github.com/alibaba/sealer@v0.8.6-0.20220430115802-37a2bdaa8173/pkg/filesystem/rootfs/docker/etc/docker.service (about) 1 [Unit] 2 Description=Docker Application Container Engine 3 Documentation=https://docs.docker.com 4 After=network.target 5 6 [Service] 7 Type=notify 8 # the default is not to use systemd for cgroups because the delegate issues still 9 # exists and systemd currently does not support the cgroup feature set required 10 # for containers run by docker 11 ExecStart=/usr/bin/dockerd 12 ExecStartPost=/usr/sbin/iptables -P FORWARD ACCEPT 13 ExecReload=/bin/kill -s HUP $MAINPID 14 # Having non-zero Limit*s causes performance problems due to accounting overhead 15 # in the kernel. We recommend using cgroups to do container-local accounting. 16 LimitNOFILE=infinity 17 LimitNPROC=infinity 18 LimitCORE=infinity 19 # Uncomment TasksMax if your systemd version supports it. 20 # Only systemd 226 and above support this version. 21 #TasksMax=infinity 22 TimeoutStartSec=0 23 # set delegate yes so that systemd does not reset the cgroups of docker containers 24 Delegate=yes 25 # kill only the docker process, not all processes in the cgroup 26 KillMode=process 27 28 [Install] 29 WantedBy=multi-user.target