In case runc uses systemd to set cgroup parameters for a container (i.e.
--systemd-cgroup CLI flag is set), systemd creates a scope (a.k.a.
transient unit) for the container, usually named like runc-$ID.scope.
The systemd properties of this unit (shown by systemctl show runc-$ID.scope
after the container is started) can be modified by adding annotations
to container's runtime spec (config.json). For example:
"annotations": {
"org.systemd.property.TimeoutStopUSec": "uint64 123456789",
"org.systemd.property.CollectMode":"'inactive-or-failed'"
},The above will set the following properties:
TimeoutStopSecto 2 minutes and 3 seconds;CollectModeto "inactive-or-failed".
The values must be in the gvariant format (for details, see gvariant documentation).
To find out which type systemd expects for a particular parameter, please consult systemd sources.