Added capabilities and sysctl options for fping in case of rootless containers

This commit is contained in:
Alexey Pustovalov 2023-12-14 22:12:51 +09:00
parent 871b5c49d4
commit 68a37857a1

View File

@ -43,11 +43,14 @@ services:
# devices: # devices:
# - "/dev/ttyUSB0:/dev/ttyUSB0" # - "/dev/ttyUSB0:/dev/ttyUSB0"
stop_grace_period: 30s stop_grace_period: 30s
# cap_add:
# - "NET_RAW"
sysctls: sysctls:
- net.ipv4.ip_local_port_range=1024 64999 - net.ipv4.ip_local_port_range=1024 64999
- net.ipv4.conf.all.accept_redirects=0 - net.ipv4.conf.all.accept_redirects=0
- net.ipv4.conf.all.secure_redirects=0 - net.ipv4.conf.all.secure_redirects=0
- net.ipv4.conf.all.send_redirects=0 - net.ipv4.conf.all.send_redirects=0
# - net.ipv4.ping_group_range=0 1995
labels: labels:
com.zabbix.company: "Zabbix LLC" com.zabbix.company: "Zabbix LLC"
com.zabbix.component: "zabbix-server" com.zabbix.component: "zabbix-server"
@ -128,11 +131,14 @@ services:
zbx_net_backend: zbx_net_backend:
zbx_net_frontend: zbx_net_frontend:
stop_grace_period: 30s stop_grace_period: 30s
# cap_add:
# - "NET_RAW"
sysctls: sysctls:
- net.ipv4.ip_local_port_range=1024 64999 - net.ipv4.ip_local_port_range=1024 64999
- net.ipv4.conf.all.accept_redirects=0 - net.ipv4.conf.all.accept_redirects=0
- net.ipv4.conf.all.secure_redirects=0 - net.ipv4.conf.all.secure_redirects=0
- net.ipv4.conf.all.send_redirects=0 - net.ipv4.conf.all.send_redirects=0
# - net.ipv4.ping_group_range=0 1995
labels: labels:
com.zabbix.company: "Zabbix LLC" com.zabbix.company: "Zabbix LLC"
com.zabbix.component: "zabbix-proxy" com.zabbix.component: "zabbix-proxy"