ipcMode property
The IPC resource namespace to use for the containers in the task. The valid
values are host
, task
, or none
. If
host
is specified, then all containers within the tasks that
specified the host
IPC mode on the same container instance
share the same IPC resources with the host Amazon EC2 instance. If
task
is specified, all containers within the specified task
share the same IPC resources. If none
is specified, then IPC
resources within the containers of a task are private and not shared with
other containers in a task or on the container instance. If no value is
specified, then the IPC resource namespace sharing depends on the Docker
daemon setting on the container instance. For more information, see IPC
settings in the Docker run reference.
If the host
IPC mode is used, be aware that there is a
heightened risk of undesired IPC namespace expose. For more information, see
Docker
security.
If you are setting namespaced kernel parameters using
systemControls
for the containers in the task, the following
will apply to your IPC resource namespace. For more information, see System
Controls in the Amazon Elastic Container Service Developer Guide.
-
For tasks that use the
host
IPC mode, IPC namespace relatedsystemControls
are not supported. -
For tasks that use the
task
IPC mode, IPC namespace relatedsystemControls
will apply to all containers within a task.
Implementation
final IpcMode? ipcMode;