Sid Gifari From Gifari Industries - BD Cyber Security Team
Home
/
usr
/
share
/
man
/
man5
/
✏️
Editing: containerd-config.toml.5
.nh .TH /etc/containerd/config.toml 5 04/05/2022 .SH NAME .PP containerd-config.toml - configuration file for containerd .SH SYNOPSIS .PP The \fBconfig.toml\fP file is a configuration file for the containerd daemon. The file must be placed at \fB/etc/containerd/config.toml\fP or specified with the \fB--config\fP option of \fBcontainerd\fP to be used by the daemon. If the file does not exist at the appropriate location or is not provided via the \fB--config\fP option containerd uses its default configuration settings, which can be displayed with the \fBcontainerd config(1)\fP command. .SH DESCRIPTION .PP The TOML file used to configure the containerd daemon settings has a short list of global settings followed by a series of sections for specific areas of daemon configuration. There is also a section for \fBplugins\fP that allows each containerd plugin to have an area for plugin-specific configuration and settings. .SH FORMAT .TP \fBversion\fP The version field in the config file specifies the config’s version. If no version number is specified inside the config file then it is assumed to be a version 1 config and parsed as such. Please use version = 2 to enable version 2 config as version 1 has been deprecated. .TP \fBroot\fP The root directory for containerd metadata. (Default: "/var/lib/containerd") .TP \fBstate\fP The state directory for containerd (Default: "/run/containerd") .TP \fBplugin_dir\fP The directory for dynamic plugins to be stored .TP \fB[grpc]\fP Section for gRPC socket listener settings. Contains the following properties: .RS .IP \(bu 2 \fBaddress\fP (Default: "/run/containerd/containerd.sock") .IP \(bu 2 \fBtcp_address\fP .IP \(bu 2 \fBtcp_tls_cert\fP .IP \(bu 2 \fBtcp_tls_key\fP .IP \(bu 2 \fBuid\fP (Default: 0) .IP \(bu 2 \fBgid\fP (Default: 0) .IP \(bu 2 \fBmax_recv_message_size\fP .IP \(bu 2 \fBmax_send_message_size\fP .RE .TP \fB[ttrpc]\fP Section for TTRPC settings. Contains properties: .RS .IP \(bu 2 \fBaddress\fP (Default: "") .IP \(bu 2 \fBuid\fP (Default: 0) .IP \(bu 2 \fBgid\fP (Default: 0) .RE .TP \fB[debug]\fP Section to enable and configure a debug socket listener. Contains four properties: .RS .IP \(bu 2 \fBaddress\fP (Default: "/run/containerd/debug.sock") .IP \(bu 2 \fBuid\fP (Default: 0) .IP \(bu 2 \fBgid\fP (Default: 0) .IP \(bu 2 \fBlevel\fP (Default: "info") sets the debug log level .RE .TP \fB[metrics]\fP Section to enable and configure a metrics listener. Contains two properties: .RS .IP \(bu 2 \fBaddress\fP (Default: "") Metrics endpoint does not listen by default .IP \(bu 2 \fBgrpc_histogram\fP (Default: false) Turn on or off gRPC histogram metrics .RE .TP \fBdisabled_plugins\fP Disabled plugins are IDs of plugins to disable. Disabled plugins won't be initialized and started. .TP \fBrequired_plugins\fP Required plugins are IDs of required plugins. Containerd exits if any required plugin doesn't exist or fails to be initialized or started. .TP \fB[plugins]\fP The plugins section contains configuration options exposed from installed plugins. The following plugins are enabled by default and their settings are shown below. Plugins that are not enabled by default will provide their own configuration values documentation. .RS .IP \(bu 2 \fB[plugins."io.containerd.monitor.v1.cgroups"]\fP has one option \fBno_prometheus\fP (Default: \fBfalse\fP) .IP \(bu 2 \fB[plugins."io.containerd.service.v1.diff-service"]\fP has one option \fBdefault\fP, a list by default set to \fB["walking"]\fP .IP \(bu 2 \fB[plugins."io.containerd.runtime.v1.linux"]\fP has several options for configuring the runtime, shim, and related options: .RS .IP \(bu 2 \fBshim\fP specifies the shim binary (Default: \fB"containerd-shim"\fP), .IP \(bu 2 \fBruntime\fP is the OCI compliant runtime binary (Default: \fB"runc"\fP), .IP \(bu 2 \fBruntime_root\fP is the root directory used by the runtime (Default: \fB""\fP), .IP \(bu 2 \fBno_shim\fP specifies whether to use a shim or not (Default: \fBfalse\fP), .IP \(bu 2 \fBshim_debug\fP turns on debugging for the shim (Default: \fBfalse\fP) .RE .IP \(bu 2 \fB[plugins."io.containerd.gc.v1.scheduler"]\fP has several options that perform advanced tuning for the scheduler: .RS .IP \(bu 2 \fBpause_threshold\fP is the maximum amount of time GC should be scheduled (Default: \fB0.02\fP), .IP \(bu 2 \fBdeletion_threshold\fP guarantees GC is scheduled after n number of deletions (Default: \fB0\fP [not triggered]), .IP \(bu 2 \fBmutation_threshold\fP guarantees GC is scheduled after n number of database mutations (Default: \fB100\fP), .IP \(bu 2 \fBschedule_delay\fP defines the delay after trigger event before scheduling a GC (Default \fB"0ms"\fP [immediate]), .IP \(bu 2 \fBstartup_delay\fP defines the delay after startup before scheduling a GC (Default \fB"100ms"\fP) .RE .IP \(bu 2 \fB[plugins."io.containerd.runtime.v2.task"]\fP specifies options for configuring the runtime shim: .RS .IP \(bu 2 \fBplatforms\fP specifies the list of supported platforms .IP \(bu 2 \fBsched_core\fP Core scheduling is a feature that allows only trusted tasks to run concurrently on cpus sharing compute resources (eg: hyperthreads on a core). (Default: \fBfalse\fP) .RE .IP \(bu 2 \fB[plugins."io.containerd.service.v1.tasks-service"]\fP has one option: .RS .IP \(bu 2 \fBrdt_config_file\fP (Linux only) specifies path to a configuration used for configuring RDT (Default: \fB""\fP). Enables support for Intel RDT, a technology for cache and memory bandwidth management. See https://github.com/intel/goresctrl/blob/v0.2.0/doc/rdt.md#configuration for details of the configuration file format. .RE .RE .TP \fBoom_score\fP The out of memory (OOM) score applied to the containerd daemon process (Default: 0) .TP \fB[cgroup]\fP Section for Linux cgroup specific settings .RS .IP \(bu 2 \fBpath\fP (Default: "") Specify a custom cgroup path for created containers .RE .TP \fB[proxy_plugins]\fP Proxy plugins configures plugins which are communicated to over gRPC .RS .IP \(bu 2 \fBtype\fP (Default: "") .IP \(bu 2 \fBaddress\fP (Default: "") .RE .TP \fBtimeouts\fP Timeouts specified as a duration .TP \fBimports\fP Imports is a list of additional configuration files to include. This allows to split the main configuration file and keep some sections separately (for example vendors may keep a custom runtime configuration in a separate file without modifying the main \fB\fCconfig.toml\fR). Imported files will overwrite simple fields like \fB\fCint\fR or \fB\fCstring\fR (if not empty) and will append \fB\fCarray\fR and \fB\fCmap\fR fields. Imported files are also versioned, and the version can't be higher than the main config. .PP \fBstream_processors\fP .RS .IP \(bu 2 \fBaccepts\fP (Default: "[]") Accepts specific media-types .IP \(bu 2 \fBreturns\fP (Default: "") Returns the media-type .IP \(bu 2 \fBpath\fP (Default: "") Path or name of the binary .IP \(bu 2 \fBargs\fP (Default: "[]") Args to the binary .RE .SH EXAMPLE .PP The following is a complete \fBconfig.toml\fP default configuration example: .PP .RS .nf version = 2 root = "/var/lib/containerd" state = "/run/containerd" oom_score = 0 imports = ["/etc/containerd/runtime_*.toml", "./debug.toml"] [grpc] address = "/run/containerd/containerd.sock" uid = 0 gid = 0 [debug] address = "/run/containerd/debug.sock" uid = 0 gid = 0 level = "info" [metrics] address = "" grpc_histogram = false [cgroup] path = "" [plugins] [plugins."io.containerd.monitor.v1.cgroups"] no_prometheus = false [plugins."io.containerd.service.v1.diff-service"] default = ["walking"] [plugins."io.containerd.runtime.v1.linux"] shim = "containerd-shim" runtime = "runc" runtime_root = "" no_shim = false shim_debug = false [plugins."io.containerd.gc.v1.scheduler"] pause_threshold = 0.02 deletion_threshold = 0 mutation_threshold = 100 schedule_delay = 0 startup_delay = "100ms" [plugins."io.containerd.runtime.v2.task"] platforms = ["linux/amd64"] sched_core = true [plugins."io.containerd.service.v1.tasks-service"] rdt_config_file = "/etc/rdt-config.yaml" .fi .RE .SH BUGS .PP Please file any specific issues that you encounter at https://github.com/containerd/containerd. .SH AUTHOR .PP Phil Estes estesp@gmail.com \[la]mailto:estesp@gmail.com\[ra] .SH SEE ALSO .PP ctr(8), containerd-config(8), containerd(8)
💾 Save
❌ Cancel
