m/n/k/containerd: change default runtime to runc
For high-security usecases it might still make sense to force gVisor,
but generally people expect runc as the default runtime. gVisor can
still be used by specifying a runtimeclass in the pod.
Change-Id: Idc02275fd00c2a7dff3ce6949268294afa5644eb
Reviewed-on: https://review.monogon.dev/c/monogon/+/1839
Tested-by: Jenkins CI
Reviewed-by: Leopold Schabel <leo@monogon.tech>
diff --git a/metropolis/node/kubernetes/containerd/config.toml b/metropolis/node/kubernetes/containerd/config.toml
index 98a11fe..7348605 100644
--- a/metropolis/node/kubernetes/containerd/config.toml
+++ b/metropolis/node/kubernetes/containerd/config.toml
@@ -67,7 +67,7 @@
disable_proc_mount = false
[plugins."io.containerd.grpc.v1.cri".containerd]
snapshotter = "overlayfs"
- default_runtime_name = "runsc"
+ default_runtime_name = "runc"
no_pivot = false
[plugins."io.containerd.grpc.v1.cri".containerd.default_runtime]
runtime_type = ""