github.com/abayer/test-infra@v0.0.5/dind/base/docker.service (about)

     1  [Unit]
     2  Description=Docker Application Container Engine
     3  Documentation=https://docs.docker.com
     4  After=network-online.target docker.socket firewalld.service
     5  Wants=network-online.target
     6  Requires=docker.socket
     7  
     8  [Service]
     9  Environment=container=docker
    10  Type=notify
    11  # the default is not to use systemd for cgroups because the delegate issues still
    12  # exists and systemd currently does not support the cgroup feature set required
    13  # for containers run by docker
    14  ExecStart=/bin/dockerd-entrypoint.sh
    15  ExecReload=/bin/kill -s HUP $MAINPID
    16  LimitNOFILE=1048576
    17  # Having non-zero Limit*s causes performance problems due to accounting overhead
    18  # in the kernel. We recommend using cgroups to do container-local accounting.
    19  LimitNPROC=infinity
    20  LimitCORE=infinity
    21  # Uncomment TasksMax if your systemd version supports it.
    22  # Only systemd 226 and above support this version.
    23  #TasksMax=infinity
    24  TimeoutStartSec=0
    25  # set delegate yes so that systemd does not reset the cgroups of docker containers
    26  Delegate=yes
    27  # kill only the docker process, not all processes in the cgroup
    28  KillMode=process
    29  # restart the docker process if it exits prematurely
    30  Restart=on-failure
    31  StartLimitBurst=3
    32  StartLimitInterval=60s
    33  
    34  [Install]
    35  WantedBy=multi-user.target