1berry/docker-cli
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Tidy --isolation wording

Browse Source 
Signed-off-by: John Howard <jhoward@microsoft.com>
This commit is contained in:
John Howard 2017-01-03 16:17:55 -08:00 committed by Tibor Vass
parent 6c3e0ba560
commit 36274c35d5
1 changed files with 27 additions and 20 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

43
docs/reference/commandline/run.md
View File

@ -668,38 +668,45 @@ signal that will be sent to the container to exit. After timeout elapses the con
### Specify isolation technology for container (--isolation) ### Specify isolation technology for container (--isolation)
This option is useful in situations where you are running Docker containers on This option is useful in situations where you are running Docker containers on
Microsoft Windows. The `--isolation <value>` option sets a container's isolation Windows. The `--isolation <value>` option sets a container's isolation technology.
technology. On Linux, the only supported is the `default` option which uses On Linux, the only supported is the `default` option which uses
Linux namespaces. These two commands are equivalent on Linux: Linux namespaces. These two commands are equivalent on Linux:
``` ```bash
$ docker run -d busybox top $ docker run -d busybox top
$ docker run -d --isolation default busybox top $ docker run -d --isolation default busybox top
``` ```
On Microsoft Windows, can take any of these values: On Windows, `--isolation` can take one of these values:
| Value | Description | | Value | Description |
|-----------|---------------------------------------------------------------------------------------------------------------------------------------------------------------| |-----------|--------------------------------------------------------------------------------------------|
| `default` | Use the value specified by the Docker daemon's `--exec-opt` . If the `daemon` does not specify an isolation technology, Microsoft Windows uses `process` as its default value. | | `default` | Use the value specified by the Docker daemon's `--exec-opt` or system default (see below). |
| `process` | Namespace isolation only. | | `process` | Shared-kernel namespace isolation (not supported on Windows client operating systems). |
| `hyperv` | Hyper-V hypervisor partition-based isolation. | | `hyperv` | Hyper-V hypervisor partition-based isolation. |
On Windows, the default isolation for client is `hyperv`, and for server is The default isolation on Windows server operating systems is `process`. The default (and only supported)
`process`. Therefore when running on Windows server without a `daemon` option isolation on Windows client operating systems is `hyperv`. An attempt to start a container on a client
set, these two commands are equivalent: operating system with `--isolation process` will fail.
```
$ docker run -d --isolation default busybox top On Windows server, assuming the default configuration, these commands are equivalent
$ docker run -d --isolation process busybox top and result in `process` isolation:
```PowerShell
PS C:\> docker run -d microsoft/nanoserver powershell echo process
PS C:\> docker run -d --isolation default microsoft/nanoserver powershell echo process
PS C:\> docker run -d --isolation process microsoft/nanoserver powershell echo process
``` ```
If you have set the `--exec-opt isolation=hyperv` option on the Docker `daemon`, If you have set the `--exec-opt isolation=hyperv` option on the Docker `daemon`, or
if running on Windows server, any of these commands also result in `hyperv` isolation: are running against a Windows client-based daemon, these commands are equivalent and
result in `hyperv` isolation:
``` ```PowerShell
$ docker run -d --isolation default busybox top PS C:\> docker run -d microsoft/nanoserver powershell echo hyperv
$ docker run -d --isolation hyperv busybox top PS C:\> docker run -d --isolation default microsoft/nanoserver powershell echo hyperv
PS C:\> docker run -d --isolation hyperv microsoft/nanoserver powershell echo hyperv
``` ```
### Configure namespaced kernel parameters (sysctls) at runtime ### Configure namespaced kernel parameters (sysctls) at runtime