我正在尝试修改kernel.core_pattern,但我无法修改它,因为它是只读的。
我试过了:
> echo 'kernel.core_pattern=/tmp/core-%e.%p.%h.%t' >> /etc/sysctl.conf
> Reload sysctl: sysctl --system
Applying /etc/sysctl.conf ... sysctl: setting key "kernel.core_pattern": Read-only file system cat /proc/sys/kernel/core_pattern
我也无法将其添加到pod yaml中:
spec:
securityContext:
sysctls:
- name: kernel.core_pattern
value: "/tmp/core-%e.%p.%h.%t"
我一直收到这个:SysctlForbidden
我还创建了一个PodSecurityPolicy:
apiVersion: policy/v1beta1
kind: PodSecurityPolicy
metadata:
name: sysctl-psp
spec:
privileged: false # Don't allow privileged pods!
# The rest fills in some required fields.
seLinux:
rule: RunAsAny
supplementalGroups:
rule: RunAsAny
runAsUser:
rule: RunAsAny
fsGroup:
rule: RunAsAny
allowedUnsafeSysctls:
- kernel.*
还是不走运。
有什么建议吗?
发布于 2021-01-30 00:28:21
但是,由于生成的核心文件的大小为零,因此这是一种临时的解决办法。
https://stackoverflow.com/questions/65751154
复制相似问题