1+ version = 1
2+ # Snapshotter's own home directory where it stores and creates necessary resources
3+ root = " /var/lib/containerd-nydus"
4+ # The snapshotter's GRPC server socket, containerd will connect to plugin on this socket
5+ address = " /run/containerd-nydus/containerd-nydus-grpc.sock"
6+ daemon_mode = " dedicated"
7+ # Whether snapshotter should try to clean up resources when it is closed
8+ cleanup_on_close = false
9+
10+ [system ]
11+ # Snapshotter's debug and trace HTTP server interface
12+ enable = true
13+ # Unix domain socket path where system controller is listening on
14+ address = " /run/containerd-nydus/system.sock"
15+
16+ [system .debug ]
17+ # Snapshotter can profile the CPU utilization of each nydusd daemon when it is being started.
18+ # This option specifies the profile duration when nydusd is downloading and uncomproessing data.
19+ daemon_cpu_profile_duration_secs = 5
20+ # Enable by assigning an address, empty indicates pprof server is disabled
21+ pprof_address = " "
22+
23+ [daemon ]
24+ # Specify a configuration file for nydusd
25+ nydusd_config = " /etc/nydusd-config.json"
26+ nydusd_path = " /usr/local/bin/nydusd"
27+ nydusimage_path = " /usr/local/bin/nydus-image"
28+ # fusedev or fscache
29+ fs_driver = " fusedev"
30+ # How to process when daemon dies: "none", "restart" or "failover"
31+ recover_policy = " restart"
32+ # Nydusd worker thread number to handle FUSE or fscache requests, [0-1024].
33+ # Setting to 0 will use the default configuration of nydusd.
34+ threads_number = 4
35+ # Log rotation size for nydusd, in unit MB(megabytes)
36+ log_rotation_size = 100
37+
38+
39+ [cgroup ]
40+ # Whether to use separate cgroup for nydusd.
41+ enable = true
42+ # The memory limit for nydusd cgroup, which contains all nydusd processes.
43+ # Percentage is supported as well, please ensure it is end with "%".
44+ # The default unit is bytes. Acceptable values include "209715200", "200MiB", "200Mi" and "10%".
45+ memory_limit = " "
46+
47+ [log ]
48+ # Print logs to stdout rather than logging files
49+ log_to_stdout = false
50+ # Snapshotter's log level
51+ level = " info"
52+ log_rotation_compress = true
53+ log_rotation_local_time = true
54+ # Max number of days to retain logs
55+ log_rotation_max_age = 7
56+ log_rotation_max_backups = 5
57+ # In unit MB(megabytes)
58+ log_rotation_max_size = 100
59+
60+ [metrics ]
61+ # Enable by assigning an address, empty indicates metrics server is disabled
62+ address = " :9110"
63+
64+ [remote ]
65+ convert_vpc_registry = false
66+
67+ [remote .mirrors_config ]
68+ # Snapshotter will overwrite daemon's mirrors configuration
69+ # if the values loaded from this driectory are not null before starting a daemon.
70+ # Set to "" or an empty directory to disable it.
71+ # dir = "/etc/nydus/certs.d"
72+
73+ [remote .auth ]
74+ # Fetch the private registry auth by listening to K8s API server
75+ enable_kubeconfig_keychain = false
76+ # synchronize `kubernetes.io/dockerconfigjson` secret from kubernetes API server with specified kubeconfig (default `$KUBECONFIG` or `~/.kube/config`)
77+ kubeconfig_path = " "
78+ # Fetch the private registry auth as CRI image service proxy
79+ enable_cri_keychain = false
80+ # the target image service when using image proxy
81+ # image_service_address = "/run/containerd/containerd.sock"
82+
83+ [snapshot ]
84+ # Let containerd use nydus-overlayfs mount helper
85+ enable_nydus_overlayfs = true
86+ # Insert Kata Virtual Volume option to `Mount.Options`
87+ enable_kata_volume = false
88+ # Whether to remove resources when a snapshot is removed
89+ sync_remove = false
90+
91+ [cache_manager ]
92+ disable = false
93+ gc_period = " 24h"
94+ # Directory to host cached files
95+ cache_dir = " "
96+
97+ [image ]
98+ public_key_file = " "
99+ validate_signature = false
100+
101+ # The configuraions for features that are not production ready
102+ [experimental ]
103+ # Whether to enable stargz support
104+ enable_stargz = false
105+ # Whether to enable referrers support
106+ # The option enables trying to fetch the Nydus image associated with the OCI image and run it.
107+ # Also see https://github.com/opencontainers/distribution-spec/blob/main/spec.md#listing-referrers
108+ enable_referrer_detect = false
109+ [experimental .tarfs ]
110+ # Whether to enable nydus tarfs mode. Tarfs is supported by:
111+ # - The EROFS filesystem driver since Linux 6.4
112+ # - Nydus Image Service release v2.3
113+ enable_tarfs = false
114+ # Mount rafs on host by loopdev and EROFS
115+ mount_tarfs_on_host = false
116+ # Only enable nydus tarfs mode for images with `tarfs hint` label when true
117+ tarfs_hint = false
118+ # Maximum of concurrence to converting OCIv1 images to tarfs, 0 means default
119+ max_concurrent_proc = 0
120+ # Mode to export tarfs images:
121+ # - "none" or "": do not export tarfs
122+ # - "layer_verity_only": only generate disk verity information for a layer blob
123+ # - "image_verity_only": only generate disk verity information for all blobs of an image
124+ # - "layer_block": generate a raw block disk image with tarfs for a layer
125+ # - "image_block": generate a raw block disk image with tarfs for an image
126+ # - "layer_block_with_verity": generate a raw block disk image with tarfs for a layer with dm-verity info
127+ # - "image_block_with_verity": generate a raw block disk image with tarfs for an image with dm-verity info
128+ export_mode = " "
0 commit comments