I think the check should automatically detect when it should not apply (in this case, inside a container where /proc/sys/net/netfilter/nf_conntrack_{count,max} do not exist) and return an appropriate value. My initial inclination is to return 3 (UNKNOWN), with a second preference of 0 (OK). Do you have any thoughts/preferences regarding this?
I think the check should automatically detect when it should not apply (in this case, inside a container where /proc/sys/ net/netfilter/ nf_conntrack_ {count, max} do not exist) and return an appropriate value. My initial inclination is to return 3 (UNKNOWN), with a second preference of 0 (OK). Do you have any thoughts/ preferences regarding this?