summaryrefslogtreecommitdiffstats
path: root/roles/podman/tasks
diff options
context:
space:
mode:
authorAhmed Abdelhalim <[email protected]>2026-02-06 22:16:30 +0100
committerAhmed Abdelhalim <[email protected]>2026-02-06 22:16:30 +0100
commitb869f1a55f431ffdaaa49b3ec789c533881f3a0a (patch)
tree3fe815d9a2e00c1b68ce798402a5cf5b78e1f0c5 /roles/podman/tasks
parentee05af3f430a7b15196c9b9f2d97d8a6b8309802 (diff)
Fix intermitten network issues with local testing
Co-authored-by: Claude.ai
Diffstat (limited to 'roles/podman/tasks')
-rw-r--r--roles/podman/tasks/main.yml14
1 files changed, 10 insertions, 4 deletions
diff --git a/roles/podman/tasks/main.yml b/roles/podman/tasks/main.yml
index 87462880..bfd673ff 100644
--- a/roles/podman/tasks/main.yml
+++ b/roles/podman/tasks/main.yml
@@ -30,11 +30,17 @@
dest: "{{ ansible_facts['env']['HOME'] }}/.config/containers/containers.conf"
mode: "0644"
content: |
- [containers]
- cgroup_manager = "cgroupfs"
-
+ # Use systemd cgroup manager for proper integration with the host's
+ # resource management on cgroup v2 systems. Requires cgroup delegation
+ # (cpu, memory, pids controllers) in the user's systemd slice.
[engine]
- cgroup_manager = "cgroupfs"
+ cgroup_manager = "systemd"
+
+ # Lower the default pasta MTU to prevent intermittent TLS errors
+ # (SSL_ERROR_SYSCALL, unexpected eof) caused by packet fragmentation
+ # in rootless podman's pasta networking layer.
+ [network]
+ pasta_options = ["--mtu", "1280"]
- name: "Configure container registries"
become: true