[pve-devel] [PATCH pve-container 1/1] fix #6897: document that systemd requires nesting

[Shannon Sterz]

On Wed Oct 22, 2025 at 12:03 PM CEST, Robert Obkircher wrote:
> Signed-off-by: Robert Obkircher <r.obkircher at proxmox.com>
> ---
>  src/PVE/LXC/Config.pm | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
>
> diff --git a/src/PVE/LXC/Config.pm b/src/PVE/LXC/Config.pm
> index 5d3749e..bea09ef 100644
> --- a/src/PVE/LXC/Config.pm
> +++ b/src/PVE/LXC/Config.pm
> @@ -445,7 +445,7 @@ my $features_desc = {
>          description => "Allow nesting."
>              . " Best used with unprivileged containers with additional id mapping."
>              . " Note that this will expose procfs and sysfs contents of the host"
> -            . " to the guest.",
> +            . " to the guest. That is also required by systemd to isolate services.",

nit: imo "This" would be more appropriate here than "That"

>      },
>      keyctl => {
>          optional => 1,

Other than that small nit above:

Reviewed-by: Shannon Sterz <s.sterz at proxmox.com>