summaryrefslogtreecommitdiffstats
path: root/roles/podman
diff options
context:
space:
mode:
Diffstat (limited to 'roles/podman')
-rw-r--r--roles/podman/tasks/main.yml14
1 files changed, 10 insertions, 4 deletions
diff --git a/roles/podman/tasks/main.yml b/roles/podman/tasks/main.yml
index 87462880..bfd673ff 100644
--- a/roles/podman/tasks/main.yml
+++ b/roles/podman/tasks/main.yml
@@ -30,11 +30,17 @@
dest: "{{ ansible_facts['env']['HOME'] }}/.config/containers/containers.conf"
mode: "0644"
content: |
- [containers]
- cgroup_manager = "cgroupfs"
-
+ # Use systemd cgroup manager for proper integration with the host's
+ # resource management on cgroup v2 systems. Requires cgroup delegation
+ # (cpu, memory, pids controllers) in the user's systemd slice.
[engine]
- cgroup_manager = "cgroupfs"
+ cgroup_manager = "systemd"
+
+ # Lower the default pasta MTU to prevent intermittent TLS errors
+ # (SSL_ERROR_SYSCALL, unexpected eof) caused by packet fragmentation
+ # in rootless podman's pasta networking layer.
+ [network]
+ pasta_options = ["--mtu", "1280"]
- name: "Configure container registries"
become: true