Expose `cgroup_writable` in API

Open z0rc opened this issue 2 months ago • 1 comments

What I'd like:

I'm looking into setting cgroup_writeable = true in containerd settings, per https://docs.gitlab.com/administration/gitaly/kubernetes/#enable-cgroup_writable-field-in-containerd.

This is recent feature of containerd 2.1.0, see https://github.com/containerd/containerd/pull/11131 and https://github.com/containerd/containerd/pull/12227.

Citation from https://github.com/bottlerocket-os/bottlerocket-core-kit/pull/621

would likely needed to be added as a setting if we were interested.

...so, here is the interest.

Any alternatives you've considered:

https://github.com/kubernetes/enhancements/pull/5475 potenaltially doable in Kubernetes container spec in the future.

Oct 21 '25 14:10 z0rc

Hey @z0rc , thanks for cutting this issue and sharing your use-case! We will consider this new setting as a feature request.

Oct 22 '25 17:10 koooosh