1+ version = 1
2+ # Snapshotter's own home directory where it stores and creates necessary resources
3+ root = " /var/lib/containerd-nydus"
4+ # The snapshotter's GRPC server socket, containerd will connect to plugin on this socket
5+ address = " /run/containerd-nydus/containerd-nydus-grpc.sock"
6+ # The nydus daemon mode can be one of the following options: multiple, dedicated, shared, or none.
7+ # If `daemon_mode` option is not specified, the default value is multiple.
8+ daemon_mode = " dedicated"
9+ # Whether snapshotter should try to clean up resources when it is closed
10+ cleanup_on_close = false
11+
12+ [system ]
13+ # Snapshotter's debug and trace HTTP server interface
14+ enable = true
15+ # Unix domain socket path where system controller is listening on
16+ address = " /run/containerd-nydus/system.sock"
17+
18+ [system .debug ]
19+ # Snapshotter can profile the CPU utilization of each nydusd daemon when it is being started.
20+ # This option specifies the profile duration when nydusd is downloading and uncomproessing data.
21+ daemon_cpu_profile_duration_secs = 5
22+ # Enable by assigning an address, empty indicates pprof server is disabled
23+ pprof_address = " "
24+
25+ [daemon ]
26+ # Specify a configuration file for nydusd
27+ nydusd_config = " /etc/nydus/nydusd-config.fusedev.json"
28+ nydusd_path = " /usr/local/bin/nydusd"
29+ nydusimage_path = " /usr/local/bin/nydus-image"
30+ # fusedev or fscache
31+ fs_driver = " fusedev"
32+ # How to process when daemon dies: "none", "restart" or "failover"
33+ recover_policy = " restart"
34+ # Nydusd worker thread number to handle FUSE or fscache requests, [0-1024].
35+ # Setting to 0 will use the default configuration of nydusd.
36+ threads_number = 4
37+ # Log rotation size for nydusd, in unit MB(megabytes). (default 100MB)
38+ log_rotation_size = 100
39+
40+ [cgroup ]
41+ # Whether to use separate cgroup for nydusd.
42+ enable = true
43+ # The memory limit for nydusd cgroup, which contains all nydusd processes.
44+ # Percentage is supported as well, please ensure it is end with "%".
45+ # The default unit is bytes. Acceptable values include "209715200", "200MiB", "200Mi" and "10%".
46+ memory_limit = " "
47+
48+ [log ]
49+ # Print logs to stdout rather than logging files
50+ log_to_stdout = false
51+ dir = " /etc/nydus/logs"
52+ # Snapshotter's log level
53+ level = " info"
54+ log_rotation_compress = true
55+ log_rotation_local_time = true
56+ # Max number of days to retain logs
57+ log_rotation_max_age = 7
58+ log_rotation_max_backups = 5
59+ # In unit MB(megabytes)
60+ log_rotation_max_size = 100
61+
62+ [metrics ]
63+ # Enable by assigning an address, empty indicates metrics server is disabled
64+ address = " :9110"
65+
66+ [remote ]
67+ convert_vpc_registry = false
68+
69+ [remote .mirrors_config ]
70+ # Snapshotter will overwrite daemon's mirrors configuration
71+ # if the values loaded from this driectory are not null before starting a daemon.
72+ # Set to "" or an empty directory to disable it.
73+ # dir = "/etc/nydus/certs.d"
74+
75+ [remote .auth ]
76+ # Fetch the private registry auth by listening to K8s API server
77+ enable_kubeconfig_keychain = false
78+ # synchronize `kubernetes.io/dockerconfigjson` secret from kubernetes API server with specified kubeconfig (default `$KUBECONFIG` or `~/.kube/config`)
79+ kubeconfig_path = " "
80+ # Fetch the private registry auth as CRI image service proxy
81+ enable_cri_keychain = false
82+ # the target image service when using image proxy
83+ # image_service_address = "/run/containerd/containerd.sock"
84+
85+ [snapshot ]
86+ # Let containerd use nydus-overlayfs mount helper
87+ enable_nydus_overlayfs = false
88+ # Insert Kata Virtual Volume option to `Mount.Options`
89+ enable_kata_volume = false
90+ # Whether to remove resources when a snapshot is removed
91+ sync_remove = false
92+
93+ [cache_manager ]
94+ # Disable or enable recyclebin
95+ disable = false
96+ # How long to keep deleted files in recyclebin
97+ gc_period = " 24h"
98+ # Directory to host cached files
99+ cache_dir = " "
100+
101+ [image ]
102+ public_key_file = " "
103+ validate_signature = false
104+
105+ # The configuraions for features that are not production ready
106+ [experimental ]
107+ # Whether to enable stargz support
108+ enable_stargz = false
109+ # Whether to enable referrers support
110+ # The option enables trying to fetch the Nydus image associated with the OCI image and run it.
111+ # Also see https://github.com/opencontainers/distribution-spec/blob/main/spec.md#listing-referrers
112+ enable_referrer_detect = false
113+ # Whether to enable authentication support
114+ # The option enables nydus snapshot to provide backend information to nydusd.
115+ enable_backend_source = false
116+ [experimental .tarfs ]
117+ # Whether to enable nydus tarfs mode. Tarfs is supported by:
118+ # - The EROFS filesystem driver since Linux 6.4
119+ # - Nydus Image Service release v2.3
120+ enable_tarfs = false
121+ # Mount rafs on host by loopdev and EROFS
122+ mount_tarfs_on_host = false
123+ # Only enable nydus tarfs mode for images with `tarfs hint` label when true
124+ tarfs_hint = false
125+ # Maximum of concurrence to converting OCIv1 images to tarfs, 0 means default
126+ max_concurrent_proc = 0
127+ # Mode to export tarfs images:
128+ # - "none" or "": do not export tarfs
129+ # - "layer_verity_only": only generate disk verity information for a layer blob
130+ # - "image_verity_only": only generate disk verity information for all blobs of an image
131+ # - "layer_block": generate a raw block disk image with tarfs for a layer
132+ # - "image_block": generate a raw block disk image with tarfs for an image
133+ # - "layer_block_with_verity": generate a raw block disk image with tarfs for a layer with dm-verity info
134+ # - "image_block_with_verity": generate a raw block disk image with tarfs for an image with dm-verity info
135+ export_mode = " "
0 commit comments