bb3e91
# The containers configuration file specifies all of the available configuration
bb3e91
# command-line options/flags for container engine tools like Podman & Buildah,
bb3e91
# but in a TOML format that can be easily modified and versioned.
bb3e91
bb3e91
# Please refer to containers.conf(5) for details of all configuration options.
bb3e91
# Not all container engines implement all of the options.
bb3e91
# All of the options have hard coded defaults and these options will override
bb3e91
# the built in defaults. Users can then override these options via the command
bb3e91
# line. Container engines will read containers.conf files in up to three
bb3e91
# locations in the following order:
bb3e91
#  1. /usr/share/containers/containers.conf
bb3e91
#  2. /etc/containers/containers.conf
bb3e91
#  3. $HOME/.config/containers/containers.conf (Rootless containers ONLY)
bb3e91
#  Items specified in the latter containers.conf, if they exist, override the
bb3e91
# previous containers.conf settings, or the default settings.
bb3e91
bb3e91
[containers]
bb3e91
bb3e91
# List of annotation. Specified as
bb3e91
# "key = value"
bb3e91
# If it is empty or commented out, no annotations will be added
bb3e91
#
bb3e91
#annotations = []
bb3e91
bb3e91
# Used to change the name of the default AppArmor profile of container engine.
bb3e91
#
bb3e91
#apparmor_profile = "container-default"
bb3e91
947b07
# The hosts entries from the base hosts file are added to the containers hosts
947b07
# file. This must be either an absolute path or as special values "image" which
947b07
# uses the hosts file from the container image or "none" which means
947b07
# no base hosts file is used. The default is "" which will use /etc/hosts.
947b07
#
947b07
#base_hosts_file = ""
947b07
bb3e91
# Default way to to create a cgroup namespace for the container
bb3e91
# Options are:
bb3e91
# `private` Create private Cgroup Namespace for the container.
bb3e91
# `host`    Share host Cgroup Namespace with the container.
bb3e91
#
bb3e91
#cgroupns = "private"
bb3e91
bb3e91
# Control container cgroup configuration
bb3e91
# Determines  whether  the  container will create CGroups.
bb3e91
# Options are:
bb3e91
# `enabled`   Enable cgroup support within container
bb3e91
# `disabled`  Disable cgroup support, will inherit cgroups from parent
bb3e91
# `no-conmon` Do not create a cgroup dedicated to conmon.
bb3e91
#
bb3e91
#cgroups = "enabled"
bb3e91
bb3e91
# List of default capabilities for containers. If it is empty or commented out,
bb3e91
# the default capabilities defined in the container engine will be added.
bb3e91
#
bb3e91
default_capabilities = [
bb3e91
  "CHOWN",
bb3e91
  "DAC_OVERRIDE",
bb3e91
  "FOWNER",
bb3e91
  "FSETID",
bb3e91
  "KILL",
bb3e91
  "NET_BIND_SERVICE",
bb3e91
  "SETFCAP",
bb3e91
  "SETGID",
bb3e91
  "SETPCAP",
bb3e91
  "SETUID",
bb3e91
  "SYS_CHROOT"
bb3e91
]
bb3e91
bb3e91
# A list of sysctls to be set in containers by default,
bb3e91
# specified as "name=value",
bb3e91
# for example:"net.ipv4.ping_group_range=0 0".
bb3e91
#
bb3e91
default_sysctls = [
bb3e91
  "net.ipv4.ping_group_range=0 0",
bb3e91
]
bb3e91
bb3e91
# A list of ulimits to be set in containers by default, specified as
bb3e91
# "<ulimit name>=<soft limit>:<hard limit>", for example:
bb3e91
# "nofile=1024:2048"
bb3e91
# See setrlimit(2) for a list of resource names.
bb3e91
# Any limit not specified here will be inherited from the process launching the
bb3e91
# container engine.
bb3e91
# Ulimits has limits for non privileged container engines.
bb3e91
#
bb3e91
#default_ulimits = [
bb3e91
#  "nofile=1280:2560",
bb3e91
#]
bb3e91
bb3e91
# List of devices. Specified as
bb3e91
# "<device-on-host>:<device-on-container>:<permissions>", for example:
bb3e91
# "/dev/sdc:/dev/xvdc:rwm".
bb3e91
# If it is empty or commented out, only the default devices will be used
bb3e91
#
bb3e91
#devices = []
bb3e91
bb3e91
# List of default DNS options to be added to /etc/resolv.conf inside of the container.
bb3e91
#
bb3e91
#dns_options = []
bb3e91
bb3e91
# List of default DNS search domains to be added to /etc/resolv.conf inside of the container.
bb3e91
#
bb3e91
#dns_searches = []
bb3e91
bb3e91
# Set default DNS servers.
bb3e91
# This option can be used to override the DNS configuration passed to the
bb3e91
# container. The special value "none" can be specified to disable creation of
bb3e91
# /etc/resolv.conf in the container.
bb3e91
# The /etc/resolv.conf file in the image will be used without changes.
bb3e91
#
bb3e91
#dns_servers = []
bb3e91
bb3e91
# Environment variable list for the conmon process; used for passing necessary
bb3e91
# environment variables to conmon or the runtime.
bb3e91
#
bb3e91
#env = [
bb3e91
#  "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
bb3e91
#  "TERM=xterm",
bb3e91
#]
bb3e91
bb3e91
# Pass all host environment variables into the container.
bb3e91
#
bb3e91
#env_host = false
bb3e91
947b07
# Set the ip for the host.containers.internal entry in the containers /etc/hosts
947b07
# file. This can be set to "none" to disable adding this entry. By default it
947b07
# will automatically choose the host ip.
947b07
#
947b07
# NOTE: When using podman machine this entry will never be added to the containers
947b07
# hosts file instead the gvproxy dns resolver will resolve this hostname. Therefore
947b07
# it is not possible to disable the entry in this case.
947b07
#
947b07
#host_containers_internal_ip = ""
947b07
bb3e91
# Default proxy environment variables passed into the container.
bb3e91
# The environment variables passed in include:
bb3e91
# http_proxy, https_proxy, ftp_proxy, no_proxy, and the upper case versions of
bb3e91
# these. This option is needed when host system uses a proxy but container
bb3e91
# should not use proxy. Proxy environment variables specified for the container
bb3e91
# in any other way will override the values passed from the host.
bb3e91
#
bb3e91
#http_proxy = true
bb3e91
bb3e91
# Run an init inside the container that forwards signals and reaps processes.
bb3e91
#
bb3e91
#init = false
bb3e91
bb3e91
# Container init binary, if init=true, this is the init binary to be used for containers.
bb3e91
#
bb3e91
#init_path = "/usr/libexec/podman/catatonit"
bb3e91
bb3e91
# Default way to to create an IPC namespace (POSIX SysV IPC) for the container
bb3e91
# Options are:
947b07
#  "host"     Share host IPC Namespace with the container.
947b07
#  "none"     Create shareable IPC Namespace for the container without a private /dev/shm.
947b07
#  "private"  Create private IPC Namespace for the container, other containers are not allowed to share it.
947b07
#  "shareable" Create shareable IPC Namespace for the container.
bb3e91
#
947b07
#ipcns = "shareable"
bb3e91
bb3e91
# keyring tells the container engine whether to create
bb3e91
# a kernel keyring for use within the container.
bb3e91
#
bb3e91
#keyring = true
bb3e91
bb3e91
# label tells the container engine whether to use container separation using
bb3e91
# MAC(SELinux) labeling or not.
bb3e91
# The label flag is ignored on label disabled systems.
bb3e91
#
bb3e91
#label = true
bb3e91
bb3e91
# Logging driver for the container. Available options: k8s-file and journald.
bb3e91
#
bb3e91
#log_driver = "k8s-file"
bb3e91
bb3e91
# Maximum size allowed for the container log file. Negative numbers indicate
bb3e91
# that no size limit is imposed. If positive, it must be >= 8192 to match or
bb3e91
# exceed conmon's read buffer. The file is truncated and re-opened so the
bb3e91
# limit is never exceeded.
bb3e91
#
bb3e91
#log_size_max = -1
bb3e91
bb3e91
# Specifies default format tag for container log messages.
bb3e91
# This is useful for creating a specific tag for container log messages.
bb3e91
# Containers logs default to truncated container ID as a tag.
bb3e91
#
bb3e91
#log_tag = ""
bb3e91
bb3e91
# Default way to to create a Network namespace for the container
bb3e91
# Options are:
bb3e91
# `private` Create private Network Namespace for the container.
bb3e91
# `host`    Share host Network Namespace with the container.
bb3e91
# `none`    Containers do not use the network
bb3e91
#
bb3e91
#netns = "private"
bb3e91
bb3e91
# Create /etc/hosts for the container.  By default, container engine manage
bb3e91
# /etc/hosts, automatically adding  the container's  own  IP  address.
bb3e91
#
bb3e91
#no_hosts = false
bb3e91
bb3e91
# Default way to to create a PID namespace for the container
bb3e91
# Options are:
bb3e91
# `private` Create private PID Namespace for the container.
bb3e91
# `host`    Share host PID Namespace with the container.
bb3e91
#
bb3e91
#pidns = "private"
bb3e91
bb3e91
# Maximum number of processes allowed in a container.
bb3e91
#
bb3e91
#pids_limit = 2048
bb3e91
bb3e91
# Copy the content from the underlying image into the newly created volume
bb3e91
# when the container is created instead of when it is started. If false,
bb3e91
# the container engine will not copy the content until the container is started.
bb3e91
# Setting it to true may have negative performance implications.
bb3e91
#
bb3e91
#prepare_volume_on_create = false
bb3e91
bb3e91
# Path to the seccomp.json profile which is used as the default seccomp profile
bb3e91
# for the runtime.
bb3e91
#
bb3e91
#seccomp_profile = "/usr/share/containers/seccomp.json"
bb3e91
bb3e91
# Size of /dev/shm. Specified as <number><unit>.
bb3e91
# Unit is optional, values:
bb3e91
# b (bytes), k (kilobytes), m (megabytes), or g (gigabytes).
bb3e91
# If the unit is omitted, the system uses bytes.
bb3e91
#
bb3e91
#shm_size = "65536k"
bb3e91
bb3e91
# Set timezone in container. Takes IANA timezones as well as "local",
bb3e91
# which sets the timezone in the container to match the host machine.
bb3e91
#
bb3e91
#tz = ""
bb3e91
bb3e91
# Set umask inside the container
bb3e91
#
bb3e91
#umask = "0022"
bb3e91
bb3e91
# Default way to to create a User namespace for the container
bb3e91
# Options are:
bb3e91
# `auto`        Create unique User Namespace for the container.
bb3e91
# `host`    Share host User Namespace with the container.
bb3e91
#
bb3e91
#userns = "host"
bb3e91
bb3e91
# Number of UIDs to allocate for the automatic container creation.
bb3e91
# UIDs are allocated from the "container" UIDs listed in
bb3e91
# /etc/subuid & /etc/subgid
bb3e91
#
bb3e91
#userns_size = 65536
bb3e91
bb3e91
# Default way to to create a UTS namespace for the container
bb3e91
# Options are:
bb3e91
# `private`        Create private UTS Namespace for the container.
bb3e91
# `host`    Share host UTS Namespace with the container.
bb3e91
#
bb3e91
#utsns = "private"
bb3e91
bb3e91
# List of volumes. Specified as
bb3e91
# "<directory-on-host>:<directory-in-container>:<options>", for example:
bb3e91
# "/db:/var/lib/db:ro".
bb3e91
# If it is empty or commented out, no volumes will be added
bb3e91
#
bb3e91
#volumes = []
bb3e91
bb3e91
[secrets]
bb3e91
#driver = "file"
bb3e91
bb3e91
[secrets.opts]
bb3e91
#root = "/example/directory"
bb3e91
bb3e91
[network]
bb3e91
bb3e91
# Network backend determines what network driver will be used to set up and tear down container networks.
bb3e91
# Valid values are "cni" and "netavark".
bb3e91
# The default value is empty which means that it will automatically choose CNI or netavark. If there are
bb3e91
# already containers/images or CNI networks preset it will choose CNI.
bb3e91
#
bb3e91
# Before changing this value all containers must be stopped otherwise it is likely that
bb3e91
# iptables rules and network interfaces might leak on the host. A reboot will fix this.
bb3e91
#
bb3e91
#network_backend = ""
bb3e91
bb3e91
# Path to directory where CNI plugin binaries are located.
bb3e91
#
bb3e91
#cni_plugin_dirs = [
bb3e91
#  "/usr/local/libexec/cni",
bb3e91
#  "/usr/libexec/cni",
bb3e91
#  "/usr/local/lib/cni",
bb3e91
#  "/usr/lib/cni",
bb3e91
#  "/opt/cni/bin",
bb3e91
#]
bb3e91
bb3e91
# The network name of the default network to attach pods to.
bb3e91
#
bb3e91
#default_network = "podman"
bb3e91
bb3e91
# The default subnet for the default network given in default_network.
bb3e91
# If a network with that name does not exist, a new network using that name and
bb3e91
# this subnet will be created.
bb3e91
# Must be a valid IPv4 CIDR prefix.
bb3e91
#
bb3e91
#default_subnet = "10.88.0.0/16"
bb3e91
947b07
# DefaultSubnetPools is a list of subnets and size which are used to
947b07
# allocate subnets automatically for podman network create.
947b07
# It will iterate through the list and will pick the first free subnet
947b07
# with the given size. This is only used for ipv4 subnets, ipv6 subnets
947b07
# are always assigned randomly.
947b07
#
947b07
#default_subnet_pools = [
947b07
#  {"base" = "10.89.0.0/16", "size" = 24},
947b07
#  {"base" = "10.90.0.0/15", "size" = 24},
947b07
#  {"base" = "10.92.0.0/14", "size" = 24},
947b07
#  {"base" = "10.96.0.0/11", "size" = 24},
947b07
#  {"base" = "10.128.0.0/9", "size" = 24},
947b07
#]
947b07
bb3e91
# Path to the directory where network configuration files are located.
bb3e91
# For the CNI backend the default is "/etc/cni/net.d" as root
bb3e91
# and "$HOME/.config/cni/net.d" as rootless.
bb3e91
# For the netavark backend "/etc/containers/networks" is used as root
bb3e91
# and "$graphroot/networks" as rootless.
bb3e91
#
bb3e91
#network_config_dir = "/etc/cni/net.d/"
bb3e91
6ca60b
# Port to use for dns forwarding daemon with netavark in rootful bridge
6ca60b
# mode and dns enabled.
6ca60b
# Using an alternate port might be useful if other dns services should
6ca60b
# run on the machine.
6ca60b
#
6ca60b
#dns_bind_port = 53
6ca60b
bb3e91
[engine]
bb3e91
# Index to the active service
bb3e91
#
bb3e91
#active_service = production
bb3e91
bb3e91
# The compression format to use when pushing an image.
bb3e91
# Valid options are: `gzip`, `zstd` and `zstd:chunked`.
bb3e91
#
bb3e91
#compression_format = "gzip"
bb3e91
bb3e91
bb3e91
# Cgroup management implementation used for the runtime.
bb3e91
# Valid options "systemd" or "cgroupfs"
bb3e91
#
bb3e91
#cgroup_manager = "systemd"
bb3e91
bb3e91
# Environment variables to pass into conmon
bb3e91
#
bb3e91
#conmon_env_vars = [
bb3e91
#  "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
bb3e91
#]
bb3e91
bb3e91
# Paths to look for the conmon container manager binary
bb3e91
#
bb3e91
#conmon_path = [
bb3e91
#  "/usr/libexec/podman/conmon",
bb3e91
#  "/usr/local/libexec/podman/conmon",
bb3e91
#  "/usr/local/lib/podman/conmon",
bb3e91
#  "/usr/bin/conmon",
bb3e91
#  "/usr/sbin/conmon",
bb3e91
#  "/usr/local/bin/conmon",
bb3e91
#  "/usr/local/sbin/conmon"
bb3e91
#]
bb3e91
bb3e91
# Enforces using docker.io for completing short names in Podman's compatibility
bb3e91
# REST API. Note that this will ignore unqualified-search-registries and
bb3e91
# short-name aliases defined in containers-registries.conf(5).
bb3e91
#compat_api_enforce_docker_hub = true
bb3e91
bb3e91
# Specify the keys sequence used to detach a container.
bb3e91
# Format is a single character [a-Z] or a comma separated sequence of
bb3e91
# `ctrl-<value>`, where `<value>` is one of:
bb3e91
# `a-z`, `@`, `^`, `[`, `\`, `]`, `^` or `_`
bb3e91
#
bb3e91
#detach_keys = "ctrl-p,ctrl-q"
bb3e91
bb3e91
# Determines whether engine will reserve ports on the host when they are
bb3e91
# forwarded to containers. When enabled, when ports are forwarded to containers,
bb3e91
# ports are held open by as long as the container is running, ensuring that
bb3e91
# they cannot be reused by other programs on the host. However, this can cause
bb3e91
# significant memory usage if a container has many ports forwarded to it.
bb3e91
# Disabling this can save memory.
bb3e91
#
bb3e91
#enable_port_reservation = true
bb3e91
bb3e91
# Environment variables to be used when running the container engine (e.g., Podman, Buildah).
bb3e91
# For example "http_proxy=internal.proxy.company.com".
bb3e91
# Note these environment variables will not be used within the container.
bb3e91
# Set the env section under [containers] table, if you want to set environment variables for the container.
bb3e91
#
bb3e91
#env = []
bb3e91
bb3e91
# Define where event logs will be stored, when events_logger is "file".
bb3e91
#events_logfile_path=""
bb3e91
947b07
# Sets the maximum size for events_logfile_path.
947b07
# The size can be b (bytes), k (kilobytes), m (megabytes), or g (gigabytes).
947b07
# The format for the size is `<number><unit>`, e.g., `1b` or `3g`.
947b07
# If no unit is included then the size will be read in bytes.
947b07
# When the limit is exceeded, the logfile will be rotated and the old one will be deleted.
947b07
# If the maximum size is set to 0, then no limit will be applied,
947b07
# and the logfile will not be rotated.
947b07
#events_logfile_max_size = "1m"
947b07
bb3e91
# Selects which logging mechanism to use for container engine events.
bb3e91
# Valid values are `journald`, `file` and `none`.
bb3e91
#
bb3e91
#events_logger = "journald"
bb3e91
bb3e91
# A is a list of directories which are used to search for helper binaries.
bb3e91
#
bb3e91
#helper_binaries_dir = [
bb3e91
#  "/usr/local/libexec/podman",
bb3e91
#  "/usr/local/lib/podman",
bb3e91
#  "/usr/libexec/podman",
bb3e91
#  "/usr/lib/podman",
bb3e91
#]
bb3e91
bb3e91
# Path to OCI hooks directories for automatically executed hooks.
bb3e91
#
bb3e91
#hooks_dir = [
bb3e91
#  "/usr/share/containers/oci/hooks.d",
bb3e91
#]
bb3e91
bb3e91
# Manifest Type (oci, v2s2, or v2s1) to use when pulling, pushing, building
bb3e91
# container images. By default image pulled and pushed match the format of the
bb3e91
# source image. Building/committing defaults to OCI.
bb3e91
#
bb3e91
#image_default_format = ""
bb3e91
bb3e91
# Default transport method for pulling and pushing for images
bb3e91
#
bb3e91
#image_default_transport = "docker://"
bb3e91
bb3e91
# Maximum number of image layers to be copied (pulled/pushed) simultaneously.
bb3e91
# Not setting this field, or setting it to zero, will fall back to containers/image defaults.
bb3e91
#
bb3e91
#image_parallel_copies = 0
bb3e91
6ca60b
# Tells container engines how to handle the builtin image volumes.
6ca60b
#   * bind: An anonymous named volume will be created and mounted
6ca60b
#     into the container.
6ca60b
#   * tmpfs: The volume is mounted onto the container as a tmpfs,
6ca60b
#     which allows users to create content that disappears when
6ca60b
#     the container is stopped.
6ca60b
#   * ignore: All volumes are just ignored and no action is taken.
6ca60b
#
6ca60b
#image_volume_mode = ""
6ca60b
bb3e91
# Default command to run the infra container
bb3e91
#
bb3e91
#infra_command = "/pause"
bb3e91
bb3e91
# Infra (pause) container image name for pod infra containers.  When running a
bb3e91
# pod, we start a `pause` process in a container to hold open the namespaces
bb3e91
# associated with the  pod.  This container does nothing other then sleep,
bb3e91
# reserving the pods resources for the lifetime of the pod. By default container
bb3e91
# engines run a builtin container using the pause executable. If you want override
bb3e91
# specify an image to pull.
bb3e91
#
bb3e91
#infra_image = ""
bb3e91
bb3e91
# Specify the locking mechanism to use; valid values are "shm" and "file".
bb3e91
# Change the default only if you are sure of what you are doing, in general
bb3e91
# "file" is useful only on platforms where cgo is not available for using the
bb3e91
# faster "shm" lock type. You may need to run "podman system renumber" after
bb3e91
# you change the lock type.
bb3e91
#
bb3e91
#lock_type** = "shm"
bb3e91
bb3e91
# MultiImageArchive - if true, the container engine allows for storing archives
bb3e91
# (e.g., of the docker-archive transport) with multiple images.  By default,
bb3e91
# Podman creates single-image archives.
bb3e91
#
bb3e91
#multi_image_archive = "false"
bb3e91
bb3e91
# Default engine namespace
bb3e91
# If engine is joined to a namespace, it will see only containers and pods
bb3e91
# that were created in the same namespace, and will create new containers and
bb3e91
# pods in that namespace.
bb3e91
# The default namespace is "", which corresponds to no namespace. When no
bb3e91
# namespace is set, all containers and pods are visible.
bb3e91
#
bb3e91
#namespace = ""
bb3e91
bb3e91
# Path to the slirp4netns binary
bb3e91
#
bb3e91
#network_cmd_path = ""
bb3e91
bb3e91
# Default options to pass to the slirp4netns binary.
947b07
# Valid options values are:
947b07
#
947b07
# - allow_host_loopback=true|false: Allow the slirp4netns to reach the host loopback IP (`10.0.2.2`).
947b07
#   Default is false.
947b07
# - mtu=MTU: Specify the MTU to use for this network. (Default is `65520`).
947b07
# - cidr=CIDR: Specify ip range to use for this network. (Default is `10.0.2.0/24`).
947b07
# - enable_ipv6=true|false: Enable IPv6. Default is true. (Required for `outbound_addr6`).
947b07
# - outbound_addr=INTERFACE: Specify the outbound interface slirp should bind to (ipv4 traffic only).
947b07
# - outbound_addr=IPv4: Specify the outbound ipv4 address slirp should bind to.
947b07
# - outbound_addr6=INTERFACE: Specify the outbound interface slirp should bind to (ipv6 traffic only).
947b07
# - outbound_addr6=IPv6: Specify the outbound ipv6 address slirp should bind to.
947b07
# - port_handler=rootlesskit: Use rootlesskit for port forwarding. Default.
947b07
#   Note: Rootlesskit changes the source IP address of incoming packets to a IP address in the container
947b07
#   network namespace, usually `10.0.2.100`. If your application requires the real source IP address,
947b07
#   e.g. web server logs, use the slirp4netns port handler. The rootlesskit port handler is also used for
947b07
#   rootless containers when connected to user-defined networks.
947b07
# - port_handler=slirp4netns: Use the slirp4netns port forwarding, it is slower than rootlesskit but
947b07
#   preserves the correct source IP address. This port handler cannot be used for user-defined networks.
947b07
#
947b07
#network_cmd_options = []
bb3e91
bb3e91
# Whether to use chroot instead of pivot_root in the runtime
bb3e91
#
bb3e91
#no_pivot_root = false
bb3e91
bb3e91
# Number of locks available for containers and pods.
bb3e91
# If this is changed, a lock renumber must be performed (e.g. with the
bb3e91
# 'podman system renumber' command).
bb3e91
#
bb3e91
#num_locks = 2048
bb3e91
947b07
# Set the exit policy of the pod when the last container exits.
947b07
#pod_exit_policy = "continue"
947b07
bb3e91
# Whether to pull new image before running a container
bb3e91
#
bb3e91
#pull_policy = "missing"
bb3e91
bb3e91
# Indicates whether the application should be running in remote mode. This flag modifies the
bb3e91
# --remote option on container engines. Setting the flag to true will default
bb3e91
# `podman --remote=true` for access to the remote Podman service.
bb3e91
#
bb3e91
#remote = false
bb3e91
bb3e91
# Default OCI runtime
bb3e91
#
bb3e91
#runtime = "crun"
bb3e91
runtime = "crun"
bb3e91
bb3e91
# List of the OCI runtimes that support --format=json. When json is supported
bb3e91
# engine will use it for reporting nicer errors.
bb3e91
#
bb3e91
#runtime_supports_json = ["crun", "runc", "kata", "runsc", "krun"]
bb3e91
bb3e91
# List of the OCI runtimes that supports running containers with KVM Separation.
bb3e91
#
bb3e91
#runtime_supports_kvm = ["kata", "krun"]
bb3e91
bb3e91
# List of the OCI runtimes that supports running containers without cgroups.
bb3e91
#
bb3e91
#runtime_supports_nocgroups = ["crun", "krun"]
bb3e91
bb3e91
# Default location for storing temporary container image content. Can be overridden with the TMPDIR environment
bb3e91
# variable. If you specify "storage", then the location of the
bb3e91
# container/storage tmp directory will be used.
bb3e91
# image_copy_tmp_dir="/var/tmp"
bb3e91
bb3e91
# Number of seconds to wait without a connection
bb3e91
# before the `podman system service` times out and exits
bb3e91
#
bb3e91
#service_timeout = 5
bb3e91
bb3e91
# Directory for persistent engine files (database, etc)
bb3e91
# By default, this will be configured relative to where the containers/storage
bb3e91
# stores containers
bb3e91
# Uncomment to change location from this default
bb3e91
#
bb3e91
#static_dir = "/var/lib/containers/storage/libpod"
bb3e91
bb3e91
# Number of seconds to wait for container to exit before sending kill signal.
bb3e91
#
bb3e91
#stop_timeout = 10
bb3e91
947b07
# Number of seconds to wait before exit command in API process is given to.
947b07
# This mimics Docker's exec cleanup behaviour, where the default is 5 minutes (value is in seconds).
947b07
#
947b07
#exit_command_delay = 300
947b07
bb3e91
# map of service destinations
bb3e91
#
bb3e91
#[service_destinations]
bb3e91
#  [service_destinations.production]
bb3e91
#     URI to access the Podman service
bb3e91
#     Examples:
bb3e91
#       rootless "unix://run/user/$UID/podman/podman.sock" (Default)
947b07
#       rootful "unix://run/podman/podman.sock (Default)
bb3e91
#       remote rootless ssh://engineering.lab.company.com/run/user/1000/podman/podman.sock
947b07
#       remote rootful ssh://root@10.10.1.136:22/run/podman/podman.sock
bb3e91
#
bb3e91
#    uri = "ssh://user@production.example.com/run/user/1001/podman/podman.sock"
bb3e91
#    Path to file containing ssh identity key
bb3e91
#    identity = "~/.ssh/id_rsa"
bb3e91
bb3e91
# Directory for temporary files. Must be tmpfs (wiped after reboot)
bb3e91
#
bb3e91
#tmp_dir = "/run/libpod"
bb3e91
bb3e91
# Directory for libpod named volumes.
bb3e91
# By default, this will be configured relative to where containers/storage
bb3e91
# stores containers.
bb3e91
# Uncomment to change location from this default.
bb3e91
#
bb3e91
#volume_path = "/var/lib/containers/storage/volumes"
bb3e91
bb3e91
# Paths to look for a valid OCI runtime (crun, runc, kata, runsc, krun, etc)
bb3e91
[engine.runtimes]
bb3e91
#crun = [
bb3e91
#  "/usr/bin/crun",
bb3e91
#  "/usr/sbin/crun",
bb3e91
#  "/usr/local/bin/crun",
bb3e91
#  "/usr/local/sbin/crun",
bb3e91
#  "/sbin/crun",
bb3e91
#  "/bin/crun",
bb3e91
#  "/run/current-system/sw/bin/crun",
bb3e91
#]
bb3e91
bb3e91
#kata = [
bb3e91
#  "/usr/bin/kata-runtime",
bb3e91
#  "/usr/sbin/kata-runtime",
bb3e91
#  "/usr/local/bin/kata-runtime",
bb3e91
#  "/usr/local/sbin/kata-runtime",
bb3e91
#  "/sbin/kata-runtime",
bb3e91
#  "/bin/kata-runtime",
bb3e91
#  "/usr/bin/kata-qemu",
bb3e91
#  "/usr/bin/kata-fc",
bb3e91
#]
bb3e91
bb3e91
#runc = [
bb3e91
#  "/usr/bin/runc",
bb3e91
#  "/usr/sbin/runc",
bb3e91
#  "/usr/local/bin/runc",
bb3e91
#  "/usr/local/sbin/runc",
bb3e91
#  "/sbin/runc",
bb3e91
#  "/bin/runc",
bb3e91
#  "/usr/lib/cri-o-runc/sbin/runc",
bb3e91
#]
bb3e91
bb3e91
#runsc = [
bb3e91
#  "/usr/bin/runsc",
bb3e91
#  "/usr/sbin/runsc",
bb3e91
#  "/usr/local/bin/runsc",
bb3e91
#  "/usr/local/sbin/runsc",
bb3e91
#  "/bin/runsc",
bb3e91
#  "/sbin/runsc",
bb3e91
#  "/run/current-system/sw/bin/runsc",
bb3e91
#]
bb3e91
bb3e91
#krun = [
bb3e91
#  "/usr/bin/krun",
bb3e91
#  "/usr/local/bin/krun",
bb3e91
#]
bb3e91
bb3e91
[engine.volume_plugins]
bb3e91
#testplugin = "/run/podman/plugins/test.sock"
bb3e91
bb3e91
[machine]
bb3e91
# Number of CPU's a machine is created with.
bb3e91
#
bb3e91
#cpus=1
bb3e91
bb3e91
# The size of the disk in GB created when init-ing a podman-machine VM.
bb3e91
#
bb3e91
#disk_size=10
bb3e91
bb3e91
# The image used when creating a podman-machine VM.
bb3e91
#
bb3e91
#image = "testing"
bb3e91
bb3e91
# Memory in MB a machine is created with.
bb3e91
#
bb3e91
#memory=2048
bb3e91
bb3e91
# The username to use and create on the podman machine OS for rootless
bb3e91
# container access.
bb3e91
#
bb3e91
#user = "core"
bb3e91
947b07
# Host directories to be mounted as volumes into the VM by default.
947b07
# Environment variables like $HOME as well as complete paths are supported for
947b07
# the source and destination. An optional third field `:ro` can be used to
947b07
# tell the container engines to mount the volume readonly.
947b07
#
947b07
# volumes = [
947b07
#  "$HOME:$HOME",
947b07
#]
947b07
bb3e91
# The [machine] table MUST be the last entry in this file.
bb3e91
# (Unless another table is added)
bb3e91
# TOML does not provide a way to end a table other than a further table being
bb3e91
# defined, so every key hereafter will be part of [machine] and not the
bb3e91
# main config.