cookbooks/aws-parallelcluster-platform/templates/enroot/enroot.conf.erb (51 lines of code) (raw):
#ENROOT_LIBRARY_PATH /usr/lib/enroot
#ENROOT_SYSCONF_PATH /etc/enroot
ENROOT_RUNTIME_PATH <%= node['cluster']['enroot']['temporary_dir'] %>/user-$(id -u)/runtime
ENROOT_DATA_PATH <%= node['cluster']['enroot']['temporary_dir'] %>/user-$(id -u)/data
ENROOT_CONFIG_PATH <%= node['cluster']['enroot']['persistent_dir'] %>/user-$(id -u)/config
ENROOT_CACHE_PATH <%= node['cluster']['enroot']['persistent_dir'] %>/user-$(id -u)/cache
#ENROOT_TEMP_PATH ${TMPDIR:-/tmp}
# Gzip program used to uncompress digest layers.
#ENROOT_GZIP_PROGRAM gzip
# Options passed to zstd to compress digest layers.
#ENROOT_ZSTD_OPTIONS -1
# Options passed to mksquashfs to produce container images.
ENROOT_SQUASH_OPTIONS -noI -noD -noF -noX -no-duplicates
# Make the container root filesystem writable by default.
ENROOT_ROOTFS_WRITABLE yes
# Remap the current user to root inside containers by default.
#ENROOT_REMAP_ROOT no
# Maximum number of processors to use for parallel tasks (0 means unlimited).
#ENROOT_MAX_PROCESSORS $(nproc)
# Maximum number of concurrent connections (0 means unlimited).
#ENROOT_MAX_CONNECTIONS 10
# Maximum time in seconds to wait for connections establishment (0 means unlimited).
#ENROOT_CONNECT_TIMEOUT 30
# Maximum time in seconds to wait for network operations to complete (0 means unlimited).
#ENROOT_TRANSFER_TIMEOUT 0
# Number of times network operations should be retried.
#ENROOT_TRANSFER_RETRIES 0
# Use a login shell to run the container initialization.
#ENROOT_LOGIN_SHELL yes
# Allow root to retain his superuser privileges inside containers.
#ENROOT_ALLOW_SUPERUSER no
# Use HTTP for outgoing requests instead of HTTPS (UNSECURE!).
#ENROOT_ALLOW_HTTP no
# Include user-specific configuration inside bundles by default.
#ENROOT_BUNDLE_ALL no
# Generate an embedded checksum inside bundles by default.
#ENROOT_BUNDLE_CHECKSUM no
# Mount the current user's home directory by default.
ENROOT_MOUNT_HOME no
# Restrict /dev inside the container to a minimal set of devices.
ENROOT_RESTRICT_DEV no
# Always use --force on command invocations.
#ENROOT_FORCE_OVERRIDE no
# SSL certificates settings:
#SSL_CERT_DIR
#SSL_CERT_FILE
# Proxy settings:
#all_proxy
#no_proxy
#http_proxy
#https_proxy