Subversion Repositories configs

Rev

Rev 192 | Rev 203 | Go to most recent revision | Details | Compare with Previous | Last modification | View Log | RSS feed

Rev Author Line No. Line
192 - 1
# This file is is the configuration file for all tools
2
# that use the containers/storage library.
3
# See man 5 containers-storage.conf for more information
4
# The "container storage" table contains all of the server options.
5
[storage]
6
 
197 - 7
# Default Storage Driver, Must be set for proper operation.
192 - 8
driver = "overlay"
9
 
10
# Temporary storage location
197 - 11
runroot = "/run/containers/storage"
192 - 12
 
13
# Primary Read/Write location of container storage
14
graphroot = "/var/lib/containers/storage"
15
 
16
# Storage path for rootless users
17
#
18
# rootless_storage_path = "$HOME/.local/share/containers/storage"
19
 
20
[storage.options]
21
# Storage options to be passed to underlying storage drivers
22
 
23
# AdditionalImageStores is used to pass paths to additional Read/Only image stores
24
# Must be comma separated list.
25
additionalimagestores = [
26
]
27
 
28
# Remap-UIDs/GIDs is the mapping from UIDs/GIDs as they should appear inside of
29
# a container, to the UIDs/GIDs as they should appear outside of the container,
30
# and the length of the range of UIDs/GIDs.  Additional mapped sets can be
31
# listed and will be heeded by libraries, but there are limits to the number of
32
# mappings which the kernel will allow when you later attempt to run a
33
# container.
34
#
35
# remap-uids = 0:1668442479:65536
36
# remap-gids = 0:1668442479:65536
37
 
38
# Remap-User/Group is a user name which can be used to look up one or more UID/GID
39
# ranges in the /etc/subuid or /etc/subgid file.  Mappings are set up starting
40
# with an in-container ID of 0 and then a host-level ID taken from the lowest
41
# range that matches the specified name, and using the length of that range.
42
# Additional ranges are then assigned, using the ranges which specify the
43
# lowest host-level IDs first, to the lowest not-yet-mapped in-container ID,
44
# until all of the entries have been used for maps.
45
#
46
# remap-user = "containers"
47
# remap-group = "containers"
48
 
49
# Root-auto-userns-user is a user name which can be used to look up one or more UID/GID
50
# ranges in the /etc/subuid and /etc/subgid file.  These ranges will be partitioned
51
# to containers configured to create automatically a user namespace.  Containers
52
# configured to automatically create a user namespace can still overlap with containers
53
# having an explicit mapping set.
54
# This setting is ignored when running as rootless.
55
# root-auto-userns-user = "storage"
56
#
57
# Auto-userns-min-size is the minimum size for a user namespace created automatically.
58
# auto-userns-min-size=1024
59
#
60
# Auto-userns-max-size is the minimum size for a user namespace created automatically.
61
# auto-userns-max-size=65536
62
 
63
[storage.options.overlay]
64
# ignore_chown_errors can be set to allow a non privileged user running with
65
# a single UID within a user namespace to run containers. The user can pull
66
# and use any image even those with multiple uids.  Note multiple UIDs will be
67
# squashed down to the default uid in the container.  These images will have no
68
# separation between the users in the container. Only supported for the overlay
69
# and vfs drivers.
70
#ignore_chown_errors = "false"
71
 
72
# Path to an helper program to use for mounting the file system instead of mounting it
73
# directly.
74
#mount_program = "/usr/bin/fuse-overlayfs"
75
 
76
# mountopt specifies comma separated list of extra mount options
77
mountopt = "nodev,metacopy=on"
78
 
79
# Set to skip a PRIVATE bind mount on the storage home directory.
80
# skip_mount_home = "false"
81
 
82
# Size is used to set a maximum size of the container image.
83
# size = ""
84
 
197 - 85
# ForceMask specifies the permissions mask that is used for new files and
86
# directories.
87
#
88
# The values "shared" and "private" are accepted.
89
# Octal permission masks are also accepted.
90
#
91
#  "": No value specified.
92
#     All files/directories, get set with the permissions identified within the
93
#     image.
94
#  "private": it is equivalent to 0700.
95
#     All files/directories get set with 0700 permissions.  The owner has rwx
96
#     access to the files. No other users on the system can access the files.
97
#     This setting could be used with networked based homedirs.
98
#  "shared": it is equivalent to 0755.
99
#     The owner has rwx access to the files and everyone else can read, access
100
#     and execute them. This setting is useful for sharing containers storage
101
#     with other users.  For instance have a storage owned by root but shared
102
#     to rootless users as an additional store.
103
#     NOTE:  All files within the image are made readable and executable by any
104
#     user on the system. Even /etc/shadow within your image is now readable by
105
#     any user.
106
#
107
#   OCTAL: Users can experiment with other OCTAL Permissions.
108
#
109
#  Note: The force_mask Flag is an experimental feature, it could change in the
110
#  future.  When "force_mask" is set the original permission mask is stored in
111
#  the "user.containers.override_stat" xattr and the "mount_program" option must
112
#  be specified. Mount programs like "/usr/bin/fuse-overlayfs" present the
113
#  extended attribute permissions to processes within containers rather then the
114
#  "force_mask"  permissions.
115
#
116
# force_mask = ""
117
 
192 - 118
[storage.options.thinpool]
119
# Storage Options for thinpool
120
 
121
# autoextend_percent determines the amount by which pool needs to be
122
# grown. This is specified in terms of % of pool size. So a value of 20 means
123
# that when threshold is hit, pool will be grown by 20% of existing
124
# pool size.
125
# autoextend_percent = "20"
126
 
127
# autoextend_threshold determines the pool extension threshold in terms
128
# of percentage of pool size. For example, if threshold is 60, that means when
129
# pool is 60% full, threshold has been hit.
130
# autoextend_threshold = "80"
131
 
132
# basesize specifies the size to use when creating the base device, which
133
# limits the size of images and containers.
134
# basesize = "10G"
135
 
136
# blocksize specifies a custom blocksize to use for the thin pool.
137
# blocksize="64k"
138
 
139
# directlvm_device specifies a custom block storage device to use for the
140
# thin pool. Required if you setup devicemapper.
141
# directlvm_device = ""
142
 
143
# directlvm_device_force wipes device even if device already has a filesystem.
144
# directlvm_device_force = "True"
145
 
146
# fs specifies the filesystem type to use for the base device.
147
# fs="xfs"
148
 
149
# log_level sets the log level of devicemapper.
150
# 0: LogLevelSuppress 0 (Default)
151
# 2: LogLevelFatal
152
# 3: LogLevelErr
153
# 4: LogLevelWarn
154
# 5: LogLevelNotice
155
# 6: LogLevelInfo
156
# 7: LogLevelDebug
157
# log_level = "7"
158
 
159
# min_free_space specifies the min free space percent in a thin pool require for
160
# new device creation to succeed. Valid values are from 0% - 99%.
161
# Value 0% disables
162
# min_free_space = "10%"
163
 
164
# mkfsarg specifies extra mkfs arguments to be used when creating the base
165
# device.
166
# mkfsarg = ""
167
 
168
# metadata_size is used to set the `pvcreate --metadatasize` options when
169
# creating thin devices. Default is 128k
170
# metadata_size = ""
171
 
172
# Size is used to set a maximum size of the container image.
173
# size = ""
174
 
175
# use_deferred_removal marks devicemapper block device for deferred removal.
176
# If the thinpool is in use when the driver attempts to remove it, the driver
177
# tells the kernel to remove it as soon as possible. Note this does not free
178
# up the disk space, use deferred deletion to fully remove the thinpool.
179
# use_deferred_removal = "True"
180
 
181
# use_deferred_deletion marks thinpool device for deferred deletion.
182
# If the device is busy when the driver attempts to delete it, the driver
183
# will attempt to delete device every 30 seconds until successful.
184
# If the program using the driver exits, the driver will continue attempting
185
# to cleanup the next time the driver is used. Deferred deletion permanently
186
# deletes the device and all data stored in device will be lost.
187
# use_deferred_deletion = "True"
188
 
189
# xfs_nospace_max_retries specifies the maximum number of retries XFS should
190
# attempt to complete IO when ENOSPC (no space) error is returned by
191
# underlying storage device.
192
# xfs_nospace_max_retries = "0"