forked from hswaw/hscloud
Serge Bazanski
55a486ae49
This is a chonky refactor that get rids of the previous cluster-centric defs-* plain nix file setup. Now, nodes are configured individually in plain nixos modules, and are provided a view of all other nodes in the 'machines' attribute. Cluster logic is moved into modules which inspect this array to find other nodes within the same cluster. Kubernetes options are not fully clusterified yet (ie., they are still hardcode to only provide the 'k0' cluster) but that can be fixed later. The Ceph machinery is a good example of how that can be done. The new NixOS configs are zero-diff against prod. While this is done mostly by keeping the logic, we had to keep a few newly discovered 'bugs' around by adding some temporary options which keeps things as they are. These will be removed in a future CL, then introducing a diff (but no functional changes, hopefully). We also remove the nix eval from clustercfg as it was not used anymore (basically since we refactored certs at some point). Change-Id: Id79772a96249b0e6344046f96f9c2cb481c4e1f4 Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1322 Reviewed-by: informatic <informatic@hackerspace.pl>
134 lines
4 KiB
TOML
134 lines
4 KiB
TOML
version = 2
|
|
root = "/var/lib/containerd"
|
|
state = "/run/containerd"
|
|
plugin_dir = ""
|
|
disabled_plugins = []
|
|
required_plugins = []
|
|
oom_score = 0
|
|
|
|
[grpc]
|
|
address = "/run/containerd/containerd.sock"
|
|
tcp_address = ""
|
|
tcp_tls_cert = ""
|
|
tcp_tls_key = ""
|
|
uid = 0
|
|
gid = 0
|
|
max_recv_message_size = 16777216
|
|
max_send_message_size = 16777216
|
|
|
|
[ttrpc]
|
|
address = ""
|
|
uid = 0
|
|
gid = 0
|
|
|
|
[debug]
|
|
address = ""
|
|
uid = 0
|
|
gid = 0
|
|
level = ""
|
|
|
|
[metrics]
|
|
address = ""
|
|
grpc_histogram = false
|
|
|
|
[cgroup]
|
|
path = ""
|
|
|
|
[timeouts]
|
|
"io.containerd.timeout.shim.cleanup" = "5s"
|
|
"io.containerd.timeout.shim.load" = "5s"
|
|
"io.containerd.timeout.shim.shutdown" = "3s"
|
|
"io.containerd.timeout.task.state" = "2s"
|
|
|
|
[plugins]
|
|
[plugins."io.containerd.gc.v1.scheduler"]
|
|
pause_threshold = 0.02
|
|
deletion_threshold = 0
|
|
mutation_threshold = 100
|
|
schedule_delay = "0s"
|
|
startup_delay = "100ms"
|
|
[plugins."io.containerd.grpc.v1.cri"]
|
|
disable_tcp_service = true
|
|
stream_server_address = "127.0.0.1"
|
|
stream_server_port = "0"
|
|
stream_idle_timeout = "4h0m0s"
|
|
enable_selinux = false
|
|
selinux_category_range = 1024
|
|
sandbox_image = "k8s.gcr.io/pause:3.2"
|
|
stats_collect_period = 10
|
|
systemd_cgroup = false
|
|
enable_tls_streaming = false
|
|
max_container_log_line_size = 16384
|
|
disable_cgroup = false
|
|
disable_apparmor = false
|
|
restrict_oom_score_adj = false
|
|
max_concurrent_downloads = 3
|
|
disable_proc_mount = false
|
|
unset_seccomp_profile = ""
|
|
tolerate_missing_hugetlb_controller = true
|
|
disable_hugetlb_controller = true
|
|
ignore_image_defined_volumes = false
|
|
[plugins."io.containerd.grpc.v1.cri".containerd]
|
|
snapshotter = "overlayfs"
|
|
default_runtime_name = "runc"
|
|
no_pivot = false
|
|
disable_snapshot_annotations = true
|
|
discard_unpacked_layers = false
|
|
[plugins."io.containerd.grpc.v1.cri".containerd.default_runtime]
|
|
runtime_type = ""
|
|
runtime_engine = ""
|
|
runtime_root = ""
|
|
privileged_without_host_devices = false
|
|
base_runtime_spec = ""
|
|
[plugins."io.containerd.grpc.v1.cri".containerd.untrusted_workload_runtime]
|
|
runtime_type = ""
|
|
runtime_engine = ""
|
|
runtime_root = ""
|
|
privileged_without_host_devices = false
|
|
base_runtime_spec = ""
|
|
[plugins."io.containerd.grpc.v1.cri".containerd.runtimes]
|
|
[plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runc]
|
|
runtime_type = "io.containerd.runc.v2"
|
|
runtime_engine = ""
|
|
runtime_root = ""
|
|
privileged_without_host_devices = false
|
|
base_runtime_spec = ""
|
|
[plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runc.options]
|
|
SystemdCgroup = true
|
|
[plugins."io.containerd.grpc.v1.cri".cni]
|
|
bin_dir = "/opt/cni/bin"
|
|
conf_dir = "/opt/cni/conf"
|
|
max_conf_num = 1
|
|
conf_template = ""
|
|
[plugins."io.containerd.grpc.v1.cri".registry]
|
|
[plugins."io.containerd.grpc.v1.cri".registry.mirrors]
|
|
[plugins."io.containerd.grpc.v1.cri".registry.mirrors."docker.io"]
|
|
endpoint = ["https://registry-1.docker.io"]
|
|
[plugins."io.containerd.grpc.v1.cri".image_decryption]
|
|
key_model = ""
|
|
[plugins."io.containerd.grpc.v1.cri".x509_key_pair_streaming]
|
|
tls_cert_file = ""
|
|
tls_key_file = ""
|
|
[plugins."io.containerd.internal.v1.opt"]
|
|
path = "/opt/containerd"
|
|
[plugins."io.containerd.internal.v1.restart"]
|
|
interval = "10s"
|
|
[plugins."io.containerd.metadata.v1.bolt"]
|
|
content_sharing_policy = "shared"
|
|
[plugins."io.containerd.monitor.v1.cgroups"]
|
|
no_prometheus = false
|
|
[plugins."io.containerd.runtime.v1.linux"]
|
|
shim = "containerd-shim"
|
|
runtime = "runc"
|
|
runtime_root = ""
|
|
no_shim = false
|
|
shim_debug = false
|
|
[plugins."io.containerd.runtime.v2.task"]
|
|
platforms = ["linux/amd64"]
|
|
[plugins."io.containerd.service.v1.diff-service"]
|
|
default = ["walking"]
|
|
[plugins."io.containerd.snapshotter.v1.devmapper"]
|
|
root_path = ""
|
|
pool_name = ""
|
|
base_image_size = ""
|
|
async_remove = false
|