45 lines
1.8 KiB
Django/Jinja
45 lines
1.8 KiB
Django/Jinja
[Unit]
|
|
Description=CRI Interface for Docker Application Container Engine
|
|
Documentation=https://docs.mirantis.com
|
|
After=network-online.target firewalld.service docker.service
|
|
Wants=network-online.target docker.service
|
|
Requires=cri-dockerd.socket
|
|
|
|
[Service]
|
|
Type=notify
|
|
ExecStart={{ bin_dir }}/cri-dockerd --container-runtime-endpoint {{ cri_socket }} --cni-conf-dir=/etc/cni/net.d --cni-bin-dir=/opt/cni/bin --network-plugin=cni --pod-cidr={{ kube_pods_subnet }} --pod-infra-container-image={{ pod_infra_image_repo }}:{{ pod_infra_version }} {% if enable_dual_stack_networks %}--ipv6-dual-stack=True{% endif %}
|
|
|
|
ExecReload=/bin/kill -s HUP $MAINPID
|
|
TimeoutSec=0
|
|
RestartSec=2
|
|
Restart=always
|
|
|
|
# Note that StartLimit* options were moved from "Service" to "Unit" in systemd 229.
|
|
# Both the old, and new location are accepted by systemd 229 and up, so using the old location
|
|
# to make them work for either version of systemd.
|
|
StartLimitBurst=3
|
|
|
|
# Note that StartLimitInterval was renamed to StartLimitIntervalSec in systemd 230.
|
|
# Both the old, and new name are accepted by systemd 230 and up, so using the old name to make
|
|
# this option work for either version of systemd.
|
|
StartLimitInterval=60s
|
|
|
|
# Having non-zero Limit*s causes performance problems due to accounting overhead
|
|
# in the kernel. We recommend using cgroups to do container-local accounting.
|
|
LimitNOFILE=infinity
|
|
LimitNPROC=infinity
|
|
LimitCORE=infinity
|
|
|
|
# Comment TasksMax if your systemd version does not support it.
|
|
# Only systemd 226 and above support this option.
|
|
TasksMax=infinity
|
|
Delegate=yes
|
|
KillMode=process
|
|
# Set the cgroup slice of the service so that kube reserved takes effect
|
|
{% if kube_reserved is defined and kube_reserved|bool %}
|
|
Slice={{ kube_reserved_cgroups_for_service_slice }}
|
|
{% endif %}
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|