The sysctl service will not apply net rules when /proc/sys is ro but /proc/sys/net is rw. This occurs under LXC containers.
Perhaps a secondary service which only runs for the net tree should be used with `ConditionPathIsReadWrite=/proc/sys/net/` and `ConditionPathIsReadWrite=!/proc/sys/`. The ExecStart would then be `/usr/lib/systemd/systemd-sysctl --prefix net`. Problem identified and worked around here: https://github.com/lxc/lxc/pull/683 Thank you, -- Cameron Norman
_______________________________________________ systemd-devel mailing list [email protected] http://lists.freedesktop.org/mailman/listinfo/systemd-devel
