1
+ version = 1
2
+ # Snapshotter's own home directory where it stores and creates necessary resources
3
+ root = " /var/lib/containerd-nydus"
4
+ # The snapshotter's GRPC server socket, containerd will connect to plugin on this socket
5
+ address = " /run/containerd-nydus/containerd-nydus-grpc.sock"
6
+ # The nydus daemon mode can be one of the following options: multiple, dedicated, shared, or none.
7
+ # If `daemon_mode` option is not specified, the default value is multiple.
8
+ daemon_mode = " dedicated"
9
+ # Whether snapshotter should try to clean up resources when it is closed
10
+ cleanup_on_close = false
11
+
12
+ [system ]
13
+ # Snapshotter's debug and trace HTTP server interface
14
+ enable = true
15
+ # Unix domain socket path where system controller is listening on
16
+ address = " /run/containerd-nydus/system.sock"
17
+
18
+ [system .debug ]
19
+ # Snapshotter can profile the CPU utilization of each nydusd daemon when it is being started.
20
+ # This option specifies the profile duration when nydusd is downloading and uncomproessing data.
21
+ daemon_cpu_profile_duration_secs = 5
22
+ # Enable by assigning an address, empty indicates pprof server is disabled
23
+ pprof_address = " "
24
+
25
+ [daemon ]
26
+ # Specify a configuration file for nydusd
27
+ nydusd_config = " /etc/nydus/nydusd-config.fusedev.json"
28
+ nydusd_path = " /usr/local/bin/nydusd"
29
+ nydusimage_path = " /usr/local/bin/nydus-image"
30
+ # fusedev or fscache
31
+ fs_driver = " fusedev"
32
+ # How to process when daemon dies: "none", "restart" or "failover"
33
+ recover_policy = " restart"
34
+ # Nydusd worker thread number to handle FUSE or fscache requests, [0-1024].
35
+ # Setting to 0 will use the default configuration of nydusd.
36
+ threads_number = 4
37
+ # Log rotation size for nydusd, in unit MB(megabytes). (default 100MB)
38
+ log_rotation_size = 100
39
+
40
+ [cgroup ]
41
+ # Whether to use separate cgroup for nydusd.
42
+ enable = true
43
+ # The memory limit for nydusd cgroup, which contains all nydusd processes.
44
+ # Percentage is supported as well, please ensure it is end with "%".
45
+ # The default unit is bytes. Acceptable values include "209715200", "200MiB", "200Mi" and "10%".
46
+ memory_limit = " "
47
+
48
+ [log ]
49
+ # Print logs to stdout rather than logging files
50
+ log_to_stdout = false
51
+ dir = " /etc/nydus/logs"
52
+ # Snapshotter's log level
53
+ level = " info"
54
+ log_rotation_compress = true
55
+ log_rotation_local_time = true
56
+ # Max number of days to retain logs
57
+ log_rotation_max_age = 7
58
+ log_rotation_max_backups = 5
59
+ # In unit MB(megabytes)
60
+ log_rotation_max_size = 100
61
+
62
+ [metrics ]
63
+ # Enable by assigning an address, empty indicates metrics server is disabled
64
+ address = " :9110"
65
+
66
+ [remote ]
67
+ convert_vpc_registry = false
68
+
69
+ [remote .mirrors_config ]
70
+ # Snapshotter will overwrite daemon's mirrors configuration
71
+ # if the values loaded from this driectory are not null before starting a daemon.
72
+ # Set to "" or an empty directory to disable it.
73
+ # dir = "/etc/nydus/certs.d"
74
+
75
+ [remote .auth ]
76
+ # Fetch the private registry auth by listening to K8s API server
77
+ enable_kubeconfig_keychain = false
78
+ # synchronize `kubernetes.io/dockerconfigjson` secret from kubernetes API server with specified kubeconfig (default `$KUBECONFIG` or `~/.kube/config`)
79
+ kubeconfig_path = " "
80
+ # Fetch the private registry auth as CRI image service proxy
81
+ enable_cri_keychain = false
82
+ # the target image service when using image proxy
83
+ # image_service_address = "/run/containerd/containerd.sock"
84
+
85
+ [snapshot ]
86
+ # Let containerd use nydus-overlayfs mount helper
87
+ enable_nydus_overlayfs = false
88
+ # Insert Kata Virtual Volume option to `Mount.Options`
89
+ enable_kata_volume = false
90
+ # Whether to remove resources when a snapshot is removed
91
+ sync_remove = false
92
+
93
+ [cache_manager ]
94
+ # Disable or enable recyclebin
95
+ disable = false
96
+ # How long to keep deleted files in recyclebin
97
+ gc_period = " 24h"
98
+ # Directory to host cached files
99
+ cache_dir = " "
100
+
101
+ [image ]
102
+ public_key_file = " "
103
+ validate_signature = false
104
+
105
+ # The configuraions for features that are not production ready
106
+ [experimental ]
107
+ # Whether to enable stargz support
108
+ enable_stargz = false
109
+ # Whether to enable referrers support
110
+ # The option enables trying to fetch the Nydus image associated with the OCI image and run it.
111
+ # Also see https://github.com/opencontainers/distribution-spec/blob/main/spec.md#listing-referrers
112
+ enable_referrer_detect = false
113
+ # Whether to enable authentication support
114
+ # The option enables nydus snapshot to provide backend information to nydusd.
115
+ enable_backend_source = false
116
+ [experimental .tarfs ]
117
+ # Whether to enable nydus tarfs mode. Tarfs is supported by:
118
+ # - The EROFS filesystem driver since Linux 6.4
119
+ # - Nydus Image Service release v2.3
120
+ enable_tarfs = false
121
+ # Mount rafs on host by loopdev and EROFS
122
+ mount_tarfs_on_host = false
123
+ # Only enable nydus tarfs mode for images with `tarfs hint` label when true
124
+ tarfs_hint = false
125
+ # Maximum of concurrence to converting OCIv1 images to tarfs, 0 means default
126
+ max_concurrent_proc = 0
127
+ # Mode to export tarfs images:
128
+ # - "none" or "": do not export tarfs
129
+ # - "layer_verity_only": only generate disk verity information for a layer blob
130
+ # - "image_verity_only": only generate disk verity information for all blobs of an image
131
+ # - "layer_block": generate a raw block disk image with tarfs for a layer
132
+ # - "image_block": generate a raw block disk image with tarfs for an image
133
+ # - "layer_block_with_verity": generate a raw block disk image with tarfs for a layer with dm-verity info
134
+ # - "image_block_with_verity": generate a raw block disk image with tarfs for an image with dm-verity info
135
+ export_mode = " "
0 commit comments