LXD

kernel-hardening | boolean

Default: True

Restrict access to sensitive files/dirs (/proc/sched_debug, /sys/kernel/slab)

lxd-init-network | boolean

Default: True

Enable/disable the initialization of the default network

lxd-init-storage | boolean

Default: True

Enable/disable the initialization of the default storage pool

lxd-listen-bgp | boolean

Enable/disable the BGP endpoint

lxd-listen-dns | boolean

Enable/disable the authoritative DNS endpoint

lxd-listen-https | boolean

Enable/disable the remote API (HTTPS)

lxd-listen-metrics | boolean

Enable/disable the metrics endpoint

lxd-preseed | string

Pass a YAML configuration to `lxd init` on initial start

mode | string

Default: standalone

Operate in `standalone` or `cluster` mode

snap-channel | string

Default: latest/stable

The snap store channel for LXD to use

snap-config-ceph-builtin | boolean

Default: True

Use snap-specific ceph configuration

snap-config-ceph-external | boolean

Use the system's ceph tools (ignores snap-config-ceph-builtin)

snap-config-criu-enable | boolean

Enable experimental live-migration support

snap-config-daemon-debug | boolean

Increase logging to debug level

snap-config-daemon-group | string

Set group of users that can interact with LXD

snap-config-daemon-syslog | boolean

Send LXD log events to syslog

snap-config-lvm-external | boolean

Use the system's LVM tools

snap-config-lxcfs-cfs | boolean

Consider CPU shares for CPU usage

snap-config-lxcfs-debug | boolean

Increase logging to debug level

snap-config-lxcfs-loadavg | boolean

Start tracking per-container load average

snap-config-lxcfs-pidfd | boolean

Start per-container process tracking

snap-config-openvswitch-builtin | boolean

Run a snap-specific OVS daemon

snap-config-openvswitch-external | boolean

Use the system's OVS tools (ignores snap-config-openvswitch-builtin)

snap-config-ovn-builtin | boolean

Default: True

Use snap-specific OVN configuration

snap-config-shiftfs-enable | string

Enable shiftfs support

snap-config-ui-enable | boolean

Enable the experimental web interface

sysctl-tuning | boolean

Default: True

Apply production sysctl tuning