Configuration options

cluster | cluster_group | devices | image | instance | kernel | network_address_set | network_bridge | network_forward | network_integration | network_load_balancer | network_zone | project | server | tpm


	cluster
	`scheduler.instance`
	`user.*`

	cluster_group
	`instances.vm.cpu.ARCHITECTURE.baseline`
	`instances.vm.cpu.ARCHITECTURE.flags`
	`user.*`

	devices
	`boot.priority`
	`busnum`
	`ceph.cluster_name`
	`ceph.user_name`
	`devnum`
	`gid` (Type: <code class="literal">unix-block</code>: <code class="literal">unix-char-block</code>)
	`gid` (Type: <code class="literal">unix-char</code>: <code class="literal">unix-char-block</code>)
	`gid` (Type: <code class="literal">unix-hotplug</code>: <code class="literal">unix-hotplug</code>)
	`gid` (Type: <code class="literal">usb</code>: <code class="literal">usb</code>)
	`initial.*`
	`io.bus`
	`io.cache`
	`limits.max`
	`limits.read`
	`limits.write`
	`major` (Type: <code class="literal">unix-block</code>: <code class="literal">unix-char-block</code>)
	`major` (Type: <code class="literal">unix-char</code>: <code class="literal">unix-char-block</code>)
	`minor` (Type: <code class="literal">unix-block</code>: <code class="literal">unix-char-block</code>)
	`minor` (Type: <code class="literal">unix-char</code>: <code class="literal">unix-char-block</code>)
	`mode` (Type: <code class="literal">unix-block</code>: <code class="literal">unix-char-block</code>)
	`mode` (Type: <code class="literal">unix-char</code>: <code class="literal">unix-char-block</code>)
	`mode` (Type: <code class="literal">unix-hotplug</code>: <code class="literal">unix-hotplug</code>)
	`mode` (Type: <code class="literal">usb</code>: <code class="literal">usb</code>)
	`path` (Type: <code class="literal">disk</code>: <code class="literal">disk</code>)
	`path` (Type: <code class="literal">unix-block</code>: <code class="literal">unix-char-block</code>)
	`path` (Type: <code class="literal">unix-char</code>: <code class="literal">unix-char-block</code>)
	`pool`
	`productid` (Type: <code class="literal">unix-hotplug</code>: <code class="literal">unix-hotplug</code>)
	`productid` (Type: <code class="literal">usb</code>: <code class="literal">usb</code>)
	`propagation`
	`raw.mount.options`
	`readonly`
	`recursive`
	`required` (Type: <code class="literal">disk</code>: <code class="literal">disk</code>)
	`required` (Type: <code class="literal">unix-block</code>: <code class="literal">unix-char-block</code>)
	`required` (Type: <code class="literal">unix-char</code>: <code class="literal">unix-char-block</code>)
	`required` (Type: <code class="literal">unix-hotplug</code>: <code class="literal">unix-hotplug</code>)
	`required` (Type: <code class="literal">usb</code>: <code class="literal">usb</code>)
	`serial`
	`shift`
	`size`
	`size.state`
	`source` (Type: <code class="literal">disk</code>: <code class="literal">disk</code>)
	`source` (Type: <code class="literal">unix-block</code>: <code class="literal">unix-char-block</code>)
	`source` (Type: <code class="literal">unix-char</code>: <code class="literal">unix-char-block</code>)
	`uid` (Type: <code class="literal">unix-block</code>: <code class="literal">unix-char-block</code>)
	`uid` (Type: <code class="literal">unix-char</code>: <code class="literal">unix-char-block</code>)
	`uid` (Type: <code class="literal">unix-hotplug</code>: <code class="literal">unix-hotplug</code>)
	`uid` (Type: <code class="literal">usb</code>: <code class="literal">usb</code>)
	`vendorid` (Type: <code class="literal">unix-hotplug</code>: <code class="literal">unix-hotplug</code>)
	`vendorid` (Type: <code class="literal">usb</code>: <code class="literal">usb</code>)

	image
	`requirements.cdrom_agent`
	`requirements.cgroup`
	`requirements.nesting`
	`requirements.privileged`
	`requirements.secureboot`

	instance
	`agent.nic_config`
	`boot.autorestart`
	`boot.autostart`
	`boot.autostart.delay`
	`boot.autostart.priority`
	`boot.host_shutdown_action`
	`boot.host_shutdown_timeout`
	`boot.stop.priority`
	`cloud-init.network-config`
	`cloud-init.user-data`
	`cloud-init.vendor-data`
	`cluster.evacuate`
	`environment.` (Instance options: <code class="literal">miscellaneous</code>)*
	`environment.` (Instance options: <code class="literal">miscellaneous</code>)*
	`limits.cpu`
	`limits.cpu.allowance`
	`limits.cpu.nodes`
	`limits.cpu.priority`
	`limits.disk.priority`
	`limits.hugepages.1GB`
	`limits.hugepages.1MB`
	`limits.hugepages.2MB`
	`limits.hugepages.64KB`
	`limits.kernel.*`
	`limits.memory`
	`limits.memory.enforce`
	`limits.memory.hugepages`
	`limits.memory.swap`
	`limits.memory.swap.priority`
	`limits.processes`
	`linux.kernel_modules`
	`linux.sysctl.*`
	`migration.incremental.memory`
	`migration.incremental.memory.goal`
	`migration.incremental.memory.iterations`
	`migration.stateful`
	`nvidia.driver.capabilities`
	`nvidia.require.cuda`
	`nvidia.require.driver`
	`nvidia.runtime`
	`oci.cwd`
	`oci.entrypoint`
	`oci.gid`
	`oci.uid`
	`raw.apparmor`
	`raw.idmap`
	`raw.lxc`
	`raw.qemu`
	`raw.qemu.conf`
	`raw.qemu.qmp.early`
	`raw.qemu.qmp.post-start`
	`raw.qemu.qmp.pre-start`
	`raw.qemu.scriptlet`
	`raw.seccomp`
	`security.agent.metrics`
	`security.csm`
	`security.guestapi`
	`security.guestapi.images`
	`security.idmap.base`
	`security.idmap.isolated`
	`security.idmap.size`
	`security.iommu`
	`security.nesting`
	`security.privileged`
	`security.protection.delete`
	`security.protection.shift`
	`security.secureboot`
	`security.sev`
	`security.sev.policy.es`
	`security.sev.session.data`
	`security.sev.session.dh`
	`security.syscalls.allow`
	`security.syscalls.deny`
	`security.syscalls.deny_compat`
	`security.syscalls.deny_default`
	`security.syscalls.intercept.bpf`
	`security.syscalls.intercept.bpf.devices`
	`security.syscalls.intercept.mknod`
	`security.syscalls.intercept.mount`
	`security.syscalls.intercept.mount.allowed`
	`security.syscalls.intercept.mount.fuse`
	`security.syscalls.intercept.mount.shift`
	`security.syscalls.intercept.sched_setscheduler`
	`security.syscalls.intercept.setxattr`
	`security.syscalls.intercept.sysinfo`
	`smbios11.*`
	`snapshots.expiry`
	`snapshots.pattern`
	`snapshots.schedule`
	`snapshots.schedule.stopped`
	`user.*`
	`user.network-config`
	`user.user-data`
	`user.vendor-data`
	`volatile.<name>.apply_quota`
	`volatile.<name>.ceph_rbd`
	`volatile.<name>.host_name`
	`volatile.<name>.hwaddr`
	`volatile.<name>.last_state.created`
	`volatile.<name>.last_state.hwaddr`
	`volatile.<name>.last_state.ip_addresses`
	`volatile.<name>.last_state.mtu`
	`volatile.<name>.last_state.pci.driver`
	`volatile.<name>.last_state.pci.parent`
	`volatile.<name>.last_state.pci.slot.name`
	`volatile.<name>.last_state.usb.bus`
	`volatile.<name>.last_state.usb.device`
	`volatile.<name>.last_state.vdpa.name`
	`volatile.<name>.last_state.vf.hwaddr`
	`volatile.<name>.last_state.vf.id`
	`volatile.<name>.last_state.vf.parent`
	`volatile.<name>.last_state.vf.spoofcheck`
	`volatile.<name>.last_state.vf.vlan`
	`volatile.<name>.mig.uuid`
	`volatile.<name>.name`
	`volatile.<name>.vgpu.uuid`
	`volatile.apply_nvram`
	`volatile.apply_template`
	`volatile.base_image`
	`volatile.cloud_init.instance-id`
	`volatile.cluster.group`
	`volatile.container.oci`
	`volatile.cpu.nodes`
	`volatile.evacuate.origin`
	`volatile.idmap.base`
	`volatile.idmap.current`
	`volatile.idmap.next`
	`volatile.last_state.idmap`
	`volatile.last_state.power`
	`volatile.last_state.ready`
	`volatile.rebalance.last_move`
	`volatile.uuid`
	`volatile.uuid.generation`
	`volatile.vm.definition`
	`volatile.vsock_id`

	kernel
	`limits.kernel.as`
	`limits.kernel.core`
	`limits.kernel.cpu`
	`limits.kernel.data`
	`limits.kernel.fsize`
	`limits.kernel.locks`
	`limits.kernel.memlock`
	`limits.kernel.nice`
	`limits.kernel.nofile`
	`limits.kernel.nproc`
	`limits.kernel.rtprio`
	`limits.kernel.sigpending`

	network_address_set
	`user.*`

	network_bridge
	`bgp.ipv4.nexthop`
	`bgp.ipv6.nexthop`
	`bridge.driver`
	`bridge.external_interfaces`
	`bridge.hwaddr`
	`bridge.mtu`
	`dns.domain`
	`dns.mode`
	`dns.nameservers`
	`dns.search`
	`dns.zone.forward`
	`dns.zone.reverse.ipv4`
	`dns.zone.reverse.ipv6`
	`ipv4.address`
	`ipv4.dhcp`
	`ipv4.dhcp.expiry`
	`ipv4.dhcp.gateway`
	`ipv4.dhcp.ranges`
	`ipv4.dhcp.routes`
	`ipv4.firewall`
	`ipv4.nat`
	`ipv4.nat.address`
	`ipv4.nat.order`
	`ipv4.ovn.ranges`
	`ipv4.routes`
	`ipv4.routing`
	`ipv6.address`
	`ipv6.dhcp`
	`ipv6.dhcp.expiry`
	`ipv6.dhcp.ranges`
	`ipv6.dhcp.stateful`
	`ipv6.firewall`
	`ipv6.nat`
	`ipv6.nat.address`
	`ipv6.nat.order`
	`ipv6.ovn.ranges`
	`ipv6.routes`
	`ipv6.routing`
	`raw.dnsmasq`
	`security.acls`
	`security.acls.default.egress.action`
	`security.acls.default.egress.logged`
	`security.acls.default.ingress.action`
	`security.acls.default.ingress.logged`
	`tunnel.NAME.group`
	`tunnel.NAME.id`
	`tunnel.NAME.interface`
	`tunnel.NAME.local`
	`tunnel.NAME.port`
	`tunnel.NAME.protocol`
	`tunnel.NAME.remote`
	`tunnel.NAME.ttl`
	`user.*`

	network_forward
	`target_address`
	`user.*`

	network_integration
	`ovn.ca_cert`
	`ovn.client_cert`
	`ovn.client_key`
	`ovn.northbound_connection`
	`ovn.southbound_connection`
	`ovn.transit.pattern`
	`user.*`

	network_load_balancer
	`healthcheck`
	`healthcheck.failure_count`
	`healthcheck.interval`
	`healthcheck.success_count`
	`healthcheck.timeout`
	`user.*`

	network_zone
	`dns.nameservers`
	`network.nat`
	`peers.NAME.address`
	`peers.NAME.key`
	`user.*`

	project
	`backups.compression_algorithm`
	`features.images`
	`features.networks`
	`features.networks.zones`
	`features.profiles`
	`features.storage.buckets`
	`features.storage.volumes`
	`images.auto_update_cached`
	`images.auto_update_interval`
	`images.compression_algorithm`
	`images.default_architecture`
	`images.remote_cache_expiry`
	`limits.containers`
	`limits.cpu`
	`limits.disk`
	`limits.disk.pool.POOL_NAME`
	`limits.instances`
	`limits.memory`
	`limits.networks`
	`limits.processes`
	`limits.virtual-machines`
	`restricted`
	`restricted.backups`
	`restricted.cluster.groups`
	`restricted.cluster.target`
	`restricted.containers.interception`
	`restricted.containers.lowlevel`
	`restricted.containers.nesting`
	`restricted.containers.privilege`
	`restricted.devices.disk`
	`restricted.devices.disk.paths`
	`restricted.devices.gpu`
	`restricted.devices.infiniband`
	`restricted.devices.nic`
	`restricted.devices.pci`
	`restricted.devices.proxy`
	`restricted.devices.unix-block`
	`restricted.devices.unix-char`
	`restricted.devices.unix-hotplug`
	`restricted.devices.usb`
	`restricted.idmap.gid`
	`restricted.idmap.uid`
	`restricted.networks.access`
	`restricted.networks.integrations`
	`restricted.networks.subnets`
	`restricted.networks.uplinks`
	`restricted.networks.zones`
	`restricted.snapshots`
	`restricted.virtual-machines.lowlevel`
	`user.*`

	server
	`acme.agree_tos`
	`acme.ca_url`
	`acme.challenge`
	`acme.domain`
	`acme.email`
	`acme.http.port`
	`acme.provider`
	`acme.provider.environment`
	`acme.provider.resolvers`
	`authorization.scriptlet`
	`backups.compression_algorithm`
	`cluster.healing_threshold`
	`cluster.https_address`
	`cluster.images_minimal_replica`
	`cluster.join_token_expiry`
	`cluster.max_standby`
	`cluster.max_voters`
	`cluster.offline_threshold`
	`cluster.rebalance.batch`
	`cluster.rebalance.cooldown`
	`cluster.rebalance.interval`
	`cluster.rebalance.threshold`
	`core.bgp_address`
	`core.bgp_asn`
	`core.bgp_routerid`
	`core.debug_address`
	`core.dns_address`
	`core.https_address`
	`core.https_allowed_credentials`
	`core.https_allowed_headers`
	`core.https_allowed_methods`
	`core.https_allowed_origin`
	`core.https_trusted_proxy`
	`core.metrics_address`
	`core.metrics_authentication`
	`core.proxy_http`
	`core.proxy_https`
	`core.proxy_ignore_hosts`
	`core.remote_token_expiry`
	`core.shutdown_timeout`
	`core.storage_buckets_address`
	`core.syslog_socket`
	`core.trust_ca_certificates`
	`images.auto_update_cached`
	`images.auto_update_interval`
	`images.compression_algorithm`
	`images.default_architecture`
	`images.remote_cache_expiry`
	`instances.lxcfs.per_instance`
	`instances.nic.host_name`
	`instances.placement.scriptlet`
	`logging.NAME.lifecycle.projects`
	`logging.NAME.lifecycle.types`
	`logging.NAME.logging.level`
	`logging.NAME.target.address`
	`logging.NAME.target.ca_cert`
	`logging.NAME.target.facility`
	`logging.NAME.target.instance`
	`logging.NAME.target.labels`
	`logging.NAME.target.password`
	`logging.NAME.target.retry`
	`logging.NAME.target.type`
	`logging.NAME.target.username`
	`logging.NAME.types`
	`network.ovn.ca_cert`
	`network.ovn.client_cert`
	`network.ovn.client_key`
	`network.ovn.integration_bridge`
	`network.ovn.northbound_connection`
	`network.ovs.connection`
	`oidc.audience`
	`oidc.claim`
	`oidc.client.id`
	`oidc.issuer`
	`oidc.scopes`
	`openfga.api.token`
	`openfga.api.url`
	`openfga.store.id`
	`storage.backups_volume`
	`storage.images_volume`
	`storage.linstor.ca_cert`
	`storage.linstor.client_cert`
	`storage.linstor.client_key`
	`storage.linstor.controller_connection`
	`storage.linstor.satellite.name`

	tpm
	`path`
	`pathrm`