# /etc/sysconfig/cgconfig - control group setup
#
# The cgconfig service sets up the unified (cgroup v2) hierarchy unless
# /etc/cgconfig.conf contains a "mount { ... }" block, in which case it hands
# that file to cgconfigparser and the legacy v1 settings below apply instead.

# --- unified hierarchy (cgroup v2) ---------------------------------------

# Where the unified hierarchy lives. If /etc/fstab already mounts it, this
# only has to agree with the fstab entry:
#     none /sys/fs/cgroup cgroup2 nsdelegate,memory_recursiveprot 0 0
CGROUP_ROOT=/sys/fs/cgroup

# Mount options used when the service has to mount it itself. nsdelegate makes
# the kernel treat a cgroup namespace root as a delegation boundary, which is
# what keeps an unprivileged container inside its own subtree.
CGROUP_MOUNT_OPTIONS=nsdelegate,memory_recursiveprot

# Controllers to make available to child cgroups. Empty means every controller
# the kernel offers (see /sys/fs/cgroup/cgroup.controllers).
CGROUP_CONTROLLERS=

# Give each user a cgroup subtree of their own under user.slice. Rootless
# container runtimes need this: they create a cgroup for the container and
# move the container process into it, which the root cgroup does not allow.
# The matching /etc/profile.d/cgroup-session.sh moves each login session into
# a scope below its user's slice.
DELEGATE=yes
USER_SLICE=user.slice

# Which users get a subtree. The range matches UID_MIN/UID_MAX in
# /etc/login.defs; DELEGATE_USERS adds names outside it.
DELEGATE_UID_MIN=1000
DELEGATE_UID_MAX=60000
DELEGATE_USERS=

# --- legacy hierarchies (cgroup v1) --------------------------------------

# Service cgconfig can create a default group in all mounted hierarchies and
# move all processes there on boot. If no default rule is specified in
# /etc/cgrules.conf, the default group is named '/sysdefault'.
# This automatically created group(s) can be useful e.g. when using 'cpu'
# controller to limit cpu.shares of this default group and allowing some more
# important group take most of the CPU.
#
# By default, create these groups:
CREATE_DEFAULT=yes

# Uncomment following line to disable creation of the default group on startup:
# CREATE_DEFAULT=no

.