From daf527ccaf8b4022c40790cab741b2889a3cbcf3 Mon Sep 17 00:00:00 2001 From: Akihiro Suda Date: Thu, 6 May 2021 20:14:58 +0900 Subject: [PATCH] k3s-rootless.service: use fuse-overlayfs snapshotter Kernel 5.11 added support for rootless overlayfs, but still incompatible with SELinux, so we should always use fuse-overlayfs. Related: moby/moby issue 42333 Signed-off-by: Akihiro Suda --- k3s-rootless.service | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/k3s-rootless.service b/k3s-rootless.service index 4ca84aea0f..5879e2f8f2 100644 --- a/k3s-rootless.service +++ b/k3s-rootless.service @@ -26,7 +26,7 @@ Description=k3s (Rootless) Environment=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin # NOTE: Don't try to run `k3s server --rootless` on a terminal, as it doesn't enable cgroup v2 delegation. # If you really need to try it on a terminal, prepend `systemd-run --user -p Delegate=yes --tty` to create a systemd scope. -ExecStart=/usr/local/bin/k3s server --rootless +ExecStart=/usr/local/bin/k3s server --rootless --snapshotter=fuse-overlayfs ExecReload=/bin/kill -s HUP $MAINPID TimeoutSec=0 RestartSec=2