container-runtime
Settings related to container runtime behaviour (
settings.container-runtime.*)Setting list for settings.container-runtime
settings.container-runtime.enable-unprivileged-icmpsettings.container-runtime.enable-unprivileged-portssettings.container-runtime.max-concurrent-downloadssettings.container-runtime.max-container-log-line-sizesettings.container-runtime.snapshotter
Full Reference
settings.container-runtime.enable-unprivileged-icmp
If true unprivileged containers can open ICMP echo sockets.
truefalse
settings.container-runtime.enable-unprivileged-ports
If true unprivileged containers can bind to ports less than 1024.
truefalse
settings.container-runtime.max-concurrent-downloads
The number of allowed concurrent layer downloads for each image.
Accepted values:- a positive number
settings.container-runtime.max-container-log-line-size
A value that dictates the maximum log line size, any larger log lines will split into multiple lines. Values are expressed in bytes.
Accepted values:-1for no limit- a positive numbers
settings.container-runtime.snapshotter
The snapshotter to use for container images.
Warning
Changes to this setting only take effect on boot. When a change in the selected snapshotter is detected across boots, Bottlerocket will remove containers and existing images under /var/lib/containerd and /var/lib/soci-snapshotter. Container images managed under these state directories will be re-pulled.
overlayfs(default)soci
[settings.container-runtime]
snapshotter = "soci"apiclient set settings.container-runtime.snapshotter="soci"