m/n/k/containerd: less verbose runsc logging
This disables debug logging on non -c dbg builds of Metropolis, making
the console output less verbose.
This should maybe just be 'fixed' by making logtree -> console smarter,
ie. implement log output filters, but this will do for now - and I think
in general we don't want to have super verbose per-syscall logging
enabled unless necessary.
The implementation picks between two runsc .tomls to build the node
image with, which works for now but we might have to move to a
full-blown config generator (build-time or runtime) when we also start
having differences between containerd.toml.
Change-Id: I5539ca6f4763a769e879f7d50637aa36f3ffd29b
Reviewed-on: https://review.monogon.dev/c/monogon/+/327
Reviewed-by: Mateusz Zalega <mateusz@monogon.tech>
diff --git a/metropolis/node/kubernetes/containerd/runsc_nondebug.toml b/metropolis/node/kubernetes/containerd/runsc_nondebug.toml
new file mode 100644
index 0000000..5a80a30
--- /dev/null
+++ b/metropolis/node/kubernetes/containerd/runsc_nondebug.toml
@@ -0,0 +1,5 @@
+root = "/ephemeral/containerd/runsc"
+[runsc_config]
+debug = "false"
+panic-log = "/ephemeral/containerd/runsc-logs.fifo"
+log = "/ephemeral/containerd/runsc-logs.fifo"