github.com/abayer/test-infra@v0.0.5/dind/base/docker.service (about) 1 [Unit] 2 Description=Docker Application Container Engine 3 Documentation=https://docs.docker.com 4 After=network-online.target docker.socket firewalld.service 5 Wants=network-online.target 6 Requires=docker.socket 7 8 [Service] 9 Environment=container=docker 10 Type=notify 11 # the default is not to use systemd for cgroups because the delegate issues still 12 # exists and systemd currently does not support the cgroup feature set required 13 # for containers run by docker 14 ExecStart=/bin/dockerd-entrypoint.sh 15 ExecReload=/bin/kill -s HUP $MAINPID 16 LimitNOFILE=1048576 17 # Having non-zero Limit*s causes performance problems due to accounting overhead 18 # in the kernel. We recommend using cgroups to do container-local accounting. 19 LimitNPROC=infinity 20 LimitCORE=infinity 21 # Uncomment TasksMax if your systemd version supports it. 22 # Only systemd 226 and above support this version. 23 #TasksMax=infinity 24 TimeoutStartSec=0 25 # set delegate yes so that systemd does not reset the cgroups of docker containers 26 Delegate=yes 27 # kill only the docker process, not all processes in the cgroup 28 KillMode=process 29 # restart the docker process if it exits prematurely 30 Restart=on-failure 31 StartLimitBurst=3 32 StartLimitInterval=60s 33 34 [Install] 35 WantedBy=multi-user.target