Configuration options

This page lists the available configuration options for different entities.

Note

The SYSCTL configuration options are settings specified in the server's /etc/sysctl.conf file rather than LXD configuration options.


	cluster
	`scheduler.instance`
	`user.*`

	device
	`acceleration`
	`address`
	`bind`
	`boot.priority` (Type: `disk`: `disk-device-conf`)
	`boot.priority` (Type: `nic`: `nic-bridged-device-conf`)
	`boot.priority` (Type: `nic`: `nic-macvlan-device-conf`)
	`boot.priority` (Type: `nic`: `nic-ovn-device-conf`)
	`boot.priority` (Type: `nic`: `nic-p2p-device-conf`)
	`boot.priority` (Type: `nic`: `nic-physical-device-conf`)
	`boot.priority` (Type: `nic`: `nic-sriov-device-conf`)
	`busnum`
	`ceph.cluster_name`
	`ceph.user_name`
	`connect`
	`devnum`
	`gid` (Type: `gpu`: `gpu-physical-device-conf`)
	`gid` (Type: `proxy`: `proxy-device-conf`)
	`gid` (Type: `unix-block`: `unix-block-device-conf`)
	`gid` (Type: `unix-char`: `unix-char-device-conf`)
	`gid` (Type: `unix-hotplug`: `unix-hotplug-device-conf`)
	`gid` (Type: `usb`: `unix-usb-device-conf`)
	`gvrp` (Type: `nic`: `nic-ipvlan-device-conf`)
	`gvrp` (Type: `nic`: `nic-macvlan-device-conf`)
	`gvrp` (Type: `nic`: `nic-physical-device-conf`)
	`gvrp` (Type: `nic`: `nic-routed-device-conf`)
	`host_name` (Type: `nic`: `nic-bridged-device-conf`)
	`host_name` (Type: `nic`: `nic-ovn-device-conf`)
	`host_name` (Type: `nic`: `nic-p2p-device-conf`)
	`host_name` (Type: `nic`: `nic-routed-device-conf`)
	`hwaddr` (Type: `infiniband`: `infiniband-device-conf`)
	`hwaddr` (Type: `nic`: `nic-bridged-device-conf`)
	`hwaddr` (Type: `nic`: `nic-ipvlan-device-conf`)
	`hwaddr` (Type: `nic`: `nic-macvlan-device-conf`)
	`hwaddr` (Type: `nic`: `nic-ovn-device-conf`)
	`hwaddr` (Type: `nic`: `nic-p2p-device-conf`)
	`hwaddr` (Type: `nic`: `nic-physical-device-conf`)
	`hwaddr` (Type: `nic`: `nic-routed-device-conf`)
	`hwaddr` (Type: `nic`: `nic-sriov-device-conf`)
	`id` (Type: `gpu`: `gpu-mdev-device-conf`)
	`id` (Type: `gpu`: `gpu-mig-device-conf`)
	`id` (Type: `gpu`: `gpu-physical-device-conf`)
	`id` (Type: `gpu`: `gpu-sriov-device-conf`)
	`initial.*`
	`io.bus`
	`io.cache`
	`ipv4.address` (Type: `nic`: `nic-bridged-device-conf`)
	`ipv4.address` (Type: `nic`: `nic-ipvlan-device-conf`)
	`ipv4.address` (Type: `nic`: `nic-ovn-device-conf`)
	`ipv4.address` (Type: `nic`: `nic-routed-device-conf`)
	`ipv4.gateway` (Type: `nic`: `nic-ipvlan-device-conf`)
	`ipv4.gateway` (Type: `nic`: `nic-routed-device-conf`)
	`ipv4.host_address`
	`ipv4.host_table` (Type: `nic`: `nic-ipvlan-device-conf`)
	`ipv4.host_table` (Type: `nic`: `nic-routed-device-conf`)
	`ipv4.neighbor_probe`
	`ipv4.routes` (Type: `nic`: `nic-bridged-device-conf`)
	`ipv4.routes` (Type: `nic`: `nic-ovn-device-conf`)
	`ipv4.routes` (Type: `nic`: `nic-p2p-device-conf`)
	`ipv4.routes` (Type: `nic`: `nic-routed-device-conf`)
	`ipv4.routes.external` (Type: `nic`: `nic-bridged-device-conf`)
	`ipv4.routes.external` (Type: `nic`: `nic-ovn-device-conf`)
	`ipv6.address` (Type: `nic`: `nic-bridged-device-conf`)
	`ipv6.address` (Type: `nic`: `nic-ipvlan-device-conf`)
	`ipv6.address` (Type: `nic`: `nic-ovn-device-conf`)
	`ipv6.address` (Type: `nic`: `nic-routed-device-conf`)
	`ipv6.gateway` (Type: `nic`: `nic-ipvlan-device-conf`)
	`ipv6.gateway` (Type: `nic`: `nic-routed-device-conf`)
	`ipv6.host_address`
	`ipv6.host_table` (Type: `nic`: `nic-ipvlan-device-conf`)
	`ipv6.host_table` (Type: `nic`: `nic-routed-device-conf`)
	`ipv6.neighbor_probe`
	`ipv6.routes` (Type: `nic`: `nic-bridged-device-conf`)
	`ipv6.routes` (Type: `nic`: `nic-ovn-device-conf`)
	`ipv6.routes` (Type: `nic`: `nic-p2p-device-conf`)
	`ipv6.routes` (Type: `nic`: `nic-routed-device-conf`)
	`ipv6.routes.external` (Type: `nic`: `nic-bridged-device-conf`)
	`ipv6.routes.external` (Type: `nic`: `nic-ovn-device-conf`)
	`limits.egress` (Type: `nic`: `nic-bridged-device-conf`)
	`limits.egress` (Type: `nic`: `nic-p2p-device-conf`)
	`limits.egress` (Type: `nic`: `nic-routed-device-conf`)
	`limits.ingress` (Type: `nic`: `nic-bridged-device-conf`)
	`limits.ingress` (Type: `nic`: `nic-p2p-device-conf`)
	`limits.ingress` (Type: `nic`: `nic-routed-device-conf`)
	`limits.max` (Type: `disk`: `disk-device-conf`)
	`limits.max` (Type: `nic`: `nic-bridged-device-conf`)
	`limits.max` (Type: `nic`: `nic-p2p-device-conf`)
	`limits.max` (Type: `nic`: `nic-routed-device-conf`)
	`limits.priority` (Type: `nic`: `nic-bridged-device-conf`)
	`limits.priority` (Type: `nic`: `nic-p2p-device-conf`)
	`limits.priority` (Type: `nic`: `nic-routed-device-conf`)
	`limits.read`
	`limits.write`
	`listen`
	`maas.subnet.ipv4` (Type: `nic`: `nic-bridged-device-conf`)
	`maas.subnet.ipv4` (Type: `nic`: `nic-macvlan-device-conf`)
	`maas.subnet.ipv4` (Type: `nic`: `nic-physical-device-conf`)
	`maas.subnet.ipv4` (Type: `nic`: `nic-sriov-device-conf`)
	`maas.subnet.ipv6` (Type: `nic`: `nic-bridged-device-conf`)
	`maas.subnet.ipv6` (Type: `nic`: `nic-macvlan-device-conf`)
	`maas.subnet.ipv6` (Type: `nic`: `nic-physical-device-conf`)
	`maas.subnet.ipv6` (Type: `nic`: `nic-sriov-device-conf`)
	`major` (Type: `unix-block`: `unix-block-device-conf`)
	`major` (Type: `unix-char`: `unix-char-device-conf`)
	`mdev`
	`mig.ci`
	`mig.gi`
	`mig.uuid`
	`minor` (Type: `unix-block`: `unix-block-device-conf`)
	`minor` (Type: `unix-char`: `unix-char-device-conf`)
	`mode` (Type: `gpu`: `gpu-physical-device-conf`)
	`mode` (Type: `nic`: `nic-ipvlan-device-conf`)
	`mode` (Type: `proxy`: `proxy-device-conf`)
	`mode` (Type: `unix-block`: `unix-block-device-conf`)
	`mode` (Type: `unix-char`: `unix-char-device-conf`)
	`mode` (Type: `unix-hotplug`: `unix-hotplug-device-conf`)
	`mode` (Type: `usb`: `unix-usb-device-conf`)
	`mtu` (Type: `infiniband`: `infiniband-device-conf`)
	`mtu` (Type: `nic`: `nic-bridged-device-conf`)
	`mtu` (Type: `nic`: `nic-ipvlan-device-conf`)
	`mtu` (Type: `nic`: `nic-macvlan-device-conf`)
	`mtu` (Type: `nic`: `nic-p2p-device-conf`)
	`mtu` (Type: `nic`: `nic-physical-device-conf`)
	`mtu` (Type: `nic`: `nic-routed-device-conf`)
	`mtu` (Type: `nic`: `nic-sriov-device-conf`)
	`name` (Type: `infiniband`: `infiniband-device-conf`)
	`name` (Type: `nic`: `nic-bridged-device-conf`)
	`name` (Type: `nic`: `nic-ipvlan-device-conf`)
	`name` (Type: `nic`: `nic-macvlan-device-conf`)
	`name` (Type: `nic`: `nic-ovn-device-conf`)
	`name` (Type: `nic`: `nic-p2p-device-conf`)
	`name` (Type: `nic`: `nic-physical-device-conf`)
	`name` (Type: `nic`: `nic-routed-device-conf`)
	`name` (Type: `nic`: `nic-sriov-device-conf`)
	`nat`
	`nested`
	`network` (Type: `nic`: `nic-bridged-device-conf`)
	`network` (Type: `nic`: `nic-macvlan-device-conf`)
	`network` (Type: `nic`: `nic-ovn-device-conf`)
	`network` (Type: `nic`: `nic-physical-device-conf`)
	`network` (Type: `nic`: `nic-sriov-device-conf`)
	`nictype`
	`parent` (Type: `infiniband`: `infiniband-device-conf`)
	`parent` (Type: `nic`: `nic-bridged-device-conf`)
	`parent` (Type: `nic`: `nic-ipvlan-device-conf`)
	`parent` (Type: `nic`: `nic-macvlan-device-conf`)
	`parent` (Type: `nic`: `nic-physical-device-conf`)
	`parent` (Type: `nic`: `nic-routed-device-conf`)
	`parent` (Type: `nic`: `nic-sriov-device-conf`)
	`path` (Type: `disk`: `disk-device-conf`)
	`path` (Type: `tpm`: `tpm-device-conf`)
	`path` (Type: `unix-block`: `unix-block-device-conf`)
	`path` (Type: `unix-char`: `unix-char-device-conf`)
	`pathrm`
	`pci` (Type: `gpu`: `gpu-mdev-device-conf`)
	`pci` (Type: `gpu`: `gpu-mig-device-conf`)
	`pci` (Type: `gpu`: `gpu-physical-device-conf`)
	`pci` (Type: `gpu`: `gpu-sriov-device-conf`)
	`pool`
	`productid` (Type: `gpu`: `gpu-mdev-device-conf`)
	`productid` (Type: `gpu`: `gpu-mig-device-conf`)
	`productid` (Type: `gpu`: `gpu-physical-device-conf`)
	`productid` (Type: `gpu`: `gpu-sriov-device-conf`)
	`productid` (Type: `unix-hotplug`: `unix-hotplug-device-conf`)
	`productid` (Type: `usb`: `unix-usb-device-conf`)
	`propagation`
	`proxy_protocol`
	`queue.tx.length` (Type: `nic`: `nic-bridged-device-conf`)
	`queue.tx.length` (Type: `nic`: `nic-p2p-device-conf`)
	`queue.tx.length` (Type: `nic`: `nic-routed-device-conf`)
	`raw.mount.options`
	`readonly`
	`recursive`
	`required` (Type: `disk`: `disk-device-conf`)
	`required` (Type: `unix-block`: `unix-block-device-conf`)
	`required` (Type: `unix-char`: `unix-char-device-conf`)
	`required` (Type: `unix-hotplug`: `unix-hotplug-device-conf`)
	`required` (Type: `usb`: `unix-usb-device-conf`)
	`security.acls`
	`security.acls.default.egress.action`
	`security.acls.default.egress.logged`
	`security.acls.default.ingress.action`
	`security.acls.default.ingress.logged`
	`security.gid`
	`security.ipv4_filtering`
	`security.ipv6_filtering`
	`security.mac_filtering` (Type: `nic`: `nic-bridged-device-conf`)
	`security.mac_filtering` (Type: `nic`: `nic-sriov-device-conf`)
	`security.port_isolation`
	`security.uid`
	`serial`
	`shift`
	`size`
	`size.state`
	`source` (Type: `disk`: `disk-device-conf`)
	`source` (Type: `unix-block`: `unix-block-device-conf`)
	`source` (Type: `unix-char`: `unix-char-device-conf`)
	`uid` (Type: `gpu`: `gpu-physical-device-conf`)
	`uid` (Type: `proxy`: `proxy-device-conf`)
	`uid` (Type: `unix-block`: `unix-block-device-conf`)
	`uid` (Type: `unix-char`: `unix-char-device-conf`)
	`uid` (Type: `unix-hotplug`: `unix-hotplug-device-conf`)
	`uid` (Type: `usb`: `unix-usb-device-conf`)
	`vendorid` (Type: `gpu`: `gpu-mdev-device-conf`)
	`vendorid` (Type: `gpu`: `gpu-mig-device-conf`)
	`vendorid` (Type: `gpu`: `gpu-physical-device-conf`)
	`vendorid` (Type: `gpu`: `gpu-sriov-device-conf`)
	`vendorid` (Type: `unix-hotplug`: `unix-hotplug-device-conf`)
	`vendorid` (Type: `usb`: `unix-usb-device-conf`)
	`vlan` (Type: `nic`: `nic-bridged-device-conf`)
	`vlan` (Type: `nic`: `nic-ipvlan-device-conf`)
	`vlan` (Type: `nic`: `nic-macvlan-device-conf`)
	`vlan` (Type: `nic`: `nic-ovn-device-conf`)
	`vlan` (Type: `nic`: `nic-physical-device-conf`)
	`vlan` (Type: `nic`: `nic-routed-device-conf`)
	`vlan` (Type: `nic`: `nic-sriov-device-conf`)
	`vlan.tagged`

	instance
	`agent.nic_config`
	`architecture`
	`boot.autostart`
	`boot.autostart.delay`
	`boot.autostart.priority`
	`boot.debug_edk2`
	`boot.host_shutdown_timeout`
	`boot.stop.priority`
	`cloud-init.network-config`
	`cloud-init.user-data`
	`cloud-init.vendor-data`
	`cluster.evacuate`
	`environment.*`
	`limits.cpu`
	`limits.cpu.allowance`
	`limits.cpu.nodes`
	`limits.cpu.pin_strategy`
	`limits.cpu.priority`
	`limits.disk.priority`
	`limits.hugepages.1GB`
	`limits.hugepages.1MB`
	`limits.hugepages.2MB`
	`limits.hugepages.64KB`
	`limits.kernel.*`
	`limits.memory`
	`limits.memory.enforce`
	`limits.memory.hugepages`
	`limits.memory.swap`
	`limits.memory.swap.priority`
	`limits.processes`
	`linux.kernel_modules`
	`linux.kernel_modules.load`
	`linux.sysctl.*`
	`migration.incremental.memory`
	`migration.incremental.memory.goal`
	`migration.incremental.memory.iterations`
	`migration.stateful`
	`name`
	`nvidia.driver.capabilities`
	`nvidia.require.cuda`
	`nvidia.require.driver`
	`nvidia.runtime`
	`raw.apparmor`
	`raw.idmap`
	`raw.lxc`
	`raw.qemu`
	`raw.qemu.conf`
	`raw.seccomp`
	`security.agent.metrics`
	`security.csm`
	`security.devlxd`
	`security.devlxd.images`
	`security.idmap.base`
	`security.idmap.isolated`
	`security.idmap.size`
	`security.nesting`
	`security.privileged`
	`security.protection.delete`
	`security.protection.shift`
	`security.protection.start`
	`security.secureboot`
	`security.sev`
	`security.sev.policy.es`
	`security.sev.session.data`
	`security.sev.session.dh`
	`security.syscalls.allow`
	`security.syscalls.deny`
	`security.syscalls.deny_compat`
	`security.syscalls.deny_default`
	`security.syscalls.intercept.bpf`
	`security.syscalls.intercept.bpf.devices`
	`security.syscalls.intercept.mknod`
	`security.syscalls.intercept.mount`
	`security.syscalls.intercept.mount.allowed`
	`security.syscalls.intercept.mount.fuse`
	`security.syscalls.intercept.mount.shift`
	`security.syscalls.intercept.sched_setscheduler`
	`security.syscalls.intercept.setxattr`
	`security.syscalls.intercept.sysinfo`
	`snapshots.expiry`
	`snapshots.pattern`
	`snapshots.schedule`
	`snapshots.schedule.stopped`
	`user.*`
	`user.network-config`
	`user.user-data`
	`user.vendor-data`
	`volatile.<name>.apply_quota`
	`volatile.<name>.ceph_rbd`
	`volatile.<name>.host_name`
	`volatile.<name>.hwaddr`
	`volatile.<name>.last_state.created`
	`volatile.<name>.last_state.hwaddr`
	`volatile.<name>.last_state.mtu`
	`volatile.<name>.last_state.vdpa.name`
	`volatile.<name>.last_state.vf.hwaddr`
	`volatile.<name>.last_state.vf.id`
	`volatile.<name>.last_state.vf.spoofcheck`
	`volatile.<name>.last_state.vf.vlan`
	`volatile.apply_nvram`
	`volatile.apply_template`
	`volatile.base_image`
	`volatile.cloud-init.instance-id`
	`volatile.evacuate.origin`
	`volatile.idmap.base`
	`volatile.idmap.current`
	`volatile.idmap.next`
	`volatile.last_state.idmap`
	`volatile.last_state.power`
	`volatile.uuid`
	`volatile.uuid.generation`
	`volatile.vsock_id`

	network
	`action`
	`backends`
	`bgp.ipv4.nexthop`
	`bgp.ipv6.nexthop`
	`bgp.peers.NAME.address` (Bridge network: `bridge-network-conf`)
	`bgp.peers.NAME.address` (Physical network: `physical-network-conf`)
	`bgp.peers.NAME.asn` (Bridge network: `bridge-network-conf`)
	`bgp.peers.NAME.asn` (Physical network: `physical-network-conf`)
	`bgp.peers.NAME.holdtime` (Bridge network: `bridge-network-conf`)
	`bgp.peers.NAME.holdtime` (Physical network: `physical-network-conf`)
	`bgp.peers.NAME.password` (Bridge network: `bridge-network-conf`)
	`bgp.peers.NAME.password` (Physical network: `physical-network-conf`)
	`bridge.driver`
	`bridge.external_interfaces`
	`bridge.hwaddr` (Bridge network: `bridge-network-conf`)
	`bridge.hwaddr` (OVN network: `ovn-network-conf`)
	`bridge.mode`
	`bridge.mtu` (Bridge network: `bridge-network-conf`)
	`bridge.mtu` (OVN network: `ovn-network-conf`)
	`config` (How to configure network ACLs: `acl-acl-properties`)
	`config` (How to configure network forwards: `forward-forward-properties`)
	`config` (How to configure network load balancers: `load-balancer-load-balancer-properties`)
	`config` (How to create OVN peer routing relationships: `peering-peering-properties`)
	`config` (How to configure network zones: `zone-record-properties`)
	`description` (How to configure network ACLs: `acl-acl-properties`)
	`description` (How to configure network ACLs: `acl-rule-properties`)
	`description` (How to configure network forwards: `forward-forward-properties`)
	`description` (How to configure network forwards: `forward-port-properties`)
	`description` (How to configure network load balancers: `load-balancer-load-balancer-backend-properties`)
	`description` (How to configure network load balancers: `load-balancer-load-balancer-port-properties`)
	`description` (How to configure network load balancers: `load-balancer-load-balancer-properties`)
	`description` (How to create OVN peer routing relationships: `peering-peering-properties`)
	`description` (How to configure network zones: `zone-record-properties`)
	`destination`
	`destination_port`
	`dns.domain` (Bridge network: `bridge-network-conf`)
	`dns.domain` (OVN network: `ovn-network-conf`)
	`dns.mode`
	`dns.nameservers` (Physical network: `physical-network-conf`)
	`dns.nameservers` (How to configure network zones: `zone-config-options`)
	`dns.search` (Bridge network: `bridge-network-conf`)
	`dns.search` (OVN network: `ovn-network-conf`)
	`dns.zone.forward` (Bridge network: `bridge-network-conf`)
	`dns.zone.forward` (OVN network: `ovn-network-conf`)
	`dns.zone.reverse.ipv4` (Bridge network: `bridge-network-conf`)
	`dns.zone.reverse.ipv4` (OVN network: `ovn-network-conf`)
	`dns.zone.reverse.ipv6` (Bridge network: `bridge-network-conf`)
	`dns.zone.reverse.ipv6` (OVN network: `ovn-network-conf`)
	`egress`
	`entries`
	`fan.overlay_subnet`
	`fan.type`
	`fan.underlay_subnet`
	`gvrp` (Macvlan network: `macvlan-network-conf`)
	`gvrp` (Physical network: `physical-network-conf`)
	`icmp_code`
	`icmp_type`
	`ingress`
	`ipv4.address` (Bridge network: `bridge-network-conf`)
	`ipv4.address` (OVN network: `ovn-network-conf`)
	`ipv4.dhcp` (Bridge network: `bridge-network-conf`)
	`ipv4.dhcp` (OVN network: `ovn-network-conf`)
	`ipv4.dhcp.expiry`
	`ipv4.dhcp.gateway`
	`ipv4.dhcp.ranges`
	`ipv4.firewall`
	`ipv4.gateway`
	`ipv4.l3only`
	`ipv4.nat` (Bridge network: `bridge-network-conf`)
	`ipv4.nat` (OVN network: `ovn-network-conf`)
	`ipv4.nat.address` (Bridge network: `bridge-network-conf`)
	`ipv4.nat.address` (OVN network: `ovn-network-conf`)
	`ipv4.nat.order`
	`ipv4.ovn.ranges` (Bridge network: `bridge-network-conf`)
	`ipv4.ovn.ranges` (Physical network: `physical-network-conf`)
	`ipv4.routes` (Bridge network: `bridge-network-conf`)
	`ipv4.routes` (Physical network: `physical-network-conf`)
	`ipv4.routes.anycast`
	`ipv4.routing`
	`ipv6.address` (Bridge network: `bridge-network-conf`)
	`ipv6.address` (OVN network: `ovn-network-conf`)
	`ipv6.dhcp` (Bridge network: `bridge-network-conf`)
	`ipv6.dhcp` (OVN network: `ovn-network-conf`)
	`ipv6.dhcp.expiry`
	`ipv6.dhcp.ranges`
	`ipv6.dhcp.stateful` (Bridge network: `bridge-network-conf`)
	`ipv6.dhcp.stateful` (OVN network: `ovn-network-conf`)
	`ipv6.firewall`
	`ipv6.gateway`
	`ipv6.l3only`
	`ipv6.nat` (Bridge network: `bridge-network-conf`)
	`ipv6.nat` (OVN network: `ovn-network-conf`)
	`ipv6.nat.address` (Bridge network: `bridge-network-conf`)
	`ipv6.nat.address` (OVN network: `ovn-network-conf`)
	`ipv6.nat.order`
	`ipv6.ovn.ranges` (Bridge network: `bridge-network-conf`)
	`ipv6.ovn.ranges` (Physical network: `physical-network-conf`)
	`ipv6.routes` (Bridge network: `bridge-network-conf`)
	`ipv6.routes` (Physical network: `physical-network-conf`)
	`ipv6.routes.anycast`
	`ipv6.routing`
	`listen_address` (How to configure network forwards: `forward-forward-properties`)
	`listen_address` (How to configure network load balancers: `load-balancer-load-balancer-properties`)
	`listen_port` (How to configure network forwards: `forward-port-properties`)
	`listen_port` (How to configure network load balancers: `load-balancer-load-balancer-port-properties`)
	`maas.subnet.ipv4` (Bridge network: `bridge-network-conf`)
	`maas.subnet.ipv4` (Macvlan network: `macvlan-network-conf`)
	`maas.subnet.ipv4` (Physical network: `physical-network-conf`)
	`maas.subnet.ipv4` (SR-IOV network: `sriov-network-conf`)
	`maas.subnet.ipv6` (Bridge network: `bridge-network-conf`)
	`maas.subnet.ipv6` (Macvlan network: `macvlan-network-conf`)
	`maas.subnet.ipv6` (Physical network: `physical-network-conf`)
	`maas.subnet.ipv6` (SR-IOV network: `sriov-network-conf`)
	`mtu` (Macvlan network: `macvlan-network-conf`)
	`mtu` (Physical network: `physical-network-conf`)
	`mtu` (SR-IOV network: `sriov-network-conf`)
	`name` (How to configure network ACLs: `acl-acl-properties`)
	`name` (How to configure network load balancers: `load-balancer-load-balancer-backend-properties`)
	`name` (How to create OVN peer routing relationships: `peering-peering-properties`)
	`name` (How to configure network zones: `zone-record-properties`)
	`network`
	`network.nat`
	`ovn.ingress_mode`
	`parent` (Macvlan network: `macvlan-network-conf`)
	`parent` (Physical network: `physical-network-conf`)
	`parent` (SR-IOV network: `sriov-network-conf`)
	`peers.NAME.address`
	`peers.NAME.key`
	`ports` (How to configure network forwards: `forward-forward-properties`)
	`ports` (How to configure network load balancers: `load-balancer-load-balancer-properties`)
	`protocol` (How to configure network ACLs: `acl-rule-properties`)
	`protocol` (How to configure network forwards: `forward-port-properties`)
	`protocol` (How to configure network load balancers: `load-balancer-load-balancer-port-properties`)
	`raw.dnsmasq`
	`security.acls` (Bridge network: `bridge-network-conf`)
	`security.acls` (OVN network: `ovn-network-conf`)
	`security.acls.default.egress.action` (Bridge network: `bridge-network-conf`)
	`security.acls.default.egress.action` (OVN network: `ovn-network-conf`)
	`security.acls.default.egress.logged` (Bridge network: `bridge-network-conf`)
	`security.acls.default.egress.logged` (OVN network: `ovn-network-conf`)
	`security.acls.default.ingress.action` (Bridge network: `bridge-network-conf`)
	`security.acls.default.ingress.action` (OVN network: `ovn-network-conf`)
	`security.acls.default.ingress.logged` (Bridge network: `bridge-network-conf`)
	`security.acls.default.ingress.logged` (OVN network: `ovn-network-conf`)
	`source`
	`source_port`
	`state`
	`status`
	`target_address` (How to configure network forwards: `forward-port-properties`)
	`target_address` (How to configure network load balancers: `load-balancer-load-balancer-backend-properties`)
	`target_backend`
	`target_network`
	`target_port` (How to configure network forwards: `forward-port-properties`)
	`target_port` (How to configure network load balancers: `load-balancer-load-balancer-backend-properties`)
	`target_project`
	`tunnel.NAME.group`
	`tunnel.NAME.id`
	`tunnel.NAME.interface`
	`tunnel.NAME.local`
	`tunnel.NAME.port`
	`tunnel.NAME.protocol`
	`tunnel.NAME.remote`
	`tunnel.NAME.ttl`
	`user.*` (Bridge network: `bridge-network-conf`)
	`user.*` (Macvlan network: `macvlan-network-conf`)
	`user.*` (OVN network: `ovn-network-conf`)
	`user.*` (Physical network: `physical-network-conf`)
	`user.*` (SR-IOV network: `sriov-network-conf`)
	`user.*` (How to configure network zones: `zone-config-options`)
	`vlan` (Macvlan network: `macvlan-network-conf`)
	`vlan` (Physical network: `physical-network-conf`)
	`vlan` (SR-IOV network: `sriov-network-conf`)

	project
	`backups.compression_algorithm`
	`features.images`
	`features.networks`
	`features.networks.zones`
	`features.profiles`
	`features.storage.buckets`
	`features.storage.volumes`
	`images.auto_update_cached`
	`images.auto_update_interval`
	`images.compression_algorithm`
	`images.default_architecture`
	`images.remote_cache_expiry`
	`limits.containers`
	`limits.cpu`
	`limits.disk`
	`limits.disk.pool.POOL_NAME`
	`limits.instances`
	`limits.memory`
	`limits.networks`
	`limits.processes`
	`limits.virtual-machines`
	`restricted`
	`restricted.backups`
	`restricted.cluster.groups`
	`restricted.cluster.target`
	`restricted.containers.interception`
	`restricted.containers.lowlevel`
	`restricted.containers.nesting`
	`restricted.containers.privilege`
	`restricted.devices.disk`
	`restricted.devices.disk.paths`
	`restricted.devices.gpu`
	`restricted.devices.infiniband`
	`restricted.devices.nic`
	`restricted.devices.pci`
	`restricted.devices.proxy`
	`restricted.devices.unix-block`
	`restricted.devices.unix-char`
	`restricted.devices.unix-hotplug`
	`restricted.devices.usb`
	`restricted.idmap.gid`
	`restricted.idmap.uid`
	`restricted.networks.access`
	`restricted.networks.subnets`
	`restricted.networks.uplinks`
	`restricted.networks.zones`
	`restricted.snapshots`
	`restricted.virtual-machines.lowlevel`
	`user.*`

	server
	`acme.agree_tos`
	`acme.ca_url`
	`acme.domain`
	`acme.email`
	`backups.compression_algorithm`
	`cluster.healing_threshold`
	`cluster.https_address`
	`cluster.images_minimal_replica`
	`cluster.join_token_expiry`
	`cluster.max_standby`
	`cluster.max_voters`
	`cluster.offline_threshold`
	`core.bgp_address`
	`core.bgp_asn`
	`core.bgp_routerid`
	`core.debug_address`
	`core.dns_address`
	`core.https_address`
	`core.https_allowed_credentials`
	`core.https_allowed_headers`
	`core.https_allowed_methods`
	`core.https_allowed_origin`
	`core.https_trusted_proxy`
	`core.metrics_address`
	`core.metrics_authentication`
	`core.proxy_http`
	`core.proxy_https`
	`core.proxy_ignore_hosts`
	`core.remote_token_expiry`
	`core.shutdown_timeout`
	`core.storage_buckets_address`
	`core.syslog_socket`
	`core.trust_ca_certificates`
	`core.trust_password`
	`images.auto_update_cached`
	`images.auto_update_interval`
	`images.compression_algorithm`
	`images.default_architecture`
	`images.remote_cache_expiry`
	`instances.migration.stateful`
	`instances.nic.host_name`
	`instances.placement.scriptlet`
	`loki.api.ca_cert`
	`loki.api.url`
	`loki.auth.password`
	`loki.auth.username`
	`loki.instance`
	`loki.labels`
	`loki.loglevel`
	`loki.types`
	`maas.api.key`
	`maas.api.url`
	`maas.machine`
	`network.ovn.ca_cert`
	`network.ovn.client_cert`
	`network.ovn.client_key`
	`network.ovn.integration_bridge`
	`network.ovn.northbound_connection`
	`oidc.audience`
	`oidc.client.id`
	`oidc.groups.claim`
	`oidc.issuer`
	`storage.backups_volume`
	`storage.images_volume`

	storage
	`block.filesystem` (Ceph RBD - `ceph`: `ceph-volume-conf`)
	`block.filesystem` (LVM - `lvm`: `lvm-volume-conf`)
	`block.filesystem` (Dell PowerFlex - `powerflex`: `powerflex-volume-conf`)
	`block.filesystem` (ZFS - `zfs`: `zfs-volume-conf`)
	`block.mount_options` (Ceph RBD - `ceph`: `ceph-volume-conf`)
	`block.mount_options` (LVM - `lvm`: `lvm-volume-conf`)
	`block.mount_options` (Dell PowerFlex - `powerflex`: `powerflex-volume-conf`)
	`block.mount_options` (ZFS - `zfs`: `zfs-volume-conf`)
	`block.type`
	`btrfs.mount_options`
	`ceph.cluster_name`
	`ceph.osd.data_pool_name`
	`ceph.osd.pg_num`
	`ceph.osd.pool_name`
	`ceph.rbd.clone_copy`
	`ceph.rbd.du`
	`ceph.rbd.features`
	`ceph.user.name`
	`cephfs.cluster_name`
	`cephfs.create_missing`
	`cephfs.data_pool`
	`cephfs.fscache`
	`cephfs.meta_pool`
	`cephfs.osd_pg_num`
	`cephfs.path`
	`cephfs.user.name`
	`cephobject.bucket.name_prefix`
	`cephobject.cluster_name`
	`cephobject.radosgw.endpoint`
	`cephobject.radosgw.endpoint_cert_file`
	`cephobject.user.name`
	`lvm.stripes`
	`lvm.stripes.size`
	`lvm.thinpool_metadata_size`
	`lvm.thinpool_name`
	`lvm.use_thinpool`
	`lvm.vg.force_reuse`
	`lvm.vg_name`
	`powerflex.clone_copy`
	`powerflex.domain`
	`powerflex.gateway`
	`powerflex.gateway.verify`
	`powerflex.mode`
	`powerflex.pool`
	`powerflex.sdt`
	`powerflex.user.name`
	`powerflex.user.password`
	`rsync.bwlimit` (Directory - `dir`: `dir-pool-conf`)
	`rsync.bwlimit` (LVM - `lvm`: `lvm-pool-conf`)
	`rsync.bwlimit` (Dell PowerFlex - `powerflex`: `powerflex-pool-conf`)
	`rsync.compression` (Directory - `dir`: `dir-pool-conf`)
	`rsync.compression` (LVM - `lvm`: `lvm-pool-conf`)
	`rsync.compression` (Dell PowerFlex - `powerflex`: `powerflex-pool-conf`)
	`security.shared` (Btrfs - `btrfs`: `btrfs-volume-conf`)
	`security.shared` (Ceph RBD - `ceph`: `ceph-volume-conf`)
	`security.shared` (Directory - `dir`: `dir-volume-conf`)
	`security.shared` (LVM - `lvm`: `lvm-volume-conf`)
	`security.shared` (Dell PowerFlex - `powerflex`: `powerflex-volume-conf`)
	`security.shared` (ZFS - `zfs`: `zfs-volume-conf`)
	`security.shifted` (Btrfs - `btrfs`: `btrfs-volume-conf`)
	`security.shifted` (Ceph RBD - `ceph`: `ceph-volume-conf`)
	`security.shifted` (CephFS - `cephfs`: `cephfs-volume-conf`)
	`security.shifted` (Directory - `dir`: `dir-volume-conf`)
	`security.shifted` (LVM - `lvm`: `lvm-volume-conf`)
	`security.shifted` (Dell PowerFlex - `powerflex`: `powerflex-volume-conf`)
	`security.shifted` (ZFS - `zfs`: `zfs-volume-conf`)
	`security.unmapped` (Btrfs - `btrfs`: `btrfs-volume-conf`)
	`security.unmapped` (Ceph RBD - `ceph`: `ceph-volume-conf`)
	`security.unmapped` (CephFS - `cephfs`: `cephfs-volume-conf`)
	`security.unmapped` (Directory - `dir`: `dir-volume-conf`)
	`security.unmapped` (LVM - `lvm`: `lvm-volume-conf`)
	`security.unmapped` (Dell PowerFlex - `powerflex`: `powerflex-volume-conf`)
	`security.unmapped` (ZFS - `zfs`: `zfs-volume-conf`)
	`size` (Btrfs - `btrfs`: `btrfs-bucket-conf`)
	`size` (Btrfs - `btrfs`: `btrfs-pool-conf`)
	`size` (Btrfs - `btrfs`: `btrfs-volume-conf`)
	`size` (Ceph RBD - `ceph`: `ceph-volume-conf`)
	`size` (CephFS - `cephfs`: `cephfs-volume-conf`)
	`size` (Ceph Object - `cephobject`: `cephobject-bucket-conf`)
	`size` (Directory - `dir`: `dir-volume-conf`)
	`size` (LVM - `lvm`: `lvm-bucket-conf`)
	`size` (LVM - `lvm`: `lvm-pool-conf`)
	`size` (LVM - `lvm`: `lvm-volume-conf`)
	`size` (Dell PowerFlex - `powerflex`: `powerflex-volume-conf`)
	`size` (ZFS - `zfs`: `zfs-bucket-conf`)
	`size` (ZFS - `zfs`: `zfs-pool-conf`)
	`size` (ZFS - `zfs`: `zfs-volume-conf`)
	`snapshots.expiry` (Btrfs - `btrfs`: `btrfs-volume-conf`)
	`snapshots.expiry` (Ceph RBD - `ceph`: `ceph-volume-conf`)
	`snapshots.expiry` (CephFS - `cephfs`: `cephfs-volume-conf`)
	`snapshots.expiry` (Directory - `dir`: `dir-volume-conf`)
	`snapshots.expiry` (LVM - `lvm`: `lvm-volume-conf`)
	`snapshots.expiry` (Dell PowerFlex - `powerflex`: `powerflex-volume-conf`)
	`snapshots.expiry` (ZFS - `zfs`: `zfs-volume-conf`)
	`snapshots.pattern` (Btrfs - `btrfs`: `btrfs-volume-conf`)
	`snapshots.pattern` (Ceph RBD - `ceph`: `ceph-volume-conf`)
	`snapshots.pattern` (CephFS - `cephfs`: `cephfs-volume-conf`)
	`snapshots.pattern` (Directory - `dir`: `dir-volume-conf`)
	`snapshots.pattern` (LVM - `lvm`: `lvm-volume-conf`)
	`snapshots.pattern` (Dell PowerFlex - `powerflex`: `powerflex-volume-conf`)
	`snapshots.pattern` (ZFS - `zfs`: `zfs-volume-conf`)
	`snapshots.schedule` (Btrfs - `btrfs`: `btrfs-volume-conf`)
	`snapshots.schedule` (Ceph RBD - `ceph`: `ceph-volume-conf`)
	`snapshots.schedule` (CephFS - `cephfs`: `cephfs-volume-conf`)
	`snapshots.schedule` (Directory - `dir`: `dir-volume-conf`)
	`snapshots.schedule` (LVM - `lvm`: `lvm-volume-conf`)
	`snapshots.schedule` (Dell PowerFlex - `powerflex`: `powerflex-volume-conf`)
	`snapshots.schedule` (ZFS - `zfs`: `zfs-volume-conf`)
	`source` (Btrfs - `btrfs`: `btrfs-pool-conf`)
	`source` (Ceph RBD - `ceph`: `ceph-pool-conf`)
	`source` (CephFS - `cephfs`: `cephfs-pool-conf`)
	`source` (Directory - `dir`: `dir-pool-conf`)
	`source` (LVM - `lvm`: `lvm-pool-conf`)
	`source` (ZFS - `zfs`: `zfs-pool-conf`)
	`source.wipe` (Btrfs - `btrfs`: `btrfs-pool-conf`)
	`source.wipe` (LVM - `lvm`: `lvm-pool-conf`)
	`source.wipe` (ZFS - `zfs`: `zfs-pool-conf`)
	`volatile.pool.pristine` (Ceph RBD - `ceph`: `ceph-pool-conf`)
	`volatile.pool.pristine` (CephFS - `cephfs`: `cephfs-pool-conf`)
	`volatile.pool.pristine` (Ceph Object - `cephobject`: `cephobject-pool-conf`)
	`volatile.uuid` (Btrfs - `btrfs`: `btrfs-volume-conf`)
	`volatile.uuid` (Ceph RBD - `ceph`: `ceph-volume-conf`)
	`volatile.uuid` (CephFS - `cephfs`: `cephfs-volume-conf`)
	`volatile.uuid` (Directory - `dir`: `dir-volume-conf`)
	`volatile.uuid` (LVM - `lvm`: `lvm-volume-conf`)
	`volatile.uuid` (Dell PowerFlex - `powerflex`: `powerflex-volume-conf`)
	`volatile.uuid` (ZFS - `zfs`: `zfs-volume-conf`)
	`volume.size`
	`zfs.block_mode`
	`zfs.blocksize`
	`zfs.clone_copy`
	`zfs.delegate`
	`zfs.export`
	`zfs.pool_name`
	`zfs.remove_snapshots`
	`zfs.reserve_space`
	`zfs.use_refquota`

	sysctl
	`fs.aio-max-nr`
	`fs.inotify.max_queued_events`
	`fs.inotify.max_user_instances`
	`fs.inotify.max_user_watches`
	`kernel.dmesg_restrict`
	`kernel.keys.maxbytes`
	`kernel.keys.maxkeys`
	`net.core.bpf_jit_limit`
	`net.ipv4.neigh.default.gc_thresh3`
	`net.ipv6.neigh.default.gc_thresh3`
	`vm.max_map_count`