| disabled_plugins = [] |
| imports = [] |
| oom_score = 0 |
| plugin_dir = "" |
| required_plugins = [] |
| root = "/var/lib/containerd" |
| state = "/run/containerd" |
| temp = "" |
| version = 2 |
| |
| [cgroup] |
| path = "" |
| |
| [debug] |
| address = "" |
| format = "" |
| gid = 0 |
| level = "" |
| uid = 0 |
| |
| [grpc] |
| address = "/run/containerd/containerd.sock" |
| gid = 0 |
| max_recv_message_size = 16777216 |
| max_send_message_size = 16777216 |
| tcp_address = "" |
| tcp_tls_ca = "" |
| tcp_tls_cert = "" |
| tcp_tls_key = "" |
| uid = 0 |
| |
| [metrics] |
| address = "" |
| grpc_histogram = false |
| |
| [plugins] |
| |
| [plugins."io.containerd.gc.v1.scheduler"] |
| deletion_threshold = 0 |
| mutation_threshold = 100 |
| pause_threshold = 0.02 |
| schedule_delay = "0s" |
| startup_delay = "100ms" |
| |
| [plugins."io.containerd.grpc.v1.cri"] |
| cdi_spec_dirs = ["/etc/cdi", "/var/run/cdi"] |
| device_ownership_from_security_context = false |
| disable_apparmor = false |
| disable_cgroup = false |
| disable_hugetlb_controller = true |
| disable_proc_mount = false |
| disable_tcp_service = true |
| drain_exec_sync_io_timeout = "0s" |
| # Updated in latest release |
| #enable_cdi = false |
| enable_cdi = true |
| enable_selinux = false |
| enable_tls_streaming = true |
| # Updated in latest release |
| #enable_unprivileged_icmp = false |
| #enable_unprivileged_ports = false |
| enable_unprivileged_icmp = true |
| enable_unprivileged_ports = true |
| ignore_image_defined_volumes = false |
| image_pull_progress_timeout = "5m0s" |
| max_concurrent_downloads = 3 |
| max_container_log_line_size = 16384 |
| netns_mounts_under_state_dir = false |
| restrict_oom_score_adj = false |
| sandbox_image = "custom.io/pause:3.10.1" |
| selinux_category_range = 1024 |
| stats_collect_period = 10 |
| stream_idle_timeout = "2h0m0s" |
| stream_server_address = "127.0.1.1" |
| stream_server_port = "15000" |
| systemd_cgroup = false |
| tolerate_missing_hugetlb_controller = true |
| unset_seccomp_profile = "" |
| |
| [plugins."io.containerd.grpc.v1.cri".cni] |
| bin_dir = "/opt/cni/bin" |
| conf_dir = "/etc/cni/net.d" |
| conf_template = "" |
| ip_pref = "" |
| max_conf_num = 1 |
| setup_serially = false |
| |
| [plugins."io.containerd.grpc.v1.cri".containerd] |
| default_runtime_name = "runc" |
| disable_snapshot_annotations = true |
| discard_unpacked_layers = false |
| ignore_blockio_not_enabled_errors = false |
| ignore_rdt_not_enabled_errors = false |
| no_pivot = false |
| snapshotter = "overlayfs" |
| |
| [plugins."io.containerd.grpc.v1.cri".containerd.default_runtime] |
| base_runtime_spec = "" |
| cni_conf_dir = "" |
| cni_max_conf_num = 0 |
| container_annotations = [] |
| pod_annotations = [] |
| privileged_without_host_devices = false |
| privileged_without_host_devices_all_devices_allowed = false |
| runtime_engine = "" |
| runtime_path = "" |
| runtime_root = "" |
| runtime_type = "" |
| sandbox_mode = "" |
| snapshotter = "" |
| |
| [plugins."io.containerd.grpc.v1.cri".containerd.default_runtime.options] |
| |
| [plugins."io.containerd.grpc.v1.cri".containerd.runtimes] |
| |
| [plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runc] |
| base_runtime_spec = "" |
| cni_conf_dir = "" |
| cni_max_conf_num = 0 |
| container_annotations = [] |
| pod_annotations = [] |
| privileged_without_host_devices = false |
| privileged_without_host_devices_all_devices_allowed = false |
| runtime_engine = "" |
| runtime_path = "" |
| runtime_root = "" |
| runtime_type = "io.containerd.runc.v2" |
| sandbox_mode = "podsandbox" |
| snapshotter = "" |
| |
| [plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runc.options] |
| BinaryName = "" |
| CriuImagePath = "" |
| CriuWorkPath = "" |
| IoGid = 0 |
| IoUid = 0 |
| NoNewKeyring = false |
| Root = "" |
| ShimCgroup = "" |
| # Removed in latest |
| #CriuPath = "" |
| #NoPivotRoot = false |
| #SystemdCgroup = false |
| |
| [plugins."io.containerd.grpc.v1.cri".containerd.untrusted_workload_runtime] |
| base_runtime_spec = "" |
| cni_conf_dir = "" |
| cni_max_conf_num = 0 |
| container_annotations = [] |
| pod_annotations = [] |
| privileged_without_host_devices = false |
| privileged_without_host_devices_all_devices_allowed = false |
| runtime_engine = "" |
| runtime_path = "" |
| runtime_root = "" |
| runtime_type = "" |
| sandbox_mode = "" |
| snapshotter = "" |
| |
| [plugins."io.containerd.grpc.v1.cri".containerd.untrusted_workload_runtime.options] |
| |
| [plugins."io.containerd.grpc.v1.cri".image_decryption] |
| key_model = "node" |
| |
| [plugins."io.containerd.grpc.v1.cri".registry] |
| config_path = "" |
| |
| [plugins."io.containerd.grpc.v1.cri".registry.auths] |
| |
| [plugins."io.containerd.grpc.v1.cri".registry.configs] |
| |
| [plugins."io.containerd.grpc.v1.cri".registry.headers] |
| |
| [plugins."io.containerd.grpc.v1.cri".registry.mirrors] |
| |
| [plugins."io.containerd.grpc.v1.cri".x509_key_pair_streaming] |
| tls_cert_file = "" |
| tls_key_file = "" |
| |
| [plugins."io.containerd.internal.v1.opt"] |
| path = "/opt/containerd" |
| |
| [plugins."io.containerd.internal.v1.restart"] |
| interval = "10s" |
| |
| # Removed in latest |
| #[plugins."io.containerd.internal.v1.tracing"] |
| # sampling_ratio = 1.0 |
| # service_name = "containerd" |
| |
| [plugins."io.containerd.metadata.v1.bolt"] |
| content_sharing_policy = "shared" |
| |
| [plugins."io.containerd.monitor.v1.cgroups"] |
| no_prometheus = false |
| |
| [plugins."io.containerd.nri.v1.nri"] |
| # Updated in latest |
| #disable = true |
| disable = false |
| disable_connections = false |
| plugin_config_path = "/etc/nri/conf.d" |
| plugin_path = "/opt/nri/plugins" |
| plugin_registration_timeout = "5s" |
| plugin_request_timeout = "2s" |
| socket_path = "/var/run/nri/nri.sock" |
| |
| # Removed in latest |
| #[plugins."io.containerd.runtime.v1.linux"] |
| # no_shim = false |
| # runtime = "runc" |
| # runtime_root = "" |
| # shim = "containerd-shim" |
| # shim_debug = false |
| |
| [plugins."io.containerd.runtime.v2.task"] |
| platforms = ["linux/amd64"] |
| sched_core = false |
| |
| [plugins."io.containerd.service.v1.diff-service"] |
| default = ["walking"] |
| |
| [plugins."io.containerd.service.v1.tasks-service"] |
| blockio_config_file = "" |
| rdt_config_file = "" |
| |
| # Removed in latest |
| #[plugins."io.containerd.snapshotter.v1.aufs"] |
| # root_path = "" |
| |
| [plugins."io.containerd.snapshotter.v1.blockfile"] |
| fs_type = "" |
| mount_options = [] |
| root_path = "" |
| scratch_file = "" |
| |
| [plugins."io.containerd.snapshotter.v1.btrfs"] |
| root_path = "" |
| |
| [plugins."io.containerd.snapshotter.v1.devmapper"] |
| async_remove = false |
| base_image_size = "" |
| discard_blocks = false |
| fs_options = "" |
| fs_type = "" |
| pool_name = "" |
| root_path = "" |
| |
| [plugins."io.containerd.snapshotter.v1.native"] |
| root_path = "" |
| |
| [plugins."io.containerd.snapshotter.v1.overlayfs"] |
| mount_options = [] |
| root_path = "" |
| sync_remove = false |
| upperdir_label = false |
| |
| # Removed in latest |
| #[plugins."io.containerd.snapshotter.v1.zfs"] |
| # root_path = "" |
| |
| # Removed in latest |
| #[plugins."io.containerd.tracing.processor.v1.otlp"] |
| # endpoint = "" |
| # insecure = false |
| # protocol = "" |
| |
| [plugins."io.containerd.transfer.v1.local"] |
| config_path = "" |
| max_concurrent_downloads = 3 |
| max_concurrent_uploaded_layers = 3 |
| |
| # In 2.0, the default unpack config is applied when not specified |
| #[[plugins."io.containerd.transfer.v1.local".unpack_config]] |
| # differ = "" |
| # platform = "linux/amd64" |
| # snapshotter = "overlayfs" |
| |
| [proxy_plugins] |
| |
| [stream_processors] |
| |
| [stream_processors."io.containerd.ocicrypt.decoder.v1.tar"] |
| accepts = ["application/vnd.oci.image.layer.v1.tar+encrypted"] |
| args = ["--decryption-keys-path", "/etc/containerd/ocicrypt/keys"] |
| env = ["OCICRYPT_KEYPROVIDER_CONFIG=/etc/containerd/ocicrypt/ocicrypt_keyprovider.conf"] |
| path = "ctd-decoder" |
| returns = "application/vnd.oci.image.layer.v1.tar" |
| |
| [stream_processors."io.containerd.ocicrypt.decoder.v1.tar.gzip"] |
| accepts = ["application/vnd.oci.image.layer.v1.tar+gzip+encrypted"] |
| args = ["--decryption-keys-path", "/etc/containerd/ocicrypt/keys"] |
| env = ["OCICRYPT_KEYPROVIDER_CONFIG=/etc/containerd/ocicrypt/ocicrypt_keyprovider.conf"] |
| path = "ctd-decoder" |
| returns = "application/vnd.oci.image.layer.v1.tar+gzip" |
| |
| # delete io.containerd.timeout.bolt.open to test migrate |
| [timeouts] |
| "io.containerd.timeout.metrics.shimstats" = "2s" |
| "io.containerd.timeout.shim.cleanup" = "5s" |
| "io.containerd.timeout.shim.load" = "5s" |
| "io.containerd.timeout.shim.shutdown" = "3s" |
| "io.containerd.timeout.task.state" = "2s" |
| |
| [ttrpc] |
| address = "" |
| gid = 0 |
| uid = 0 |
