Hi, conjaroy <conja...@gmail.com> skribis:
> A separate nscd per container also seems like a reasonable option. However, > for the sake of machines hosting many long-lived containers, perhaps we > should consider reducing the cache size: currently it's 32MB for each name > service type, with an expiration of 12-24 hours: > > https://git.savannah.gnu.org/cgit/guix.git/tree/gnu/services/base.scm?id=1042d269a723360a02b19a2baafef1e24a3bfc73#n1115 Good point. In that case, we can have ‘containerized-operating-system’ provide its own NSS configuration with a reduced cache size (or without cache since there’s caching happening on the host for host name lookups, for instance). WDYT? Would you like to give it a try? Thanks, Ludo’.