Gitiles
Code Review Sign In
gerrit-dev.monogon.dev / monogon / 652c2ad2e499ca709523978e04b3a3dbb6df642c / . / metropolis / node / kubernetes / containerd / config.toml
blob: 5129081f0d71f6253c975e02582a148ec197c4f7 [file] [log] [blame]
Lorenz Brunc88c82d2020-05-08 14:35:04 +0200[diff] [blame]1version = 2
2root = "/data/containerd"
Serge Bazanskic2c7ad92020-07-13 17:20:09 +0200[diff] [blame]3state = "/ephemeral/containerd"
Lorenz Brunc88c82d2020-05-08 14:35:04 +0200[diff] [blame]4plugin_dir = ""
5disabled_plugins = []
Lorenz Brun74e8e5c2021-01-26 14:00:50 +0100[diff] [blame]6required_plugins = ["io.containerd.grpc.v1.cri"]
Lorenz Brunc88c82d2020-05-08 14:35:04 +0200[diff] [blame]7oom_score = 0
8
9[grpc]
Serge Bazanskic2c7ad92020-07-13 17:20:09 +0200[diff] [blame]10 address = "/ephemeral/containerd/client.sock"
Lorenz Brunc88c82d2020-05-08 14:35:04 +0200[diff] [blame]11 tcp_address = ""
12 tcp_tls_cert = ""
13 tcp_tls_key = ""
14 uid = 0
15 gid = 0
16 max_recv_message_size = 16777216
17 max_send_message_size = 16777216
18
19[ttrpc]
20 address = ""
21 uid = 0
22 gid = 0
23
24[debug]
25 address = ""
26 uid = 0
27 gid = 0
28 level = ""
29
30[metrics]
Tim Windelschmidt3bdb5fc2024-03-14 18:47:35 +0100[diff] [blame]31 address = "127.0.0.1:7846"
Lorenz Brunc88c82d2020-05-08 14:35:04 +0200[diff] [blame]32 grpc_histogram = false
33
34[cgroup]
35 path = ""
36
37[timeouts]
38 "io.containerd.timeout.shim.cleanup" = "5s"
39 "io.containerd.timeout.shim.load" = "5s"
40 "io.containerd.timeout.shim.shutdown" = "3s"
41 "io.containerd.timeout.task.state" = "2s"
42
43[plugins]
44 [plugins."io.containerd.gc.v1.scheduler"]
45 pause_threshold = 0.02
46 deletion_threshold = 0
47 mutation_threshold = 100
48 schedule_delay = "0s"
49 startup_delay = "100ms"
50 [plugins."io.containerd.grpc.v1.cri"]
51 disable_tcp_service = true
52 stream_server_address = "127.0.0.1"
53 stream_server_port = "0"
54 stream_idle_timeout = "4h0m0s"
55 enable_selinux = false
Tim Windelschmidt93020d72024-02-13 18:13:07 +0100[diff] [blame]56 sandbox_image = "preseed.metropolis.internal/node/kubernetes/pause:latest"
Lorenz Brunc88c82d2020-05-08 14:35:04 +0200[diff] [blame]57 stats_collect_period = 10
58 systemd_cgroup = false
59 enable_tls_streaming = false
Lorenz Brunb876fc32020-07-14 13:54:01 +0200[diff] [blame]60 ignore_image_defined_volumes = true
Lorenz Brund13c1c62022-03-30 19:58:58 +0200[diff] [blame]61 netns_mounts_under_state_dir = true
Lorenz Brunc88c82d2020-05-08 14:35:04 +0200[diff] [blame]62 max_container_log_line_size = 16384
63 disable_cgroup = false
64 disable_apparmor = true
65 restrict_oom_score_adj = false
66 max_concurrent_downloads = 3
67 disable_proc_mount = false
Tim Windelschmidte337e932024-09-15 20:14:39 +0200[diff] [blame]68 device_ownership_from_security_context = true
Lorenz Brunc88c82d2020-05-08 14:35:04 +0200[diff] [blame]69 [plugins."io.containerd.grpc.v1.cri".containerd]
70 snapshotter = "overlayfs"
Lorenz Brun51a3ed52023-06-21 16:45:15 +0200[diff] [blame]71 default_runtime_name = "runc"
Lorenz Brunc88c82d2020-05-08 14:35:04 +0200[diff] [blame]72 no_pivot = false
73 [plugins."io.containerd.grpc.v1.cri".containerd.default_runtime]
74 runtime_type = ""
75 runtime_engine = ""
76 runtime_root = ""
77 privileged_without_host_devices = false
78 [plugins."io.containerd.grpc.v1.cri".containerd.untrusted_workload_runtime]
79 runtime_type = ""
80 runtime_engine = ""
81 runtime_root = ""
82 privileged_without_host_devices = false
83 [plugins."io.containerd.grpc.v1.cri".containerd.runtimes]
84 [plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runsc]
85 runtime_type = "io.containerd.runsc.v1"
86 runtime_engine = ""
87 runtime_root = ""
88 privileged_without_host_devices = false
89 [plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runsc.options]
90 TypeUrl = "io.containerd.runsc.v1.options"
91 ConfigPath = "/containerd/conf/runsc.toml"
Lorenz Brun5e4fc2d2020-09-22 18:35:15 +0200[diff] [blame]92 [plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runc]
93 runtime_type = "io.containerd.runc.v2"
94 runtime_engine = ""
95 runtime_root = ""
96 privileged_without_host_devices = false
97 base_runtime_spec = ""
Lorenz Brunc88c82d2020-05-08 14:35:04 +0200[diff] [blame]98 [plugins."io.containerd.grpc.v1.cri".cni]
99 bin_dir = "/containerd/bin/cni"
Lorenz Brun74e8e5c2021-01-26 14:00:50 +0100[diff] [blame]100 conf_dir = "/ephemeral/containerd/cni"
Lorenz Brunf042e6f2020-06-24 16:46:09 +0200[diff] [blame]101 max_conf_num = 0
102 conf_template = "/containerd/conf/cnispec.gojson"
Lorenz Brunc88c82d2020-05-08 14:35:04 +0200[diff] [blame]103 [plugins."io.containerd.grpc.v1.cri".registry]
104 [plugins."io.containerd.grpc.v1.cri".registry.mirrors]
105 [plugins."io.containerd.grpc.v1.cri".registry.mirrors."docker.io"]
106 endpoint = ["https://registry-1.docker.io"]
Lorenz Brun150f24a2023-07-13 20:11:06 +0200[diff] [blame]107 [plugins."io.containerd.grpc.v1.cri".registry.configs."10.42.0.82:5000".tls]
108 insecure_skip_verify = true
109 [plugins."io.containerd.grpc.v1.cri".registry.mirrors."test.monogon.internal"]
110 endpoint = ["http://10.42.0.82:5000"]
Lorenz Brunc88c82d2020-05-08 14:35:04 +0200[diff] [blame]111 [plugins."io.containerd.grpc.v1.cri".x509_key_pair_streaming]
112 tls_cert_file = ""
113 tls_key_file = ""
114 [plugins."io.containerd.internal.v1.opt"]
115 path = "/containerd/bin"
116 [plugins."io.containerd.internal.v1.restart"]
117 interval = "10s"
118 [plugins."io.containerd.metadata.v1.bolt"]
119 content_sharing_policy = "shared"
120 [plugins."io.containerd.monitor.v1.cgroups"]
121 no_prometheus = false
122 [plugins."io.containerd.runtime.v1.linux"]
123 shim = "containerd-shim"
124 runtime = "noop"
125 runtime_root = ""
126 no_shim = false
127 shim_debug = false
128 [plugins."io.containerd.runtime.v2.task"]
129 platforms = ["linux/amd64"]
130 [plugins."io.containerd.service.v1.diff-service"]
131 default = ["walking"]