In case runc uses systemd to set cgroup parameters for a container (i.e.
--systemd-cgroup
CLI flag is set), systemd creates a scope (a.k.a.
transient unit) for the container, usually named like runc-$ID.scope
.
The systemd properties of this unit (shown by systemctl show runc-$ID.scope
after the container is started) can be modified by adding annotations
to container's runtime spec (config.json
). For example:
"annotations": {
"org.systemd.property.TimeoutStopUSec": "uint64 123456789",
"org.systemd.property.CollectMode":"'inactive-or-failed'"
},
The above will set the following properties:
TimeoutStopSec
to 2 minutes and 3 seconds;CollectMode
to "inactive-or-failed".
The values must be in the gvariant format (for details, see gvariant documentation).
To find out which type systemd expects for a particular parameter, please consult systemd sources.