[containers]

cgroupns = "private"
cgroups = "enabled"

default_capabilities = []

default_sysctls = [
  "net.ipv4.ping_group_range=0 0",
]

label = true
label_users = true

ipcns = "private"
netns = "private"
pidns = "private"
userns = "auto"
utsns = "private"

privileged = false

[engine]
runtime = "runsc"

[engine.runtimes]
runsc = [
  "/usr/local/bin/runsc",
]