[Unit] Description=containerd container runtime Documentation=https://containerd.io After=network.target local-fs.target [Service] Type=notify ExecStartPre=-/sbin/modprobe overlay ExecStart=/usr/bin/containerd Restart=always RestartSec=5 # Having non-zero Limit*s causes performance problems due to accounting overhead # in the kernel. We recommend using cgroups to do container-local accounting. LimitNPROC=infinity LimitCORE=infinity LimitNOFILE=infinity # Comment TasksMax if your systemd version does not support it. # Only systemd 226 and above support this option. TasksMax=infinity # Set delegate yes so that systemd does not reset the cgroups of docker containers Delegate=yes # Kill only the containerd process, not all processes in the cgroup KillMode=process [Install] WantedBy=multi-user.target