Configuration options

This page lists the available configuration options for different entities.

Important

Currently, this page does not cover all available configuration options, but only the ones that are extracted from the code base.

cluster | instance | project | server


	cluster
	`scheduler.instance`
	`user.*`

	instance
	`agent.nic_config`
	`boot.autostart`
	`boot.autostart.delay`
	`boot.autostart.priority`
	`boot.host_shutdown_timeout`
	`boot.stop.priority`
	`cloud-init.network-config`
	`cloud-init.user-data`
	`cloud-init.vendor-data`
	`cluster.evacuate`
	`environment.*`
	`limits.cpu`
	`limits.cpu.allowance`
	`limits.cpu.nodes`
	`limits.cpu.priority`
	`limits.disk.priority`
	`limits.hugepages.1GB`
	`limits.hugepages.1MB`
	`limits.hugepages.2MB`
	`limits.hugepages.64KB`
	`limits.kernel.*`
	`limits.memory`
	`limits.memory.enforce`
	`limits.memory.hugepages`
	`limits.memory.swap`
	`limits.memory.swap.priority`
	`limits.network.priority`
	`limits.processes`
	`linux.kernel_modules`
	`linux.sysctl.*`
	`migration.incremental.memory`
	`migration.incremental.memory.goal`
	`migration.incremental.memory.iterations`
	`migration.stateful`
	`nvidia.driver.capabilities`
	`nvidia.require.cuda`
	`nvidia.require.driver`
	`nvidia.runtime`
	`raw.apparmor`
	`raw.idmap`
	`raw.lxc`
	`raw.qemu`
	`raw.qemu.conf`
	`raw.seccomp`
	`security.agent.metrics`
	`security.csm`
	`security.devlxd`
	`security.devlxd.images`
	`security.idmap.base`
	`security.idmap.isolated`
	`security.idmap.size`
	`security.nesting`
	`security.privileged`
	`security.protection.delete`
	`security.protection.shift`
	`security.secureboot`
	`security.sev`
	`security.sev.policy.es`
	`security.sev.session.data`
	`security.sev.session.dh`
	`security.syscalls.allow`
	`security.syscalls.deny`
	`security.syscalls.deny_compat`
	`security.syscalls.deny_default`
	`security.syscalls.intercept.bpf`
	`security.syscalls.intercept.bpf.devices`
	`security.syscalls.intercept.mknod`
	`security.syscalls.intercept.mount`
	`security.syscalls.intercept.mount.allowed`
	`security.syscalls.intercept.mount.fuse`
	`security.syscalls.intercept.mount.shift`
	`security.syscalls.intercept.sched_setcheduler`
	`security.syscalls.intercept.setxattr`
	`security.syscalls.intercept.sysinfo`
	`snapshots.expiry`
	`snapshots.pattern`
	`snapshots.schedule`
	`snapshots.schedule.stopped`
	`user.*`
	`user.network-config`
	`user.user-data`
	`user.vendor-data`
	`volatile.<name>.apply_quota`
	`volatile.<name>.ceph_rbd`
	`volatile.<name>.host_name`
	`volatile.<name>.hwaddr`
	`volatile.<name>.last_state.created`
	`volatile.<name>.last_state.hwaddr`
	`volatile.<name>.last_state.ip_addresses`
	`volatile.<name>.last_state.mtu`
	`volatile.<name>.last_state.vdpa.name`
	`volatile.<name>.last_state.vf.hwaddr`
	`volatile.<name>.last_state.vf.id`
	`volatile.<name>.last_state.vf.spoofcheck`
	`volatile.<name>.last_state.vf.vlan`
	`volatile.apply_nvram`
	`volatile.apply_template`
	`volatile.base_image`
	`volatile.cloud_init.instance-id`
	`volatile.evacuate.origin`
	`volatile.idmap.base`
	`volatile.idmap.current`
	`volatile.idmap.next`
	`volatile.last_state.idmap`
	`volatile.last_state.power`
	`volatile.uuid`
	`volatile.uuid.generation`
	`volatile.vsock_id`

	project
	`backups.compression_algorithm`
	`features.images`
	`features.networks`
	`features.networks.zones`
	`features.profiles`
	`features.storage.buckets`
	`features.storage.volumes`
	`images.auto_update_cached`
	`images.auto_update_interval`
	`images.compression_algorithm`
	`images.default_architecture`
	`images.remote_cache_expiry`
	`limits.containers`
	`limits.cpu`
	`limits.disk`
	`limits.instances`
	`limits.memory`
	`limits.networks`
	`limits.processes`
	`limits.virtual-machines`
	`restricted`
	`restricted.backups`
	`restricted.cluster.groups`
	`restricted.cluster.target`
	`restricted.containers.interception`
	`restricted.containers.lowlevel`
	`restricted.containers.nesting`
	`restricted.containers.privilege`
	`restricted.devices.disk`
	`restricted.devices.disk.paths`
	`restricted.devices.gpu`
	`restricted.devices.infiniband`
	`restricted.devices.nic`
	`restricted.devices.pci`
	`restricted.devices.proxy`
	`restricted.devices.unix-block`
	`restricted.devices.unix-char`
	`restricted.devices.unix-hotplug`
	`restricted.devices.usb`
	`restricted.idmap.gid`
	`restricted.idmap.uid`
	`restricted.networks.access`
	`restricted.networks.subnets`
	`restricted.networks.uplinks`
	`restricted.networks.zones`
	`restricted.snapshots`
	`restricted.virtual-machines.lowlevel`
	`user.*`

	server
	`acme.agree_tos`
	`acme.ca_url`
	`acme.domain`
	`acme.email`
	`backups.compression_algorithm`
	`candid.api_key`
	`candid.api_url`
	`candid.domains`
	`candid.expiry`
	`cluster.healing_threshold`
	`cluster.https_address`
	`cluster.images_minimal_replica`
	`cluster.join_token_expiry`
	`cluster.max_standby`
	`cluster.max_voters`
	`cluster.offline_threshold`
	`core.bgp_address`
	`core.bgp_asn`
	`core.bgp_routerid`
	`core.debug_address`
	`core.dns_address`
	`core.https_address`
	`core.https_allowed_credentials`
	`core.https_allowed_headers`
	`core.https_allowed_methods`
	`core.https_allowed_origin`
	`core.https_trusted_proxy`
	`core.metrics_address`
	`core.metrics_authentication`
	`core.proxy_http`
	`core.proxy_https`
	`core.proxy_ignore_hosts`
	`core.remote_token_expiry`
	`core.shutdown_timeout`
	`core.storage_buckets_address`
	`core.syslog_socket`
	`core.trust_ca_certificates`
	`core.trust_password`
	`images.auto_update_cached`
	`images.auto_update_interval`
	`images.compression_algorithm`
	`images.default_architecture`
	`images.remote_cache_expiry`
	`instances.nic.host_name`
	`instances.placement.scriptlet`
	`loki.api.ca_cert`
	`loki.api.url`
	`loki.auth.password`
	`loki.auth.username`
	`loki.labels`
	`loki.loglevel`
	`loki.types`
	`maas.api.key`
	`maas.api.url`
	`maas.machine`
	`network.ovn.integration_bridge`
	`network.ovn.northbound_connection`
	`oidc.audience`
	`oidc.client.id`
	`oidc.issuer`
	`rbac.agent.private_key`
	`rbac.agent.public_key`
	`rbac.agent.url`
	`rbac.agent.username`
	`rbac.api.expiry`
	`rbac.api.key`
	`rbac.api.url`
	`storage.backups_volume`
	`storage.images_volume`