pct.conf.5-opts.adoc

   1 `arch`: `<amd64 | arm64 | armhf | i386>` ('default =' `amd64`)::
   2
   3 OS architecture type.
   4
   5 `cmode`: `<console | shell | tty>` ('default =' `tty`)::
   6
   7 Console mode. By default, the console command tries to open a connection to one of the available tty devices. By setting cmode to 'console' it tries to attach to /dev/console instead. If you set cmode to 'shell', it simply invokes a shell inside the container (no login).
   8
   9 `console`: `<boolean>` ('default =' `1`)::
  10
  11 Attach a console device (/dev/console) to the container.
  12
  13 `cores`: `<integer> (1 - 128)` ::
  14
  15 The number of cores assigned to the container. A container can use all available cores by default.
  16
  17 `cpulimit`: `<number> (0 - 128)` ('default =' `0`)::
  18
  19 Limit of CPU usage.
  20 +
  21 NOTE: If the computer has 2 CPUs, it has a total of '2' CPU time. Value '0' indicates no CPU limit.
  22
  23 `cpuunits`: `<integer> (0 - 500000)` ('default =' `1024`)::
  24
  25 CPU weight for a VM. Argument is used in the kernel fair scheduler. The larger the number is, the more CPU time this VM gets. Number is relative to the weights of all the other running VMs.
  26 +
  27 NOTE: You can disable fair-scheduler configuration by setting this to 0.
  28
  29 `description`: `<string>` ::
  30
  31 Container description. Only used on the configuration web interface.
  32
  33 `features`: `[keyctl=<1|0>] [,mount=<fstype;fstype;...>] [,nesting=<1|0>]` ::
  34
  35 Allow containers access to advanced features.
  36
  37 `keyctl`=`<boolean>` ('default =' `0`);;
  38
  39 For unprivileged containers only: Allow the use of the keyctl() system call. This is required to use docker inside a container. By default unprivileged containers will see this system call as non-existent. This is mostly a workaround for systemd-networkd, as it will treat it as a fatal error when some keyctl() operations are denied by the kernel due to lacking permissions. Essentially, you can choose between running systemd-networkd or docker.
  40
  41 `mount`=`<fstype;fstype;...>` ;;
  42
  43 Allow mounting file systems of specific types. This should be a list of file system types as used with the mount command. Note that this can have negative effects on the container's security. With access to a loop device, mounting a file can circumvent the mknod permission of the devices cgroup, mounting an NFS file system can block the host's I/O completely and prevent it from rebooting, etc.
  44
  45 `nesting`=`<boolean>` ('default =' `0`);;
  46
  47 Allow nesting. Best used with unprivileged containers with additional id mapping. Note that this will expose procfs and sysfs contents of the host to the guest.
  48
  49 `hostname`: `<string>` ::
  50
  51 Set a host name for the container.
  52
  53 `lock`: `<backup | disk | migrate | mounted | rollback | snapshot | snapshot-delete>` ::
  54
  55 Lock/unlock the VM.
  56
  57 `memory`: `<integer> (16 - N)` ('default =' `512`)::
  58
  59 Amount of RAM for the VM in MB.
  60
  61 `mp[n]`: `[volume=]<volume> ,mp=<Path> [,acl=<1|0>] [,backup=<1|0>] [,quota=<1|0>] [,replicate=<1|0>] [,ro=<1|0>] [,shared=<1|0>] [,size=<DiskSize>]` ::
  62
  63 Use volume as container mount point.
  64
  65 `acl`=`<boolean>` ;;
  66
  67 Explicitly enable or disable ACL support.
  68
  69 `backup`=`<boolean>` ;;
  70
  71 Whether to include the mount point in backups (only used for volume mount points).
  72
  73 `mp`=`<Path>` ;;
  74
  75 Path to the mount point as seen from inside the container.
  76 +
  77 NOTE: Must not contain any symlinks for security reasons.
  78
  79 `quota`=`<boolean>` ;;
  80
  81 Enable user quotas inside the container (not supported with zfs subvolumes)
  82
  83 `replicate`=`<boolean>` ('default =' `1`);;
  84
  85 Will include this volume to a storage replica job.
  86
  87 `ro`=`<boolean>` ;;
  88
  89 Read-only mount point
  90
  91 `shared`=`<boolean>` ('default =' `0`);;
  92
  93 Mark this non-volume mount point as available on all nodes.
  94 +
  95 WARNING: This option does not share the mount point automatically, it assumes it is shared already!
  96
  97 `size`=`<DiskSize>` ;;
  98
  99 Volume size (read only value).
 100
 101 `volume`=`<volume>` ;;
 102
 103 Volume, device or directory to mount into the container.
 104
 105 `nameserver`: `<string>` ::
 106
 107 Sets DNS server IP address for a container. Create will automatically use the setting from the host if you neither set searchdomain nor nameserver.
 108
 109 `net[n]`: `name=<string> [,bridge=<bridge>] [,firewall=<1|0>] [,gw=<GatewayIPv4>] [,gw6=<GatewayIPv6>] [,hwaddr=<XX:XX:XX:XX:XX:XX>] [,ip=<(IPv4/CIDR|dhcp|manual)>] [,ip6=<(IPv6/CIDR|auto|dhcp|manual)>] [,mtu=<integer>] [,rate=<mbps>] [,tag=<integer>] [,trunks=<vlanid[;vlanid...]>] [,type=<veth>]` ::
 110
 111 Specifies network interfaces for the container.
 112
 113 `bridge`=`<bridge>` ;;
 114
 115 Bridge to attach the network device to.
 116
 117 `firewall`=`<boolean>` ;;
 118
 119 Controls whether this interface's firewall rules should be used.
 120
 121 `gw`=`<GatewayIPv4>` ;;
 122
 123 Default gateway for IPv4 traffic.
 124
 125 `gw6`=`<GatewayIPv6>` ;;
 126
 127 Default gateway for IPv6 traffic.
 128
 129 `hwaddr`=`<XX:XX:XX:XX:XX:XX>` ;;
 130
 131 The interface MAC address. This is dynamically allocated by default, but you can set that statically if needed, for example to always have the same link-local IPv6 address. (lxc.network.hwaddr)
 132
 133 `ip`=`<(IPv4/CIDR|dhcp|manual)>` ;;
 134
 135 IPv4 address in CIDR format.
 136
 137 `ip6`=`<(IPv6/CIDR|auto|dhcp|manual)>` ;;
 138
 139 IPv6 address in CIDR format.
 140
 141 `mtu`=`<integer> (64 - N)` ;;
 142
 143 Maximum transfer unit of the interface. (lxc.network.mtu)
 144
 145 `name`=`<string>` ;;
 146
 147 Name of the network device as seen from inside the container. (lxc.network.name)
 148
 149 `rate`=`<mbps>` ;;
 150
 151 Apply rate limiting to the interface
 152
 153 `tag`=`<integer> (1 - 4094)` ;;
 154
 155 VLAN tag for this interface.
 156
 157 `trunks`=`<vlanid[;vlanid...]>` ;;
 158
 159 VLAN ids to pass through the interface
 160
 161 `type`=`<veth>` ;;
 162
 163 Network interface type.
 164
 165 `onboot`: `<boolean>` ('default =' `0`)::
 166
 167 Specifies whether a VM will be started during system bootup.
 168
 169 `ostype`: `<alpine | archlinux | centos | debian | fedora | gentoo | opensuse | ubuntu | unmanaged>` ::
 170
 171 OS type. This is used to setup configuration inside the container, and corresponds to lxc setup scripts in /usr/share/lxc/config/<ostype>.common.conf. Value 'unmanaged' can be used to skip and OS specific setup.
 172
 173 `protection`: `<boolean>` ('default =' `0`)::
 174
 175 Sets the protection flag of the container. This will prevent the CT or CT's disk remove/update operation.
 176
 177 `rootfs`: `[volume=]<volume> [,acl=<1|0>] [,quota=<1|0>] [,replicate=<1|0>] [,ro=<1|0>] [,shared=<1|0>] [,size=<DiskSize>]` ::
 178
 179 Use volume as container root.
 180
 181 `acl`=`<boolean>` ;;
 182
 183 Explicitly enable or disable ACL support.
 184
 185 `quota`=`<boolean>` ;;
 186
 187 Enable user quotas inside the container (not supported with zfs subvolumes)
 188
 189 `replicate`=`<boolean>` ('default =' `1`);;
 190
 191 Will include this volume to a storage replica job.
 192
 193 `ro`=`<boolean>` ;;
 194
 195 Read-only mount point
 196
 197 `shared`=`<boolean>` ('default =' `0`);;
 198
 199 Mark this non-volume mount point as available on all nodes.
 200 +
 201 WARNING: This option does not share the mount point automatically, it assumes it is shared already!
 202
 203 `size`=`<DiskSize>` ;;
 204
 205 Volume size (read only value).
 206
 207 `volume`=`<volume>` ;;
 208
 209 Volume, device or directory to mount into the container.
 210
 211 `searchdomain`: `<string>` ::
 212
 213 Sets DNS search domains for a container. Create will automatically use the setting from the host if you neither set searchdomain nor nameserver.
 214
 215 `startup`: `[[order=]\d+] [,up=\d+] [,down=\d+] ` ::
 216
 217 Startup and shutdown behavior. Order is a non-negative number defining the general startup order. Shutdown in done with reverse ordering. Additionally you can set the 'up' or 'down' delay in seconds, which specifies a delay to wait before the next VM is started or stopped.
 218
 219 `swap`: `<integer> (0 - N)` ('default =' `512`)::
 220
 221 Amount of SWAP for the VM in MB.
 222
 223 `template`: `<boolean>` ('default =' `0`)::
 224
 225 Enable/disable Template.
 226
 227 `tty`: `<integer> (0 - 6)` ('default =' `2`)::
 228
 229 Specify the number of tty available to the container
 230
 231 `unprivileged`: `<boolean>` ('default =' `0`)::
 232
 233 Makes the container run as unprivileged user. (Should not be modified manually.)
 234
 235 `unused[n]`: `<string>` ::
 236
 237 Reference to unused volumes. This is used internally, and should not be modified manually.
 238