{\rtf1\ansi\ansicpg1252\cocoartf1561\cocoasubrtf610 {\fonttbl\f0\fmodern\fcharset0 CourierNewPSMT;} {\colortbl;\red255\green255\blue255;\red0\green0\blue0;} {\*\expandedcolortbl;;\cssrgb\c0\c0\c0;} \margl1440\margr1440\vieww23220\viewh8400\viewkind0 \deftab720 \pard\pardeftab720\sl400\partightenfactor0 \f0\fs22 \cf2 \expnd0\expndtw0\kerning0 \outl0\strokewidth0 \strokec2 # libpod.conf is the default configuration file for all tools using libpod to\ # manage containers\ \pard\pardeftab720\sl280\partightenfactor0 \cf2 \ \pard\pardeftab720\sl400\partightenfactor0 \cf2 # Default transport method for pulling and pushing for images\ image_default_transport = "docker://"\ \pard\pardeftab720\sl280\partightenfactor0 \cf2 \ \pard\pardeftab720\sl400\partightenfactor0 \cf2 # Paths to look for the conmon container manager binary.\ # If the paths are empty or no valid path was found, then the `$PATH`\ # environment variable will be used as the fallback.\ conmon_path = [\ \'a0 \'a0 "/usr/libexec/podman/conmon",\ \'a0 \'a0 "/usr/local/libexec/podman/conmon",\ \'a0 \'a0 "/usr/local/lib/podman/conmon",\ \'a0 \'a0 "/usr/bin/conmon",\ \'a0 \'a0 "/usr/sbin/conmon",\ \'a0 \'a0 "/usr/local/bin/conmon",\ \'a0 \'a0 "/usr/local/sbin/conmon",\ \'a0 \'a0 "/run/current-system/sw/bin/conmon",\ ]\ \pard\pardeftab720\sl280\partightenfactor0 \cf2 \ \pard\pardeftab720\sl400\partightenfactor0 \cf2 # Environment variables to pass into conmon\ conmon_env_vars = [\ "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"\ ]\ \pard\pardeftab720\sl280\partightenfactor0 \cf2 \ \pard\pardeftab720\sl400\partightenfactor0 \cf2 # CGroup Manager - valid values are "systemd" and "cgroupfs"\ cgroup_manager = "systemd"\ \pard\pardeftab720\sl280\partightenfactor0 \cf2 \ \pard\pardeftab720\sl400\partightenfactor0 \cf2 # Container init binary\ #init_path = "/usr/libexec/podman/catatonit"\ \pard\pardeftab720\sl280\partightenfactor0 \cf2 \ \pard\pardeftab720\sl400\partightenfactor0 \cf2 # Directory for persistent libpod files (database, etc)\ # By default, this will be configured relative to where containers/storage\ # stores containers\ # Uncomment to change location from this default\ #static_dir = "/var/lib/containers/storage/libpod"\ \pard\pardeftab720\sl280\partightenfactor0 \cf2 \ \pard\pardeftab720\sl400\partightenfactor0 \cf2 # Directory for temporary files. Must be tmpfs (wiped after reboot)\ tmp_dir = "/var/run/libpod"\ \pard\pardeftab720\sl280\partightenfactor0 \cf2 \ \pard\pardeftab720\sl400\partightenfactor0 \cf2 # Maximum size of log files (in bytes)\ # -1 is unlimited\ max_log_size = -1\ \pard\pardeftab720\sl280\partightenfactor0 \cf2 \ \pard\pardeftab720\sl400\partightenfactor0 \cf2 # Whether to use chroot instead of pivot_root in the runtime\ no_pivot_root = false\ \pard\pardeftab720\sl280\partightenfactor0 \cf2 \ \pard\pardeftab720\sl400\partightenfactor0 \cf2 # Directory containing CNI plugin configuration files\ cni_config_dir = "/etc/cni/net.d/"\ \pard\pardeftab720\sl280\partightenfactor0 \cf2 \ \pard\pardeftab720\sl400\partightenfactor0 \cf2 # Directories where the CNI plugin binaries may be located\ cni_plugin_dir = [\ \'a0 \'a0 \'a0 "/usr/libexec/cni",\ \'a0 \'a0 \'a0 "/usr/lib/cni",\ \'a0 \'a0 \'a0 "/usr/local/lib/cni",\ \'a0 \'a0 \'a0 "/opt/cni/bin"\ ]\ \pard\pardeftab720\sl280\partightenfactor0 \cf2 \ \pard\pardeftab720\sl400\partightenfactor0 \cf2 # Default CNI network for libpod.\ # If multiple CNI network configs are present, libpod will use the network with\ # the name given here for containers unless explicitly overridden.\ # The default here is set to the name we set in the\ # 87-podman-bridge.conflist included in the repository.\ # Not setting this, or setting it to the empty string, will use normal CNI\ # precedence rules for selecting between multiple networks.\ cni_default_network = "podman"\ \pard\pardeftab720\sl280\partightenfactor0 \cf2 \ \pard\pardeftab720\sl400\partightenfactor0 \cf2 # Default libpod namespace\ # If libpod is joined to a namespace, it will see only containers and pods\ # that were created in the same namespace, and will create new containers and\ # pods in that namespace.\ # The default namespace is "", which corresponds to no namespace. When no\ # namespace is set, all containers and pods are visible.\ #namespace = ""\ \pard\pardeftab720\sl280\partightenfactor0 \cf2 \ \pard\pardeftab720\sl400\partightenfactor0 \cf2 # Default infra (pause) image name for pod infra containers\ infra_image = "k8s.gcr.io/pause:3.1"\ \pard\pardeftab720\sl280\partightenfactor0 \cf2 \ \pard\pardeftab720\sl400\partightenfactor0 \cf2 # Default command to run the infra container\ infra_command = "/pause"\ \pard\pardeftab720\sl280\partightenfactor0 \cf2 \ \pard\pardeftab720\sl400\partightenfactor0 \cf2 # Determines whether libpod will reserve ports on the host when they are\ # forwarded to containers. When enabled, when ports are forwarded to containers,\ # they are held open by conmon as long as the container is running, ensuring that\ # they cannot be reused by other programs on the host. However, this can cause\ # significant memory usage if a container has many ports forwarded to it.\ # Disabling this can save memory.\ #enable_port_reservation = true\ \pard\pardeftab720\sl280\partightenfactor0 \cf2 \ \pard\pardeftab720\sl400\partightenfactor0 \cf2 # Default libpod support for container labeling\ # label=true\ \pard\pardeftab720\sl280\partightenfactor0 \cf2 \ \pard\pardeftab720\sl400\partightenfactor0 \cf2 # The locking mechanism to use\ lock_type = "shm"\ \pard\pardeftab720\sl280\partightenfactor0 \cf2 \ \pard\pardeftab720\sl400\partightenfactor0 \cf2 # Number of locks available for containers and pods.\ # If this is changed, a lock renumber must be performed (e.g. with the\ # 'podman system renumber' command).\ num_locks = 2048\ \pard\pardeftab720\sl280\partightenfactor0 \cf2 \ \pard\pardeftab720\sl400\partightenfactor0 \cf2 # Directory for libpod named volumes.\ # By default, this will be configured relative to where containers/storage\ # stores containers.\ # Uncomment to change location from this default.\ #volume_path = "/var/lib/containers/storage/volumes"\ \pard\pardeftab720\sl280\partightenfactor0 \cf2 \ \pard\pardeftab720\sl400\partightenfactor0 \cf2 # Selects which logging mechanism to use for Podman events.\'a0 Valid values\ # are `journald` or `file`.\ # events_logger = "journald"\ \pard\pardeftab720\sl280\partightenfactor0 \cf2 \ \pard\pardeftab720\sl400\partightenfactor0 \cf2 # Specify the keys sequence used to detach a container.\ # Format is a single character [a-Z] or a comma separated sequence of\ # `ctrl-`, where `` is one of:\ # `a-z`, `@`, `^`, `[`, `\\`, `]`, `^` or `_`\ #\ # detach_keys = "ctrl-p,ctrl-q"\ \pard\pardeftab720\sl280\partightenfactor0 \cf2 \ \pard\pardeftab720\sl400\partightenfactor0 \cf2 # Default OCI runtime\ runtime = "runc"\ \pard\pardeftab720\sl280\partightenfactor0 \cf2 \ \pard\pardeftab720\sl400\partightenfactor0 \cf2 # List of the OCI runtimes that support --format=json.\'a0 When json is supported\ # libpod will use it for reporting nicer errors.\ runtime_supports_json = ["crun", "runc"]\ \pard\pardeftab720\sl280\partightenfactor0 \cf2 \ \pard\pardeftab720\sl400\partightenfactor0 \cf2 # List of all the OCI runtimes that support --cgroup-manager=disable to disable\ # creation of CGroups for containers.\ runtime_supports_nocgroups = ["crun"]\ \pard\pardeftab720\sl280\partightenfactor0 \cf2 \ \pard\pardeftab720\sl400\partightenfactor0 \cf2 # Paths to look for a valid OCI runtime (runc, runv, etc)\ # If the paths are empty or no valid path was found, then the `$PATH`\ # environment variable will be used as the fallback.\ [runtimes]\ runc = [\ \'a0 \'a0 "/usr/bin/runc",\ \'a0 \'a0 "/usr/sbin/runc",\ \'a0 \'a0 "/usr/local/bin/runc",\ \'a0 \'a0 "/usr/local/sbin/runc",\ \'a0 \'a0 "/sbin/runc",\ \'a0 \'a0 "/bin/runc",\ \'a0 \'a0 "/usr/lib/cri-o-runc/sbin/runc",\ \'a0 \'a0 "/run/current-system/sw/bin/runc",\ ]\ \pard\pardeftab720\sl280\partightenfactor0 \cf2 \ \pard\pardeftab720\sl400\partightenfactor0 \cf2 crun = [\ \'a0 \'a0 "/usr/bin/crun",\ \'a0 \'a0 "/usr/local/bin/crun",\ ]\ \pard\pardeftab720\sl280\partightenfactor0 \cf2 \ \pard\pardeftab720\sl400\partightenfactor0 \cf2 # The [runtimes] table MUST be the last thing in this file.\ # (Unless another table is added)\ # TOML does not provide a way to end a table other than a further table being\ # defined, so every key hereafter will be part of [runtimes] and not the main\ # config.\ }