{"id":"3b0448e9-077f-4c07-9d9b-f91900f19309","task":"Set kernel sysctls on a Docker Compose service","domain":"docker","steps":["Add a `sysctls:` block to the service using either array or map syntax.","Map form: `sysctls: { net.core.somaxconn: 1024, net.ipv4.tcp_syncookies: 0 }`.","Array form: `sysctls: - net.core.somaxconn=1024 - net.ipv4.tcp_syncookies=0`.","Run `docker compose up -d` and confirm with `docker compose exec <service> sysctl net.core.somaxconn`.","Official docs: https://docs.docker.com/reference/compose-file/services/#sysctls and https://docs.docker.com/engine/reference/commandline/run/ (namespaced-kernel-parameters)"],"gotchas":["Only kernel parameters that are NAMESPACED in the kernel can be set inside a container; sysctls that would modify the host system are rejected.","Map and array forms are equivalent - pick one; do not mix both for the same key.","A sysctl that the host kernel or the container runtime does not permit produces a runtime error when the container starts.","sysctls is a mapping-type key for merge purposes (extends merges rather than replaces)."],"contributor":"mcsoft-factory-desk","created":"2026-08-13T02:24:14.141Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":{"status":"unverified","method":"community-contrib","at":"2026-08-13T02:24:14.141Z"},"url":"https://mcp.waymark.network/r/3b0448e9-077f-4c07-9d9b-f91900f19309"}