@@ -178,6 +178,15 @@ The `podman` driver implements the following [capabilities](/docs/concepts/plugi
178
178
}
179
179
```
180
180
181
+ - ` image_pull_timeout ` - (Optional) Time duration for your pull timeout
182
+ (default to ` "5m" ` ). Cannot be longer than the [ ` client_http_timeout ` ] .
183
+
184
+ ``` hcl
185
+ config {
186
+ image_pull_timeout = "5m"
187
+ }
188
+ ```
189
+
181
190
- ` init ` - (Optional) Run an ` init ` inside the container that forwards signals
182
191
and reaps processes.
183
192
@@ -310,6 +319,20 @@ The `podman` driver implements the following [capabilities](/docs/concepts/plugi
310
319
- ` ports ` - (Optional) Forward and expose ports. Refer to
311
320
[ Docker driver configuration] [ nomad_driver_ports ] for details.
312
321
322
+ - ` privileged ` - (Optional) ` true ` or ` false ` (default). A privileged container
323
+ turns off the security features that isolate the container from the host.
324
+ Dropped Capabilities, limited devices, read-only mount points,
325
+ Apparmor/SELinux separation, and Seccomp filters are all disabled.
326
+
327
+ - ` readonly_rootfs ` - (Optional) ` true ` or ` false ` (default). Mount the rootfs
328
+ as read-only.
329
+
330
+ ``` hcl
331
+ config {
332
+ readonly_rootfs = true
333
+ }
334
+ ```
335
+
313
336
- ` sysctl ` - (Optional) A key-value map of ` sysctl ` configurations to set to
314
337
the containers on start.
315
338
@@ -344,8 +367,8 @@ The `podman` driver implements the following [capabilities](/docs/concepts/plugi
344
367
}
345
368
```
346
369
347
- - ` volumes ` - (Optional) A list of ` host_path:container_path ` strings to bind
348
- host paths to container paths. Named volumes are not supported.
370
+ - ` volumes ` - (Optional) A list of ` host_path:container_path:options ` strings
371
+ to bind host paths to container paths. Named volumes are not supported.
349
372
350
373
``` hcl
351
374
config {
@@ -488,6 +511,31 @@ configuration file.
488
511
running as ` root ` or a cgroup V1 system, and
489
512
` unix://run/user/<USER_ID>/podman/io.podman ` for rootless cgroup V2 systems.
490
513
514
+ - ` disable_log_collection ` ` (bool: false) ` - Setting this to ` true ` will
515
+ disable Nomad logs collection of Podman tasks. If you don't rely on Nomad log
516
+ capabilities and exclusively use host based log aggregation, you may consider
517
+ this option to disable Nomad log collection overhead. Beware to you also lose
518
+ automatic log rotation.
519
+
520
+ ``` hcl
521
+ plugin "nomad-driver-podman" {
522
+ config {
523
+ disable_log_collection = false
524
+ }
525
+ }
526
+ ```
527
+
528
+ - ` client_http_timeout ` ` (string: "60s") ` - Default timeout used by
529
+ ` http.Client ` requests.
530
+
531
+ ``` hcl
532
+ plugin "nomad-driver-podman" {
533
+ config {
534
+ client_http_timeout = "60s"
535
+ }
536
+ }
537
+ ```
538
+
491
539
- ` volumes ` stanza:
492
540
493
541
- ` enabled ` - Defaults to ` true ` . Allows tasks to bind host paths (volumes)
@@ -535,3 +583,4 @@ configuration file.
535
583
[ downloaded ] : https://releases.hashicorp.com/nomad-driver-podman
536
584
[ short-names ] : https://github.com/containers/image/blob/master/docs/containers-registries.conf.5.md#short-name-aliasing
537
585
[ `command` ] : #command
586
+ [ `client_http_timeout` ] : #client_http_timeout
0 commit comments