Enabling hardlink/softlink protections

[andrew-welker]

We have a container that we run that requires fs.protected_hardlinks be set to 1. Currently, I have the container running on a Talos cluster, but the container is failing because it's detecting that hard link/soft link protections are disabled.

1. Are these protections enabled by default on a Talos machine and my container is not detecting it correctly?

2. If the hard link/soft link protections are not enabled, how can I enable them?

[smira]

1. https://sysctl-explorer.net/fs/protected_hardlinks/
2. https://www.talos.dev/v1.10/reference/configuration/v1alpha1/config/#Config.machine, see .machine.sysctls