config.toml 6.8 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250
  1. disabled_plugins = []
  2. imports = []
  3. oom_score = 0
  4. plugin_dir = ""
  5. required_plugins = []
  6. root = "/var/lib/containerd"
  7. state = "/run/containerd"
  8. temp = ""
  9. version = 2
  10. [cgroup]
  11. path = ""
  12. [debug]
  13. address = ""
  14. format = ""
  15. gid = 0
  16. level = ""
  17. uid = 0
  18. [grpc]
  19. address = "/run/containerd/containerd.sock"
  20. gid = 0
  21. max_recv_message_size = 16777216
  22. max_send_message_size = 16777216
  23. tcp_address = ""
  24. tcp_tls_ca = ""
  25. tcp_tls_cert = ""
  26. tcp_tls_key = ""
  27. uid = 0
  28. [metrics]
  29. address = ""
  30. grpc_histogram = false
  31. [plugins]
  32. [plugins."io.containerd.gc.v1.scheduler"]
  33. deletion_threshold = 0
  34. mutation_threshold = 100
  35. pause_threshold = 0.02
  36. schedule_delay = "0s"
  37. startup_delay = "100ms"
  38. [plugins."io.containerd.grpc.v1.cri"]
  39. device_ownership_from_security_context = false
  40. disable_apparmor = false
  41. disable_cgroup = false
  42. disable_hugetlb_controller = true
  43. disable_proc_mount = false
  44. disable_tcp_service = true
  45. enable_selinux = false
  46. enable_tls_streaming = false
  47. enable_unprivileged_icmp = false
  48. enable_unprivileged_ports = false
  49. ignore_image_defined_volumes = false
  50. max_concurrent_downloads = 3
  51. max_container_log_line_size = 16384
  52. netns_mounts_under_state_dir = false
  53. restrict_oom_score_adj = false
  54. sandbox_image = "k8s.gcr.io/pause:3.6"
  55. selinux_category_range = 1024
  56. stats_collect_period = 10
  57. stream_idle_timeout = "4h0m0s"
  58. stream_server_address = "127.0.0.1"
  59. stream_server_port = "0"
  60. systemd_cgroup = false
  61. tolerate_missing_hugetlb_controller = true
  62. unset_seccomp_profile = ""
  63. [plugins."io.containerd.grpc.v1.cri".cni]
  64. bin_dir = "/opt/cni/bin"
  65. conf_dir = "/etc/cni/net.d"
  66. conf_template = ""
  67. ip_pref = ""
  68. max_conf_num = 1
  69. [plugins."io.containerd.grpc.v1.cri".containerd]
  70. default_runtime_name = "runc"
  71. disable_snapshot_annotations = true
  72. discard_unpacked_layers = false
  73. ignore_rdt_not_enabled_errors = false
  74. no_pivot = false
  75. snapshotter = "overlayfs"
  76. [plugins."io.containerd.grpc.v1.cri".containerd.default_runtime]
  77. base_runtime_spec = ""
  78. cni_conf_dir = ""
  79. cni_max_conf_num = 0
  80. container_annotations = []
  81. pod_annotations = []
  82. privileged_without_host_devices = false
  83. runtime_engine = ""
  84. runtime_path = ""
  85. runtime_root = ""
  86. runtime_type = ""
  87. [plugins."io.containerd.grpc.v1.cri".containerd.default_runtime.options]
  88. [plugins."io.containerd.grpc.v1.cri".containerd.runtimes]
  89. [plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runc]
  90. base_runtime_spec = ""
  91. cni_conf_dir = ""
  92. cni_max_conf_num = 0
  93. container_annotations = []
  94. pod_annotations = []
  95. privileged_without_host_devices = false
  96. runtime_engine = ""
  97. runtime_path = ""
  98. runtime_root = ""
  99. runtime_type = "io.containerd.runc.v2"
  100. [plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runc.options]
  101. BinaryName = ""
  102. CriuImagePath = ""
  103. CriuPath = ""
  104. CriuWorkPath = ""
  105. IoGid = 0
  106. IoUid = 0
  107. NoNewKeyring = false
  108. NoPivotRoot = false
  109. Root = ""
  110. ShimCgroup = ""
  111. SystemdCgroup = false
  112. [plugins."io.containerd.grpc.v1.cri".containerd.untrusted_workload_runtime]
  113. base_runtime_spec = ""
  114. cni_conf_dir = ""
  115. cni_max_conf_num = 0
  116. container_annotations = []
  117. pod_annotations = []
  118. privileged_without_host_devices = false
  119. runtime_engine = ""
  120. runtime_path = ""
  121. runtime_root = ""
  122. runtime_type = ""
  123. [plugins."io.containerd.grpc.v1.cri".containerd.untrusted_workload_runtime.options]
  124. [plugins."io.containerd.grpc.v1.cri".image_decryption]
  125. key_model = "node"
  126. [plugins."io.containerd.grpc.v1.cri".registry]
  127. config_path = ""
  128. [plugins."io.containerd.grpc.v1.cri".registry.auths]
  129. [plugins."io.containerd.grpc.v1.cri".registry.configs]
  130. [plugins."io.containerd.grpc.v1.cri".registry.headers]
  131. [plugins."io.containerd.grpc.v1.cri".registry.mirrors]
  132. [plugins."io.containerd.grpc.v1.cri".x509_key_pair_streaming]
  133. tls_cert_file = ""
  134. tls_key_file = ""
  135. [plugins."io.containerd.internal.v1.opt"]
  136. path = "/opt/containerd"
  137. [plugins."io.containerd.internal.v1.restart"]
  138. interval = "10s"
  139. [plugins."io.containerd.internal.v1.tracing"]
  140. sampling_ratio = 1.0
  141. service_name = "containerd"
  142. [plugins."io.containerd.metadata.v1.bolt"]
  143. content_sharing_policy = "shared"
  144. [plugins."io.containerd.monitor.v1.cgroups"]
  145. no_prometheus = false
  146. [plugins."io.containerd.runtime.v1.linux"]
  147. no_shim = false
  148. runtime = "runc"
  149. runtime_root = ""
  150. shim = "containerd-shim"
  151. shim_debug = false
  152. [plugins."io.containerd.runtime.v2.task"]
  153. platforms = ["linux/amd64"]
  154. sched_core = false
  155. [plugins."io.containerd.service.v1.diff-service"]
  156. default = ["walking"]
  157. [plugins."io.containerd.service.v1.tasks-service"]
  158. rdt_config_file = ""
  159. [plugins."io.containerd.snapshotter.v1.aufs"]
  160. root_path = ""
  161. [plugins."io.containerd.snapshotter.v1.btrfs"]
  162. root_path = ""
  163. [plugins."io.containerd.snapshotter.v1.devmapper"]
  164. async_remove = false
  165. base_image_size = ""
  166. discard_blocks = false
  167. fs_options = ""
  168. fs_type = ""
  169. pool_name = ""
  170. root_path = ""
  171. [plugins."io.containerd.snapshotter.v1.native"]
  172. root_path = ""
  173. [plugins."io.containerd.snapshotter.v1.overlayfs"]
  174. root_path = ""
  175. upperdir_label = false
  176. [plugins."io.containerd.snapshotter.v1.zfs"]
  177. root_path = ""
  178. [plugins."io.containerd.tracing.processor.v1.otlp"]
  179. endpoint = ""
  180. insecure = false
  181. protocol = ""
  182. [proxy_plugins]
  183. [stream_processors]
  184. [stream_processors."io.containerd.ocicrypt.decoder.v1.tar"]
  185. accepts = ["application/vnd.oci.image.layer.v1.tar+encrypted"]
  186. args = ["--decryption-keys-path", "/etc/containerd/ocicrypt/keys"]
  187. env = ["OCICRYPT_KEYPROVIDER_CONFIG=/etc/containerd/ocicrypt/ocicrypt_keyprovider.conf"]
  188. path = "ctd-decoder"
  189. returns = "application/vnd.oci.image.layer.v1.tar"
  190. [stream_processors."io.containerd.ocicrypt.decoder.v1.tar.gzip"]
  191. accepts = ["application/vnd.oci.image.layer.v1.tar+gzip+encrypted"]
  192. args = ["--decryption-keys-path", "/etc/containerd/ocicrypt/keys"]
  193. env = ["OCICRYPT_KEYPROVIDER_CONFIG=/etc/containerd/ocicrypt/ocicrypt_keyprovider.conf"]
  194. path = "ctd-decoder"
  195. returns = "application/vnd.oci.image.layer.v1.tar+gzip"
  196. [timeouts]
  197. "io.containerd.timeout.bolt.open" = "0s"
  198. "io.containerd.timeout.shim.cleanup" = "5s"
  199. "io.containerd.timeout.shim.load" = "5s"
  200. "io.containerd.timeout.shim.shutdown" = "3s"
  201. "io.containerd.timeout.task.state" = "2s"
  202. [ttrpc]
  203. address = ""
  204. gid = 0
  205. uid = 0