[crio.image] signature_policy = "/etc/crio/policy.json" [crio.runtime] {% if taskserv.default_runtime -%} default_runtime = "{{taskserv.default_runtime}}" {% else -%} default_runtime = "crun" {% endif -%} {% if taskserv.runtimes is containing("crun") -%} [crio.runtime.runtimes.crun] runtime_path = "/usr/local/bin/crio-crun" monitor_path = "/usr/local/bin/crio-conmon" allowed_annotations = [ "io.containers.trace-syscall", ] {% endif -%} {% if taskserv.runtimes is containing("runc") -%} [crio.runtime.runtimes.runc] runtime_path = "/usr/local/bin/crio-runc" monitor_path = "/usr/local/bin/crio-conmon" {% endif -%} {% if taskserv.runtimes is containing("youki") -%} [crio.runtime.runtimes.youki] runtime_path = "/usr/local/bin/youki" monitor_path = "/usr/local/bin/crio-conmon" runtime_type ="oci" runtime_root = "/run/youki" cgroup_manager = "cgroupfs" conmon_cgroup = "pod" {% endif -%}