Add containerd configuration file

context/containerd/rootfs/etc/containerd.service

@@ -0,0 +1,40 @@
+# Copyright The containerd Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+[Unit]
+Description=containerd container runtime
+Documentation=https://containerd.io
+After=network.target local-fs.target
+
+[Service]
+ExecStartPre=-/sbin/modprobe overlay
+ExecStart=/usr/local/bin/containerd
+
+Type=notify
+Delegate=yes
+KillMode=process
+Restart=always
+RestartSec=5
+# Having non-zero Limit*s causes performance problems due to accounting overhead
+# in the kernel. We recommend using cgroups to do container-local accounting.
+LimitNPROC=infinity
+LimitCORE=infinity
+LimitNOFILE=1048576
+# Comment TasksMax if your systemd version does not supports it.
+# Only systemd 226 and above support this version.
+TasksMax=infinity
+OOMScoreAdjust=-999
+
+[Install]
+WantedBy=multi-user.target

context/containerd/rootfs/etc/containerd.service.tmpl

@@ -0,0 +1,40 @@
+# Copyright The containerd Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+[Unit]
+Description=containerd container runtime
+Documentation=https://containerd.io
+After=network.target local-fs.target
+
+[Service]
+ExecStartPre=-/sbin/modprobe overlay
+ExecStart=/usr/local/bin/containerd
+
+Type=notify
+Delegate=yes
+KillMode=process
+Restart=always
+RestartSec=5
+# Having non-zero Limit*s causes performance problems due to accounting overhead
+# in the kernel. We recommend using cgroups to do container-local accounting.
+LimitNPROC=infinity
+LimitCORE=infinity
+LimitNOFILE={{or .DockerLimitNOFILE "1048576"}}
+# Comment TasksMax if your systemd version does not supports it.
+# Only systemd 226 and above support this version.
+TasksMax=infinity
+OOMScoreAdjust=-999
+
+[Install]
+WantedBy=multi-user.target

context/containerd/rootfs/etc/dump-config.toml.tmpl

@@ -0,0 +1,71 @@
+version = 2
+root = "/var/lib/containerd"
+state = "/run/containerd"
+disabled_plugins = []
+required_plugins = ["io.containerd.grpc.v1.cri"]
+oom_score = -999
+
+[grpc]
+address = "/run/containerd/containerd.sock"
+max_recv_message_size = 16777216
+max_send_message_size = 16777216
+
+[timeouts]
+"io.containerd.timeout.shim.cleanup" = "5s"
+"io.containerd.timeout.shim.load" = "5s"
+"io.containerd.timeout.shim.shutdown" = "3s"
+"io.containerd.timeout.task.state" = "2s"
+
+[plugins]
+[plugins."io.containerd.gc.v1.scheduler"]
+pause_threshold = 0.02
+deletion_threshold = 0
+mutation_threshold = 100
+schedule_delay = "0s"
+startup_delay = "100ms"
+
+[plugins."io.containerd.grpc.v1.cri"]
+sandbox_image = "sea.hub:5000/ecp_builder/pause:3.5"
+ignore_image_defined_volumes = true
+
+[plugins."io.containerd.grpc.v1.cri".containerd]
+snapshotter = "overlayfs"
+default_runtime_name = "runc"
+disable_snapshot_annotations = true
+discard_unpacked_layers = false
+
+[plugins."io.containerd.grpc.v1.cri".containerd.runtimes]
+[plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runc]
+runtime_type = "io.containerd.runc.v2"
+privileged_without_host_devices = false
+[plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runc.options]
+NoPivotRoot = false
+NoNewKeyring = false
+SystemdCgroup = true
+
+[plugins."io.containerd.grpc.v1.cri".cni]
+bin_dir = "/opt/cni/bin"
+conf_dir = "/etc/cni/net.d"
+max_conf_num = 1
+
+[plugins."io.containerd.grpc.v1.cri".registry]
+[plugins."io.containerd.grpc.v1.cri".registry.mirrors]
+[plugins."io.containerd.grpc.v1.cri".registry.mirrors."docker.io"]
+  endpoint = ["https://registry-1.docker.io"]
+[plugins."io.containerd.grpc.v1.cri".registry.mirrors."sea.hub:5000"]
+  endpoint = ["https://sea.hub:5000"]
+[plugins."io.containerd.grpc.v1.cri".registry.configs."sea.hub:5000".tls]
+  insecure_skip_verify = true
+[plugins."io.containerd.grpc.v1.cri".registry.mirrors."registry-internal.adp.aliyuncs.com:5000"]
+  endpoint = ["https://registry-internal.adp.aliyuncs.com:5000"]
+[plugins."io.containerd.grpc.v1.cri".registry.configs."registry-internal.adp.aliyuncs.com:5000".tls]
+  insecure_skip_verify = true
+
+[plugins."io.containerd.internal.v1.opt"]
+path = "/opt/containerd"
+
+[plugins."io.containerd.internal.v1.restart"]
+interval = "10s"
+
+[plugins."io.containerd.metadata.v1.bolt"]
+content_sharing_policy = "shared"