42 lines
967 B
Plaintext
42 lines
967 B
Plaintext
[crio]
|
|
root = "/var/lib/containers/storage"
|
|
runroot = "/var/run/containers/storage"
|
|
storage_driver = "overlay"
|
|
storage_option = ["overlay.override_kernel_check=1"]
|
|
|
|
[crio.api]
|
|
listen = "/var/run/crio.sock"
|
|
stream_address = "localhost"
|
|
stream_port = "10010"
|
|
|
|
[crio.runtime]
|
|
runtime = "/usr/local/bin/runc"
|
|
runtime_untrusted_workload = "untrusted"
|
|
default_workload_trust = "trusted"
|
|
conmon = "/usr/local/libexec/crio/conmon"
|
|
conmon_env = [
|
|
"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
|
|
]
|
|
selinux = true
|
|
seccomp_profile = "/etc/crio/seccomp.json"
|
|
apparmor_profile = "crio-default"
|
|
cgroup_manager = "cgroupfs"
|
|
pids_limit = 1024
|
|
|
|
[crio.image]
|
|
default_transport = "docker://"
|
|
pause_image = "kubernetes/pause"
|
|
pause_command = "/pause"
|
|
signature_policy = "/tmp"
|
|
image_volumes = "mkdir"
|
|
insecure_registries = [
|
|
"insecure-registry:1234",
|
|
]
|
|
registries = [
|
|
"registry:4321",
|
|
]
|
|
|
|
[crio.network]
|
|
network_dir = "/etc/cni/net.d/"
|
|
plugin_dir = "/opt/cni/bin/"
|