kernel parameters for containers