div>lenovo memory # sysctl -a|grep shm</div>
<div>kernel.shmmax = 4398046511104</div><div>kernel.shmall = 1073741824</div><div>kernel.shmmni = 4096</div></div><div><br></div><div>However, in my container I see:</div><div><br></div><div><div>lenovo memory # sysctl -a|grep shm</div>
<div>kernel.shmmax = 4398046511104</div><div>kernel.shmall = 1073741824</div><div>kernel.shmmni = 4096</div></div><div><br></div><div>I don't understand where these much lower settings come from. Is this because the IPC subsystem is isolated? When I try to change the setting in the container it fails:</div>
<div><br></div><div><div>[root@ct1 ~]# sysctl -w kernel.shmmax=4398046511104</div><div>error: permission denied on key 'kernel.shmmax'</div></div><div><br></div><div>My lxc config file does not contain any entries to drop capabilities. What do I need to do to enable change kernel parameters inside the container?</div>
<div><br></div><div>Many thanks for any help!</div><span class="HOEnZb"><font color="#888888"><div><br></div><div>Jan</div><div><br></div>
</font></span></blockquote></div><br></div>