use final names for cgroup isolation

See: lxc/lxc#3353 Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
raboof · Apr 6, 2020 · e532a36 · e532a36
1 parent 6973a21
commit e532a36
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/PVE/LXC.pm b/src/PVE/LXC.pm
@@ -596,8 +596,8 @@ sub update_lxc_config {
 	# simply move the monitor outside:
 	$raw .= "lxc.cgroup.dir.monitor = lxc.monitor/$vmid\n";
 	# cgroup namespace separation for stronger limits:
-	$raw .= "lxc.cgroup.dir.payload = lxc/$vmid\n";
-	$raw .= "lxc.cgroup.dir.namespace = ns\n";
+	$raw .= "lxc.cgroup.dir.container = lxc/$vmid\n";
+	$raw .= "lxc.cgroup.dir.container.inner = ns\n";
     }
 
     die "missing 'arch' - internal error" if !$conf->{arch};