From d008d64a8f431697f380eebf24890218fab6cd08 Mon Sep 17 00:00:00 2001 From: Rodrigo Campos Date: Tue, 19 Sep 2023 15:06:19 +0200 Subject: [PATCH] docs/userns: Clarify containerd 1.7 limitations Signed-off-by: Rodrigo Campos --- docs/user-namespaces/README.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/docs/user-namespaces/README.md b/docs/user-namespaces/README.md index 55e205755..70d45363d 100644 --- a/docs/user-namespaces/README.md +++ b/docs/user-namespaces/README.md @@ -74,9 +74,9 @@ Different containerd versions have different limitations too, those are highligh ### containerd 1.7 One limitation present in containerd 1.7 is that it needs to change the ownership of every file and -directory inside the container image, during Pod startup. This means it has a storage overhead (the -size of the container image is duplicated each time a pod is created) and can significantly impact -the container startup latency. +directory inside the container image, during Pod startup. This means it has a storage overhead, as +**the size of the container image is duplicated each time a pod is created**, and can significantly +impact the container startup latency, as doing such a copy takes time too. You can mitigate this limitation by switching `/sys/module/overlay/parameters/metacopy` to `Y`. This will significantly reduce the storage and performance overhead, as only the inode for each file of