[containers] # A list of ulimits to be set in containers by default, specified as # "=:", for example: # "nofile=1024:2048" # See setrlimit(2) for a list of resource names. # Any limit not specified here will be inherited from the process launching the # container engine. # Ulimits has limits for non privileged container engines. # default_ulimits = [ "nofile=500:500", ] # Environment variable list for the conmon process; used for passing necessary # environment variables to conmon or the runtime. # env = [ "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin", "foo=bar", ] # container engines use container separation using MAC(SELinux) labeling. # Flag is ignored on label disabled systems. # label = true # Size of /dev/shm. Specified as . # Unit is optional, values: # b (bytes), k (kilobytes), m (megabytes), or g (gigabytes). # If the unit is omitted, the system uses bytes. # shm_size = "201k" # List of devices. Specified as # "::", for example: # "/dev/sdc:/dev/xvdc:rwm". # If it is empty or commented out, only the default devices will be used # devices = [ "/dev/zero:/dev/notone:rwm", ] default_sysctls = [ "net.ipv4.ping_group_range=0 1000", ] dns_searches=[ "foobar.com", ] dns_servers=[ "1.2.3.4", ] dns_options=[ "debug", ]