add Phase 2B contained runtime artifacts
This commit is contained in:
parent
a9fec0d83d
commit
82e64cec43
35 changed files with 5177 additions and 40 deletions
|
|
@ -0,0 +1,16 @@
|
|||
{
|
||||
"data-root": "/srv/le-app-codex/container-runtime/docker",
|
||||
"storage-driver": "fuse-overlayfs",
|
||||
"live-restore": false,
|
||||
"userland-proxy": false,
|
||||
"ipv6": false,
|
||||
"ip6tables": false,
|
||||
"iptables": true,
|
||||
"hosts": ["unix:///run/user/1200/docker.sock"],
|
||||
"log-driver": "local",
|
||||
"log-opts": {
|
||||
"max-size": "20m",
|
||||
"max-file": "5"
|
||||
}
|
||||
}
|
||||
|
||||
|
|
@ -0,0 +1,34 @@
|
|||
[Unit]
|
||||
Description=Laser Everything rootless Docker
|
||||
Documentation=https://docs.docker.com/engine/security/rootless/
|
||||
|
||||
[Service]
|
||||
Type=notify
|
||||
NotifyAccess=all
|
||||
KillMode=mixed
|
||||
Environment=HOME=/srv/le-app-codex/home
|
||||
Environment=XDG_RUNTIME_DIR=/run/user/1200
|
||||
Environment=DOCKER_HOST=unix:///run/user/1200/docker.sock
|
||||
Environment=DOCKERD_ROOTLESS_ROOTLESSKIT_STATE_DIR=/run/user/1200/dockerd-rootless
|
||||
Environment=DOCKERD_ROOTLESS_ROOTLESSKIT_NET=slirp4netns
|
||||
Environment=DOCKERD_ROOTLESS_ROOTLESSKIT_PORT_DRIVER=builtin
|
||||
Environment=DOCKERD_ROOTLESS_ROOTLESSKIT_MTU=65520
|
||||
Environment=DOCKERD_ROOTLESS_ROOTLESSKIT_SLIRP4NETNS_SANDBOX=true
|
||||
Environment=DOCKERD_ROOTLESS_ROOTLESSKIT_SLIRP4NETNS_SECCOMP=true
|
||||
Environment=DOCKERD_ROOTLESS_ROOTLESSKIT_DISABLE_HOST_LOOPBACK=true
|
||||
Environment=DOCKERD_ROOTLESS_ROOTLESSKIT_DETACH_NETNS=false
|
||||
ExecStart=/usr/local/libexec/dockerd-rootless-29.6.1.sh
|
||||
ExecReload=/usr/bin/kill -s HUP $MAINPID
|
||||
Restart=always
|
||||
RestartSec=2
|
||||
TimeoutStartSec=0
|
||||
TimeoutStopSec=120
|
||||
LimitNOFILE=infinity
|
||||
LimitNPROC=infinity
|
||||
LimitCORE=infinity
|
||||
TasksMax=infinity
|
||||
Delegate=yes
|
||||
|
||||
[Install]
|
||||
WantedBy=default.target
|
||||
|
||||
Loading…
Add table
Add a link
Reference in a new issue