.. |_| unicode:: 0xA0 
   :trim:

.. _Virtuozzo Configuration Files:

Virtuozzo Configuration Files
-----------------------------

The table below lists the configuration files available in Virtuozzo 7. Most files are located in the ``/etc`` directory on a hardware node. If a configuration file is stored in a place other than the hardware node, its exact location is specified.

+----------------------------------------------------------+--------------------------------------------------------------------------------------+
| Name                                                     | Description                                                                          |
+==========================================================+======================================================================================+
| ``/etc/vz/vz.conf``                                      | Global configuration file. This file keeps system-wide settings, such as the default |
|                                                          | location of templates and global network settings.                                   |
+----------------------------------------------------------+--------------------------------------------------------------------------------------+
| ``/etc/vz/conf/<CT_name>.conf``                          | Private configuration file of a container with the name ``<CT_name>``. This file     |
|                                                          | keeps container-specific settings: resource management parameters, the location of   |
|                                                          | its private area, IP address, and so on.                                             |
+----------------------------------------------------------+--------------------------------------------------------------------------------------+
| ``/etc/vz/conf/ve-<name>.conf-sample``                   | Sample files containing a number of default container configurations. Some           |
|                                                          | pre-created samples file are shipped with Virtuozzo (e.g., ``basic`` and             |
|                                                          | ``confixx``), but you can also create your own samples to meet your demands.         |
+----------------------------------------------------------+--------------------------------------------------------------------------------------+
| ``/usr/libexec/libvzctl/dists/\                          | Linux distribution configuration files. These files define what scripts should be    |
| <distribution_name>.conf``                               | run when you perform specific operations with containers (e.g., when you set a new   |
|                                                          | IP address for a container). The scripts differ from Virtuozzo action scripts and    |
|                                                          | depend on the Linux version a particular container is running.                       |
+----------------------------------------------------------+--------------------------------------------------------------------------------------+
| ``/etc/vz/pfcache.conf``                                 | Configuration file used by the ``pfcache`` utility to manage memory and IOPS         |
|                                                          | deduplication.                                                                       |
+----------------------------------------------------------+--------------------------------------------------------------------------------------+
| ``/etc/vz/oom-groups.conf``                              | OOM killer configuration file with task badness adjustments.                         |
+----------------------------------------------------------+--------------------------------------------------------------------------------------+
| ``/etc/vz/conf/networks_classes``                        | Configuration file defining the network classes for traffic shaping and bandwidth    |
|                                                          | management.                                                                          |
+----------------------------------------------------------+--------------------------------------------------------------------------------------+
| ``/etc/sysctl.conf``                                     | Kernel parameters. Virtuozzo adjusts a number of kernel ``sysctl`` parameters and    |
|                                                          | modifies the default ``/etc/sysctl.conf`` file.                                      |
+----------------------------------------------------------+--------------------------------------------------------------------------------------+
| ``/etc/vztt/vztt.conf``                                  | Configuration file used by the ``vzpkg`` utility to manage OS and application EZ     |
|                                                          | templates.                                                                           |
+----------------------------------------------------------+--------------------------------------------------------------------------------------+
| ``/etc/vz/tools-update.conf``                            | Configuration file used by the ``vz-guest-tools-updater`` script to manage automatic |
|                                                          | Virtuozzo tools updating.                                                            |
+----------------------------------------------------------+--------------------------------------------------------------------------------------+

.. _Global Virtuozzo Configuration File:

Global Virtuozzo Configuration File
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Virtuozzo keeps its system wide configuration parameters in the ``/etc/vz/vz.conf`` configuration file. This file is in shell format. Keep in mind that Virtuozzo scripts source this file - thus, shell commands in this file will cause system to execute them under root account. Parameters in this file are presented in the form ``PARAMETER="value"``. Logically all the parameters belong to the following groups: global parameters, logging, disk quotas, template, network traffic, and container default parameters. Below is the description of all the parameters defined in this version of Virtuozzo.

+------------------------------------------------+------------------------------------------------------------------------+------------------------+
| Name                                           | Description                                                            | Default Value          |
+================================================+========================================================================+========================+
| ``VIRTUOZZO``                                  | This can be either ``yes`` or ``no``. Virtuozzo System V startup       | ``yes``                |
|                                                | script checks this parameter. If set to ``no``, then Virtuozzo modules |                        |
|                                                | are not loaded. You might set it to "no" if you want to perform system |                        |
|                                                | maintenance and do not want to bring up all containers on the server.  |                        |
+------------------------------------------------+------------------------------------------------------------------------+------------------------+
| ``HTTP_PROXY``                                 | Specifies either the hostname or the IP address of the HTTP proxy      | n/a                    |
|                                                | server. After setting this parameter and in case you use an HTTP proxy |                        |
|                                                | server for handling all HTTP requests, the Virtuozzo utilities         |                        |
|                                                | communicating with the outer world through HTTP will use this server   |                        |
|                                                | for managing all your HTTP messages.                                   |                        |
+------------------------------------------------+------------------------------------------------------------------------+------------------------+
| ``ACTIONLOGDIR``                               | This is the directory where ``prlctl`` keeps a log of its actions in   | ``/vz/actionlog``      |
|                                                | the format suitable for Virtuozzo statistics daemon ``hwcoll``.        |                        |
+------------------------------------------------+------------------------------------------------------------------------+------------------------+
| ``LOCKDIR``                                    | Actions on a container should be serialized, since two simultaneous    | ``/vz/lock``           |
|                                                | operations on the same container may break its consistency. Virtuozzo  |                        |
|                                                | keeps lock files in this directory in order to serialize access to one |                        |
|                                                | container.                                                             |                        |
+------------------------------------------------+------------------------------------------------------------------------+------------------------+
| ``VEFSTYPE``                                   | File system to use when caching OS templates:                          | ``ext4``               |
|                                                |                                                                        |                        |
|                                                | -  ext4,                                                               |                        |
|                                                |                                                                        |                        |
|                                                | -  simfs.                                                              |                        |
+------------------------------------------------+------------------------------------------------------------------------+------------------------+
| ``IPV6``                                       | Defines whether the IPv6 support is enabled on the hardware node.      | ``yes``                |
+------------------------------------------------+------------------------------------------------------------------------+------------------------+
| ``GOLDEN_IMAGE``                               | Enables (``yes``) or disables (``no``) embedding application templates | ``yes``                |
|                                                | into OS EZ template cache prior to creating containers based on this   |                        |
|                                                | cache.                                                                 |                        |
+------------------------------------------------+------------------------------------------------------------------------+------------------------+
| ``PFCACHE``                                    | Path to the memory and IOPS deduplication cache with common container  | ``/vz/pfcache``        |
|                                                | files.                                                                 |                        |
+------------------------------------------------+------------------------------------------------------------------------+------------------------+
| ``PFCACHE_IMAGE``                              | Path to the private area of the memory and IOPS deduplication cache.   | ``/vz/pfcache.hdd``    |
+------------------------------------------------+------------------------------------------------------------------------+------------------------+
| ``PFCACHE_IMAGE_SIZE``                         | Image size (in 1KB blocks) of the memory and IOPS deduplication cache. | ``10485760``           |
+------------------------------------------------+------------------------------------------------------------------------+------------------------+
| ``PFCACHE_INCLUDES``                           | Directories for which memory and IOPS deduplication is enabled by      | ``bin lib lib64 opt    |
|                                                | default.                                                               | sbin usr``             |
+------------------------------------------------+------------------------------------------------------------------------+------------------------+
| ``VZ_TOOLS_BCID``                              | Enables limits for the backup, restore, and migration operations.      | |_|                    |
+------------------------------------------------+------------------------------------------------------------------------+------------------------+
| ``VZ_TOOLS_IOLIMIT``                           | Sets the disk I/O limit for the backup and migration operations,       | |_|                    |
|                                                | in bytes per second. Not set by default.                               |                        |
+------------------------------------------------+------------------------------------------------------------------------+------------------------+
| ``ON_VE_FSERROR``                              | The action to be performed on a container if a filesystem error        | n/a                    |
|                                                | occurs. Currenly, the only available action is forced container stop.  |                        |
|                                                | To enable, set the parameter to ``stop``.                              |                        |
+------------------------------------------------+------------------------------------------------------------------------+------------------------+

**Logging parameters**

+------------------------------+--------------------------------------------------------------------------------------+------------------------------+
| Name                         | Description                                                                          | Default Value                |
+==============================+======================================================================================+==============================+
| ``LOGGING``                  | This parameter defines whether ``prlctl`` should log its actions.                    | ``yes``                      |
+------------------------------+--------------------------------------------------------------------------------------+------------------------------+
| ``LOGFILE``                  | File where ``libvzctl`` logs the actions of programs linked to this library.         | ``/var/log/vzctl.log``       |
+------------------------------+--------------------------------------------------------------------------------------+------------------------------+
| ``LOG_LEVEL``                | Logging verbosity, from 0 to 10 (higher is more verbose).                            | ``0``                        |
+------------------------------+--------------------------------------------------------------------------------------+------------------------------+

**Disk quota parameters**

+------------------------------+--------------------------------------------------------------------------------------+------------------------------+
| Name                         | Description                                                                          | Default Value                |
+==============================+======================================================================================+==============================+
| ``DISK_QUOTA``               | Enables or disables disk quotas for containers. If set to ``no`` then disk space     | ``yes``                      |
|                              | accounting will be disabled.                                                         |                              |
+------------------------------+--------------------------------------------------------------------------------------+------------------------------+

**Network traffic parameters**

+------------------------------+--------------------------------------------------------------------------------------+------------------------------+
| Name                         | Description                                                                          | Default Value                |
+==============================+======================================================================================+==============================+
| ``TRAFFIC_SHAPING``          | Traffic shaping allows you to limit the bandwidth consumed by containers for         | ``no``                       |
|                              | outgoing traffic. If it is set to "yes", then limitations will be turned on. If you  |                              |
|                              | want to use this feature, ``TRAFFIC_ACCOUNTING`` should be set to ``yes`` as well.   |                              |
+------------------------------+--------------------------------------------------------------------------------------+------------------------------+
| ``BANDWIDTH``                | This is the list of network interfaces on which we want to shape the traffic and     | ``enp0s5:100000``            |
|                              | their speed in the form of "dev:rate". The rate is measured in Kbps. If you want to  |                              |
|                              | shape traffic on more than one interface, set this parameter to                      |                              |
|                              | ``dev1:rate1 dev2:rate2``. For example, for two 100 Mbps Ethernet cards, set it      |                              |
|                              | to ``enp0s5:100000 enp0s6:100000``.                                                  |                              |
+------------------------------+--------------------------------------------------------------------------------------+------------------------------+
| ``TOTALRATE``                | This parameter sets the size of the bandwidth pool for all containers. It is the     | ``*:1:4000``                 |
|                              | upper limit for the bandwidth available to all your containers and is specified in   |                              |
|                              | the form of "dev:class:rate". The rate is measured in Kbps. Containers can consume   |                              |
|                              | bandwidth up to this limit in addition to the limit specified by the ``RATE``        |                              |
|                              | parameter. Default value corresponds to 4 Mbps limit for the Class 1 containers.     |                              |
+------------------------------+--------------------------------------------------------------------------------------+------------------------------+
| ``RATE``                     | This parameter is the default bandwidth guaranteed to a container for outgoing       | ``*:1:8``                    |
|                              | traffic if the container configuration file does not explicitly specify a different  |                              |
|                              | value. This value is in the same format as ``TOTALRATE`` ("dev:class:rate"). The     |                              |
|                              | rate is measured in Kbps. Note that 8 Kbps, offered by the default configuration,    |                              |
|                              | is the guarantee and the container cannot consume less than this value and more      |                              |
|                              | than the sum of this value and ``TOTALRATE``.                                        |                              |
+------------------------------+--------------------------------------------------------------------------------------+------------------------------+
| ``RATEMPU``                  | This optional parameter (where ``MPU`` stands for "minimum packet unit") limits the  | ``*:1:1000``                 |
|                              | packet rate by making packets smaller than ``MPU`` in size consume HTB tokens. With  |                              |
|                              | it, small packets can be accounted as larger ones and limited by ``TOTALRATE`` and   |                              |
|                              | ``RATE`` parameters. Approximately, the maximum packets per second rate can be       |                              |
|                              | calculated as ``TOTALRATE`` / ``RATEMPU``. The parameter is specified in the form    |                              |
|                              | "dev:class:MPU per packet". If the part "MPU per packet" is omitted, the default     |                              |
|                              | value of 1000 bytes is used.                                                         |                              |
+------------------------------+--------------------------------------------------------------------------------------+------------------------------+

**Template parameters**

+------------------------------+--------------------------------------------------------------------------------------+------------------------------+
| Name                         | Description                                                                          | Default Value                |
+==============================+======================================================================================+==============================+
| ``TEMPLATE``                 | This is the directory where to find templates. It is not recommended to redefine     | ``/vz/template``             |
|                              | this option since all Virtuozzo templates use the default directory.                 |                              |
+------------------------------+--------------------------------------------------------------------------------------+------------------------------+

**Container default parameters**

+------------------------------------------+--------------------------------------------------------------+------------------------------------------+
| Name                                     | Description                                                  | Default Value                            |
+==========================================+==============================================================+==========================================+
| ``VE_ROOT``                              | The mount point for container’s ``root``. Must contain the   | ``/vz/root/$VEID``                       |
|                                          | literal string ``$VEID`` that will be substituted with the   |                                          |
|                                          | actual container UUID.                                       |                                          |
+------------------------------------------+--------------------------------------------------------------+------------------------------------------+
| ``VE_PRIVATE``                           | The directory where all the files and directories specific   | ``/vz/private/$VEID``                    |
|                                          | to the container are stored. Must contain the literal string |                                          |
|                                          | ``$VEID`` that will be substituted with the actual container |                                          |
|                                          | UUID.                                                        |                                          |
+------------------------------------------+--------------------------------------------------------------+------------------------------------------+
| ``CONFIGFILE``                           | The default configuration file sample to be used for the     | ``basic``                                |
|                                          | container creation; it may be overridden with the            |                                          |
|                                          | ``--config`` option of the ``prlctl create`` command.        |                                          |
+------------------------------------------+--------------------------------------------------------------+------------------------------------------+
| ``DEF_OSTEMPLATE``                       | The default OS template to be used for the container         | ``centos-7``                             |
|                                          | creation.                                                    |                                          |
+------------------------------------------+--------------------------------------------------------------+------------------------------------------+
| ``VE_ENVIRONMENT``                       | Additional environment variables to be passed to the         | |_|                                      |
|                                          | container ``init`` process. Should be provided as any number |                                          |
|                                          | of ``<name>=<value>`` pairs separated by spaces.             |                                          |
+------------------------------------------+--------------------------------------------------------------+------------------------------------------+

.. _Container Configuration File:

Container Configuration File
~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Each container has its own configuration file, which is stored in the ``/etc/vz/conf`` directory and has a name like ``<CT_name>.conf``. This file has the same format as the global configuration file. The settings specified in this file can be subdivided into the following categories:

-  miscellaneous,

-  resource management parameters,

-  networking.

.. _Miscellaneous Parameters:

Miscellaneous Parameters
^^^^^^^^^^^^^^^^^^^^^^^^

The table below list the miscellaneous parameters you can set in the configuration file of a container:

+-------------------------------------+-----------------------------------------------------------------------------------------------------------+
| Name                                | Description                                                                                               |
+=====================================+===========================================================================================================+
| ``VERSION``                         | Specifies the Virtuozzo version the configuration file applies to. ``2`` relates to Virtuozzo version 4   |
|                                     | and later.                                                                                                |
+-------------------------------------+-----------------------------------------------------------------------------------------------------------+
| ``ONBOOT``                          | Specifies whether the container should be started automatically on system startup. Virtuozzo              |
|                                     | automatically starts all containers that have this parameter set to "yes" upon startup.                   |
+-------------------------------------+-----------------------------------------------------------------------------------------------------------+
| ``ALLOWREBOOT``                     | Specifies whether the container may be restarted with the ``reboot`` command run from inside. If omitted  |
|                                     | or set to ``yes``, restarting is allowed.                                                                 |
+-------------------------------------+-----------------------------------------------------------------------------------------------------------+
| ``OSTEMPLATE``                      | The name of the OS template that was used for creating the container. You do not have to change this      |
|                                     | parameter; ``prlctl`` will set it for you upon calling the ``prlctl create`` command (or using the        |
|                                     | defaults from the global configuration file). The ``.`` symbol before the OS template name, if specified, |
|                                     | indicates that this is an EZ OS template.                                                                 |
+-------------------------------------+-----------------------------------------------------------------------------------------------------------+
| ``TEMPLATES``                       | In a configuration file of an existing container, this parameter lists application templates installed    |
|                                     | with the ``prlctl create`` or ``vzpkg install`` commands. In this case you should not modify it, because  |
|                                     | it is used by template management utilities to track installation history. This parameter is omitted if   |
|                                     | no templates have been installed to the container.                                                        |
+-------------------------------------+-----------------------------------------------------------------------------------------------------------+
| ``VE_ROOT``                         | Overrides the ``VE_ROOT`` parameter from the global configuration file.                                   |
+-------------------------------------+-----------------------------------------------------------------------------------------------------------+
| ``VE_PRIVATE``                      | Overrides the ``VE_PRIVATE`` parameter from the global configuration file.                                |
+-------------------------------------+-----------------------------------------------------------------------------------------------------------+
| ``VE_ENVIRONMENT``                  | Overrides the ``VE_ENVIRONMENT`` parameter from the global configuration file.                            |
+-------------------------------------+-----------------------------------------------------------------------------------------------------------+
| ``TECHNOLOGIES``                    | Determines a set of technologies which should be provided by the Virtuozzo kernel for container           |
|                                     | operation. Currently, this parameter can contain the information about the following technologies:        |
|                                     |                                                                                                           |
|                                     | -  The system architecture of the container (``x86``, ``x86_64``, or ``i64``).                            |
|                                     |                                                                                                           |
|                                     | -  Whether the container is based on the OS template supporting the Native POSIX Thread Library (NPTL).   |
|                                     |    In this case, the ``nptl`` entry is specified as the value of this parameter.                          |
|                                     |                                                                                                           |
|                                     | -  Whether the OS EZ template the container is based on requires the ``sysfs`` filesystem support (e.g.,  |
|                                     |    the OS EZ template for SUSE Linux Enterprise 10).                                                      |
+-------------------------------------+-----------------------------------------------------------------------------------------------------------+
| ``DISABLED``                        | If set to ``yes``, disables the container making it impossible to start the container once it was         |
|                                     | stopped. You can start the disabled container after setting the value of this parameter to ``no``.        |
+-------------------------------------+-----------------------------------------------------------------------------------------------------------+
| ``DESCRIPTION``                     | Sets the description for the container.                                                                   |
|                                     |                                                                                                           |
|                                     | .. note:: You are allowed to use only symbols in the *A-z* and *0-9* ranges in your descriptions.         |
+-------------------------------------+-----------------------------------------------------------------------------------------------------------+
| ``NAME``                            | Container name that can be used to refer to said container in commands. Names must be alphanumeric and    |
|                                     | may contain the characters ``\``, ``-``, ``_``. Names with white spaces must be enclosed in quotation     |
|                                     | marks.                                                                                                    |
+-------------------------------------+-----------------------------------------------------------------------------------------------------------+
| ``ORIGIN_SAMPLE``                   | The configuration sample the container was based on when created.                                         |
+-------------------------------------+-----------------------------------------------------------------------------------------------------------+
| ``CONFIG_CUSTOMIZED``               | Indicates whether any of the container configuration parameters have been modified as regards its         |
|                                     | original configuration sample. If this parameter is omitted, its value is considered as ``no``.           |
+-------------------------------------+-----------------------------------------------------------------------------------------------------------+
| ``UUID``                            | The container unique identifier. This identifier is used by certain Virtuozzo utilities during their      |
|                                     | execution.                                                                                                |
+-------------------------------------+-----------------------------------------------------------------------------------------------------------+

.. _Resource Management Parameters:

Resource Management Parameters
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

All resource management parameters can be subdivided into the CPU, disk, system, and VSwap categories for your convenience. Any parameter can be set with the ``prlctl set`` command and the corresponding option name (in the lower case, e.g., ``--cpuunits`` for ``CPUUNITS``, etc.). See :ref:`Managing Containers` for more details. The **Typical value** column, if present, specifies a range of reasonable parameter values for different applications, from light to huge heavy loaded containers. If the barrier and limit fields are in use, ranges for both thresholds are given.

**CPU Parameters**

+------------------------------------------------+------------------------------------------------------------------------+------------------------+
| Parameter                                      | Description                                                            | Typical value          |
+================================================+========================================================================+========================+
| ``CPUUNITS``                                   | CPU weight. This is a positive integer number that defines how much    | ``250...1000``         |
|                                                | CPU time the container can get as compared to the other virtual        |                        |
|                                                | machines and containers running on the server. The larger the number,  |                        |
|                                                | the more CPU time the container can receive. Possible values range     |                        |
|                                                | from 8 to 500000. If this parameter is not set, the default value of   |                        |
|                                                | 1000 is used.                                                          |                        |
+------------------------------------------------+------------------------------------------------------------------------+------------------------+
| ``CPULIMIT``, ``CPULIMIT_MHZ``                 | CPU limit, in per cent (``CPULIMIT``) or megahertz                     | |_|                    |
|                                                | (``CPULIMIT_MHZ``), the container is not allowed to exceed. The        |                        |
|                                                | parameter is not set for newly created containers; so they can consume |                        |
|                                                | all free CPU power of the server. When setting this parameter in per   |                        |
|                                                | cent, keep in mind that one CPU core makes up 100%. So if the server   |                        |
|                                                | has 4 CPU cores, the total CPU power will equal 400%.                  |                        |
+------------------------------------------------+------------------------------------------------------------------------+------------------------+
| ``CPUS``                                       | Number of CPU cores defining the CPU limit for a container. The limit  | |_|                    |
|                                                | is calculated by multiplying the power of one CPU core by the number   |                        |
|                                                | of the specified CPU cores. This option also defines the number of     |                        |
|                                                | CPUs shown to users from inside a container. This parameter is not set |                        |
|                                                | for newly created containers; so they can consume all free CPU power   |                        |
|                                                | of the server.                                                         |                        |
+------------------------------------------------+------------------------------------------------------------------------+------------------------+
| ``CPUMASK``                                    | The CPU affinity mask defining which CPUs on the Node can be used to   | |_|                    |
|                                                | handle the processes running in the container. The CPU mask can be     |                        |
|                                                | specified as both separate CPU index numbers (1,2,3) and CPU ranges    |                        |
|                                                | (2-4,5-7).                                                             |                        |
+------------------------------------------------+------------------------------------------------------------------------+------------------------+
| ``NODEMASK``                                   | The NUMA node mask defining a NUMA node to bind the container to. Once | |_|                    |
|                                                | you set the mask, the processes running in the container will be       |                        |
|                                                | executed only on the CPUs that belong to the specified NUMA node.      |                        |
+------------------------------------------------+------------------------------------------------------------------------+------------------------+

**Disk Parameters**

+------------------------------------------------+------------------------------------------------------------------------+------------------------+
| Parameter                                      | Description                                                            | Typical value          |
+================================================+========================================================================+========================+
| ``DISKSPACE``                                  | Total size of disk space that can be consumed by the container, in 1   |                        |
|                                                | KB blocks.                                                             |                        |
+------------------------------------------------+------------------------------------------------------------------------+------------------------+
| ``QUOTAUGIDLIMIT``                             | This parameter enables (if set to a value other than ``0``) or         | ``0...N``              |
|                                                | disables (if set to ``0``) per-user and per-group quotas for further   |                        |
|                                                | management with the standard Linux ``quota`` utility. Enabling         |                        |
|                                                | per-user and per-group quotas for a container requires restarting the  |                        |
|                                                | container.                                                             |                        |
+------------------------------------------------+------------------------------------------------------------------------+------------------------+
| ``IOPRIO``                                     | The container priority for disk I/O operations. The higher the         | ``0-7``                |
|                                                | priority, the more time the container has for writing to and reading   |                        |
|                                                | from the disk. The default container priority is 4.                    |                        |
+------------------------------------------------+------------------------------------------------------------------------+------------------------+
| ``IOPSLIMIT``                                  | The maximum number of disk input and output operations per second a    | |_|                    |
|                                                | container is allowed to perform. By default, any newly created         |                        |
|                                                | container does not have the IOPS limit set and can perform so many     |                        |
|                                                | disk I/O operations per second as necessary.                           |                        |
+------------------------------------------------+------------------------------------------------------------------------+------------------------+
| ``IOLIMIT``                                    | The bandwidth a container is allowed to use for its disk input and     | |_|                    |
|                                                | output (I/O) operations. By default, the limit is set in megabytes per |                        |
|                                                | second. However, you can use the following suffixes to use other       |                        |
|                                                | measurement units:                                                     |                        |
|                                                |                                                                        |                        |
|                                                | -  ``G`` - sets the limit in gigabytes per second.                     |                        |
|                                                |                                                                        |                        |
|                                                | -  ``K`` - sets the limit in kilobytes per second.                     |                        |
|                                                |                                                                        |                        |
|                                                | -  ``B`` - sets the limit in bytes per second.                         |                        |
|                                                |                                                                        |                        |
|                                                | In the current version of Virtuozzo, the maximum I/O bandwidth limit   |                        |
|                                                | you can set for a container is 2 GB per second.                        |                        |
|                                                |                                                                        |                        |
|                                                | The default I/O bandwidth limit for all newly created containers is    |                        |
|                                                | set to 0, which means that no limits are applied to any containers.    |                        |
+------------------------------------------------+------------------------------------------------------------------------+------------------------+

**System Parameters**

+------------------------+------------------------------------------------------------------------+------------------------------------------------+
| Parameter              | Description                                                            | Typical value                                  |
+========================+========================================================================+================================================+
| ``NUMPROC``            | Number of processes and threads allowed. Upon hitting this limit,      | ``40...400``                                   |
|                        | container will not be able to start a new process or thread.           |                                                |
+------------------------+------------------------------------------------------------------------+------------------------------------------------+
| ``AVNUMPROC``          | Number of processes expected to run in the container on average. This  | ``0...NUMPROC``                                |
|                        | is informational parameter used to ensure configuration correctness.   |                                                |
+------------------------+------------------------------------------------------------------------+------------------------------------------------+
| ``VMGUARPAGES``        | Memory allocation guarantee, in pages. Applications are guaranteed to  | ``1725...107520``                              |
|                        | be able to allocate memory while the amount of memory accounted as     |                                                |
|                        | ``privvmpages`` does not exceed the configured barrier of the          |                                                |
|                        | ``vmguarpages`` parameter. Above the barrier, memory allocation is not |                                                |
|                        | guaranteed and may fail in case of overall memory shortage.            |                                                |
+------------------------+------------------------------------------------------------------------+------------------------------------------------+
| ``LOCKEDPAGES``        | Memory not allowed to be swapped out (locked with the ``mlock()``      | ``4...4096``                                   |
|                        | system call), in pages (one page is 4 KB).                             |                                                |
+------------------------+------------------------------------------------------------------------+------------------------------------------------+
| ``SHMPAGES``           | Total size of shared memory (including IPC, shared anonymous mappings  | ``512...16384``                                |
|                        | and ``tmpfs`` objects), allocated by processes of a particular         |                                                |
|                        | container, in pages.                                                   |                                                |
+------------------------+------------------------------------------------------------------------+------------------------------------------------+
| ``PRIVVMPAGES``        | Size of private (or potentially private) memory, allocated by an       |                                                |
|                        | application. Memory that is always shared among different applications |                                                |
|                        | is not included in this resource parameter.                            |                                                |
+------------------------+------------------------------------------------------------------------+------------------------------------------------+
| ``NUMFILE``            | Number of files opened by all container processes.                     | ``512...8192``                                 |
+------------------------+------------------------------------------------------------------------+------------------------------------------------+
| ``NUMFLOCK``           | Number of file locks created by all container processes.               | ``50...200-60...220``                          |
+------------------------+------------------------------------------------------------------------+------------------------------------------------+
| ``NUMPTY``             | Number of pseudo-terminals. For example, the ``ssh`` session,          | ``4...64``                                     |
|                        | ``screen``, the ``xterm`` application consumes pseudo-terminal         |                                                |
|                        | resources.                                                             |                                                |
+------------------------+------------------------------------------------------------------------+------------------------------------------------+
| ``NUMSIGINFO``         | Number of ``siginfo`` structures (essentially this parameter limits    | ``256...512``                                  |
|                        | the size of signal delivery queue).                                    |                                                |
+------------------------+------------------------------------------------------------------------+------------------------------------------------+
| ``PHYSPAGES``          | Total size of RAM used by processes. This parameter is used for        | ``Not limited``                                |
|                        | accounting purposes only. It shows the usage of RAM by the container.  |                                                |
|                        | For memory pages used by several different containers (mappings of     |                                                |
|                        | shared libraries, for example), only a fraction of a page is charged   |                                                |
|                        | to each container. The sum of the ``physpages`` for all containers     |                                                |
|                        | corresponds to the total number of pages used in the system by all     |                                                |
|                        | accounted users.                                                       |                                                |
+------------------------+------------------------------------------------------------------------+------------------------------------------------+
| ``NUMIPTENT``          | The number of IP packet filtering entries.                             | ``12...128``                                   |
+------------------------+------------------------------------------------------------------------+------------------------------------------------+

**VSwap Parameters**

+------------------------------+--------------------------------------------------------------------------------------+------------------------------+
| Parameter                    | Description                                                                          | Typical value                |
+==============================+======================================================================================+==============================+
| ``PHYSPAGES``                | Amount of RAM that can be used by the processes of a container, in 4KB pages.        | |_|                          |
+------------------------------+--------------------------------------------------------------------------------------+------------------------------+
| ``SWAP``                     | Amount of swap space that can be used by the container for swapping out memory once  | |_|                          |
|                              | the RAM is exceeded, in 4KB pages.                                                   |                              |
+------------------------------+--------------------------------------------------------------------------------------+------------------------------+
| ``VM_OVERCOMMIT``            | Memory overcommit factor that defines the memory allocation limit for a container.   | ``Not limited``              |
|                              | The limit is calculated as ``(PHYSPAGES + SWAP) * factor``.                          |                              |
+------------------------------+--------------------------------------------------------------------------------------+------------------------------+

.. _Networking Parameters:

Networking Parameters
^^^^^^^^^^^^^^^^^^^^^

Network-related parameters allow you to set bandwidth management parameters, hostname and IP addresses that a container can use, and other parameters.

+-------------------------------------+-----------------------------------------------------------------------------------------------------------+
| Name                                | Description                                                                                               |
+=====================================+===========================================================================================================+
| ``HOSTNAME``                        | If this parameter is specified, then ``prlctl`` will set the hostname to its value upon the next          |
|                                     | container start. This parameter can be omitted. In this case, the container administrator should          |
|                                     | configure the hostname manually.                                                                          |
+-------------------------------------+-----------------------------------------------------------------------------------------------------------+
| ``IP_ADDRESS``                      | This is the list of IP addresses, which can be used on container network interfaces. This list is an      |
|                                     | argument of the container start call and it is impossible to assign IP address from inside the container  |
|                                     | if the address is not on the list. Any IP address assigned from within the container will be visible only |
|                                     | within the container.                                                                                     |
+-------------------------------------+-----------------------------------------------------------------------------------------------------------+
| ``NAMESERVER``                      | The IP address of the DNS server the container is supposed to use. More than one server can be specified  |
|                                     | in the space-separated format.                                                                            |
+-------------------------------------+-----------------------------------------------------------------------------------------------------------+
| ``SEARCHDOMAIN``                    | DNS search domains for the container. More than one domain can be specified.                              |
+-------------------------------------+-----------------------------------------------------------------------------------------------------------+
| ``NETDEV``                          | The names of physical network adapters that have been moved from the server to the given container.       |
+-------------------------------------+-----------------------------------------------------------------------------------------------------------+
| ``NETFILTER``                       | Indicates which ``iptables`` modules are allowed for the container. If some of the allowed modules are    |
|                                     | not loaded on the destination Hardware Node after migration or restoration from backup, they will be      |
|                                     | automatically loaded on the migrated or restored container start. The following modes are available:      |
|                                     |                                                                                                           |
|                                     | -  ``disabled``: none.                                                                                    |
|                                     |                                                                                                           |
|                                     | -  ``stateless``: (default) all modules except ``conntrack`` and NAT-related.                             |
|                                     |                                                                                                           |
|                                     | -  ``stateful``: all modules except NAT-related.                                                          |
|                                     |                                                                                                           |
|                                     | -  ``full``: all modules.                                                                                 |
+-------------------------------------+-----------------------------------------------------------------------------------------------------------+
| ``NETIF``                           | Specifies a number of parameters for the virtual network adapters existing inside the container. These    |
|                                     | parameters include:                                                                                       |
|                                     |                                                                                                           |
|                                     | -  ``ifname``: the name of the ``veth`` virtual Ethernet interface inside the container.                  |
|                                     |                                                                                                           |
|                                     | -  ``mac``: the MAC address assigned to the ``veth`` virtual Ethernet interface inside the container.     |
|                                     |                                                                                                           |
|                                     | -  ``host_mac``: the MAC address assigned to the ``veth`` virtual Ethernet interface on the server.       |
|                                     |                                                                                                           |
|                                     | -  ``network``: the name of the virtual network where the ``veth`` virtual network adapter is included.   |
|                                     |                                                                                                           |
|                                     | -  ``ip``: the IP address(es) assigned to the ``veth`` virtual network adapter.                           |
+-------------------------------------+-----------------------------------------------------------------------------------------------------------+
| ``RATE``                            | If traffic shaping is turned on, then this parameter specifies bandwidth guarantee, in Kbps, for the      |
|                                     | container. The parameter should be set in the form of ``dev:class:rate``.                                 |
+-------------------------------------+-----------------------------------------------------------------------------------------------------------+
| ``RATEBOUND``                       | If set to ``yes``, the bandwidth guarantee is also the limit for the container, and the container cannot  |
|                                     | borrow the bandwidth from the ``TOTALRATE`` bandwidth pool.                                               |
+-------------------------------------+-----------------------------------------------------------------------------------------------------------+

.. _Linux Distribution Configuration Files:

Linux Distribution Configuration Files
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Some Virtuozzo tools (e.g., ``prlctl``) need to run special scripts inside a container to perform certain operations on it. However, carrying out one and the same operation inside containers running different Linux versions may require execution of different actions. This may be caused by the fact that different Linux distributions store files in different locations, use different commands to complete one and the same task, and so on. To distinguish between containers running different Linux versions and to determine what scripts should be executed while performing the relevant container-related operations, Virtuozzo uses special distribution configuration files located in the ``/usr/libexec/libvzctl/dists`` directory on the server.

There are a number of distribution configuration files shipped with Virtuozzo by default (``centos.conf``, ``fedora-core.conf``, ``gentoo.conf``, etc.). To view all configuration files available on your Virtuozzo, you can go to the ``/usr/libexec/libvzctl/dists`` directory and issue the ``ls`` command. The distribution configuration files will be displayed in the form of ``<Linux_distribution>-<version>.conf`` where ``<Linux_distribution>`` and ``<version>`` denote the name of the Linux distribution and its version, respectively (e.g., ``centos-7.conf``).

Any distribution configuration file consists of a number of entries in the form of ``<parameter_name>=<script_name>`` where ``<parameter_name>`` denotes the name of the parameter defining the operation when the script in the right part of the entry is to be executed and ``<script_name>`` is the name of the script to be run on performing the operation defined by the parameter in the left part of the entry. In the current version of Virtuozzo, the following parameters are used to define what scripts should be executed for the corresponding Linux version a container is running:

-  ``ADD_IP``: the script specified as the value of this parameter has the default name of ``<distribution_name>-add_ip.sh`` and is used to configure the network settings during the container startup and the IP address(es) assignment. The script is launched inside the container on executing the following commands:

   ::

       # prlctl start <CT_name>
       # prlctl set <CT_name> --ipadd <IP_address>
       # prlctl set <CT_name> --ipadd <IP_address> --ipdel all

-  ``DEL_IP``: the script specified as the value of this parameter has the default name of ``<distribution_name>-del_ip.sh`` and is used to delete an existing IP address from the container. The script is launched inside the container on executing the following commands:

   ::

       # prlctl set <CT_name> --ipdel <IP_address>
       # prlctl set <CT_name> --ipdel all

-  ``SET_HOSTNAME``: the script specified as the value of this parameter has the default name of ``<distribution_name>-set_hostname.sh`` and is used to configure the hostname of the container. The script is launched inside the container on executing the following command:

   ::

       # prlctl set <CT_name> --hostname <name>

-  ``SET_DNS``: the script specified as the value of this parameter has the default name of ``<distribution_name>-set_dns.sh`` and is used to configure DNS parameters in the ``/etc/resolv.conf`` file. The script is launched inside the container on executing the following command:

   ::

       # prlctl set <CT_name> --searchdomain <domain> --nameserver <IP_address>

-  ``SET_USERPASS``: the script specified as the value of this parameter has the default name of ``<distribution_name>-set_userpass.sh`` and is used to add a new user or change the current password. The script is launched inside the container on executing the following command:

   ::

       # prlctl set <CT_name> --userpasswd <user>:<passwd>

-  ``SET_UGID_QUOTA``: the script specified as the value of this parameter has the default name of ``<distribution_name>-set_ugid_quota.sh`` and is used to set up per-user/group quota. The script is launched inside the container on executing the following command:

   ::

       # prlctl set <CT_name> --quotaugidlimit <num>

-  ``POST_CREATE``: the script specified as the value of this parameter has the default name of ``<distribution_name>-postcreate.sh`` and is used to perform certain tasks (e.g., to modify the ``crontab`` files) after the container creation. This script is launched on the server on executing the following command:

   ::

       # prlctl create <CT_name>

-  ``POST_MIGRATE``: the script specified as the value of this parameter has the default name of ``<distribution_name>-post_migrate.sh`` and is used to perform certain operations on the container where the physical server has been successfully migrated. This script is launched inside the container on executing the following command:

   ::

       # vzp2v [] --ctid <CT_name>

The scripts specified in distribution configuration files are located in the ``/usr/libexec/libvzctl/dists/scripts`` directory on the server and executed on performing the aforementioned operations on the containers. After an operation has been initiated, the ``prlctl`` or ``vzp2v`` utility turns to the corresponding container configuration file, looks for the value of the ``DISTRIBUTION`` variable or, if the latter is not present, of the ``OSTEMPLATE`` variable in this file, and defines on their basis what Linux version the given container is running. After that, ``prlctl`` reads the corresponding configuration file for the determined Linux version from the ``/usr/libexec/libvzctl/dists/`` directory and executes the scripts specified in this file.

    .. note:: If no distribution is specified as the value of the ``DISTRIBUTION`` and ``OSTEMPLATE`` variables in the container configuration file or no configuration file for the given Linux version was found in the ``/usr/libexec/libvzctl/dists`` directory, the ``default`` file from this directory is used.

.. _Memory and IOPS Deduplication Configuration File:

Memory and IOPS Deduplication Configuration File
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Contained in the ``/etc/vz/pfcache.conf`` file, memory and IOPS deduplication parameters allow you to tailor cache behavior and performance to your needs.

+------------------------------------------------+------------------------------------------------------------------------+------------------------+
| Name                                           | Description                                                            | Default Value          |
+================================================+========================================================================+========================+
| ``COUNT``                                      | The minimum number of file copies required for the file to become      | ``2``                  |
|                                                | cacheable. Copies may exist in the same container or different         |                        |
|                                                | containers.                                                            |                        |
+------------------------------------------------+------------------------------------------------------------------------+------------------------+
| ``MINSIZE``                                    | Minimal cacheable file size, bytes. Files smaller than this value will | ``0``                  |
|                                                | not be cached.                                                         |                        |
+------------------------------------------------+------------------------------------------------------------------------+------------------------+
| ``MAXSIZE``                                    | Maximal cacheable file size, bytes. Files larger than this value will  | ``2147483648``         |
|                                                | not be cached.                                                         |                        |
+------------------------------------------------+------------------------------------------------------------------------+------------------------+
| ``TIMEOUT``                                    | Time between caching attempts, seconds.                                | ``5``                  |
+------------------------------------------------+------------------------------------------------------------------------+------------------------+
| ``PFCACHE_IOLIMIT``                            | Memory and IOPS deduplication cache IO bandwidth limit, bps. Unlimited | |_|                    |
|                                                | by default.                                                            |                        |
+------------------------------------------------+------------------------------------------------------------------------+------------------------+
| ``PFCACHE_IOPSLIMIT``                          | Memory and IOPS deduplication cache IOPS limit. Unlimited by default.  | |_|                    |
+------------------------------------------------+------------------------------------------------------------------------+------------------------+
| ``LOGLEVEL``                                   | Logging verbosity. Messages are logged in the system log file          | ``1``                  |
|                                                | ``/var/log/messages``.                                                 |                        |
+------------------------------------------------+------------------------------------------------------------------------+------------------------+
| ``PAGEMIN``                                    | The total number of memory pages used in containers:                   | ``1``                  |
|                                                |                                                                        |                        |
|                                                | -  ``0`` - Cache even files without memory pages.                      |                        |
|                                                |                                                                        |                        |
|                                                | -  ``1`` - Cache only files in use.                                    |                        |
|                                                |                                                                        |                        |
|                                                | -  ``N`` - Cache only when the total number of memory pages in         |                        |
|                                                |    containers reaches N.                                               |                        |
+------------------------------------------------+------------------------------------------------------------------------+------------------------+
| ``PURGEAHEAD``                                 | Extra cache space to free up in addition to the requested space. In    | ``20%``                |
|                                                | per cent of the requested space. Used with the                         |                        |
|                                                | ``pfcache purge --size`` command.                                      |                        |
+------------------------------------------------+------------------------------------------------------------------------+------------------------+

.. _Network Classes Definition File:

Network Classes Definition File
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

In Virtuozzo, both traffic accounting and bandwidth management are based on network classes. The network classes’ definition file (``/etc/vz/conf/networks_classes``) describes network classes that Virtuozzo recognizes. Currently, there can be up to 15 classes defined.

The lines in this file have the following format:

::

    <class_ID> <IP_address>/<prefix_length>

where ``<class_ID>`` defines the network class identifier, ``<IP_address>`` defines the starting IP address, and ``<prefix_length>`` defines the subnet mask. In pair ``<IP_address>`` and ``<prefix_length>`` define the range of IP addresses for this class. There may be several lines for each class. Classes should be defined after Class 1 and represent exceptions from the "matching-everything" rule of Class 1. Class 0 has a special meaning and defines the IP ranges for which no accounting is done (this server container addresses).

The definition of class 1 is required; any class except class 1 can be omitted. However, it is recommended to define class 0 correctly as it will improve performance. For example:

::

    # HW node VPS's networks
    0 10.10.10.0/24
    0 10.10.15.0/24
    # all IP("local" traffic)
    1 0.0.0.0/0
    # class 2 - "foreign" traffic
    #2 10.0.0.0/8
    #2 11.0.0.0/8
    # inside "foreign" network there
    # is a hole with "local" traffic
    #1 10.10.16.0/24

.. _Kernel Parameters:

Kernel Parameters
~~~~~~~~~~~~~~~~~

There is a number of kernel limits that should be set for the Virtuozzo software to work correctly. Virtuozzo is shipped with a tuned ``/etc/sysctl.conf`` file. Understanding what parameters were changed is essential for running the required number of containers. Below is the contents of the ``/etc/sysctl.conf`` file as shipped with Virtuozzo:

::

    # Controls IP packet forwarding
    net.ipv4.ip_forward = 1
    # Controls source route verification
    net.ipv4.conf.default.rp_filter = 1
    # Do not accept source routing
    net.ipv4.conf.default.accept_source_route = 0
    # Controls the System Request debugging functionality of the kernel
    kernel.sysrq = 1
    # Controls whether core dumps will append the PID to the core filename.
    # Useful for debugging multi-threaded applications.
    kernel.core_uses_pid = 1
    # Controls the use of TCP syncookies
    net.ipv4.tcp_syncookies = 1
    # Disable netfilter on bridges.
    net.bridge.bridge-nf-call-ip6tables = 1
    net.bridge.bridge-nf-call-iptables = 1
    net.bridge.bridge-nf-call-arptables = 0
    # Controls the default maxmimum size of a mesage queue
    kernel.msgmnb = 65536
    # Controls the maximum size of a message, in bytes
    kernel.msgmax = 65536
    # Controls the maximum shared segment size, in bytes
    kernel.shmmax = 68719476736
    # Controls the maximum number of shared memory segments, in pages
    kernel.shmall = 4294967296
    net.ipv6.conf.all.proxy_ndp=1
    net.ipv4.conf.default.proxy_arp = 0
    net.ipv4.conf.all.rp_filter = 0
    fs.super-max = 2560
    fs.file-max = 262144
    kernel.fairsched-nodes-max = 1538
    net.ipv4.neigh.default.gc_thresh2 = 2048
    net.ipv4.neigh.default.gc_thresh3 = 4096
    net.ipv4.conf.default.send_redirects = 0
    net.ipv4.conf.all.send_redirects = 0
    net.ipv6.neigh.default.gc_thresh2 = 2048
    net.ipv6.neigh.default.gc_thresh3 = 4096
    net.nf_conntrack_max = 500000
    fs.aio-max-nr = 1048576

Notice that some parameters of the kernel configuration depends on the maximum number of containers you plan to run. In the default configuration file, these numbers were calculated under the assumption the maximum container number is 512. If you plan to run another number of containers, it is recommended to recalculate ``net.ipv4.neigh.default.gc_thresh2`` and ``net.ipv4.neigh.default.gc_thresh3`` parameters as three per container plus 128…512. Keep the second parameter twice as great as the first one.

To apply the changes issue the following command:

::

    # sysctl -p

Besides, it makes sense to set ``net.ipv4.tcp_use_sg`` to ``0``, since the corresponding "Scatter/gather IO" feature is not supported by the ``venet`` device, used in Virtuozzo networking.

It is also worth mentioning that normally you should have forwarding turned on since the server forwards packets destined to or originated from containers.

.. _Offline Management Configuration Files:

Offline Management Configuration Files
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

The offline management configuration files located in the ``/etc/vzredirect.d`` directory define various modes of container offline management by container administrators. One configuration file describes one offline management mode. In the current Virtuozzo version, two files are accessible: ``vzpp.conf`` and ``vzpp-plesk.conf``. The first file defines the container offline management by means of Power Panel, and the second one by means of the same Power Panel with an integrated Plesk control panel.

There are two parameters in each of the files.

::

    <parameter_name>=<parameter_value>

+------------------------------+--------------------------------------------------------------------------------------+------------------------------+
| Name                         | Description                                                                          | Example                      |
+==============================+======================================================================================+==============================+
| ``PORT``                     | This port must be entered in the address line of an Internet browser after the       | ``PORT=8443``                |
|                              | container IP address when managing the container by means of Power Panel or the      |                              |
|                              | Plesk control panel.                                                                 |                              |
+------------------------------+--------------------------------------------------------------------------------------+------------------------------+
| ``DST_VEID``                 | The UUID of the container where the requests coming to the specified port will be    | ``DST_VEID=1``               |
|                              | redirected.                                                                          |                              |
+------------------------------+--------------------------------------------------------------------------------------+------------------------------+

.. _vztt Configuration File:

vztt Configuration File
~~~~~~~~~~~~~~~~~~~~~~~

This file (``/etc/vztt/vztt.conf``) is the configuration file used by the ``vzpkg`` utility when managing OS and application EZ templates.

::

    <parameter_name>=<parameter_value>

+-------------------------------------+-----------------------------------------------------------------------------------------------------------+
| Name                                | Description                                                                                               |
+=====================================+===========================================================================================================+
| ``VZTT_PROXY``                      | The IP address or hostname of the caching proxy server to be used by the ``vzpkg`` tool for managing OS   |
|                                     | and application EZ templates.                                                                             |
+-------------------------------------+-----------------------------------------------------------------------------------------------------------+
| ``HTTP_PROXY``                      | The IP address or hostname of the HTPP proxy server address, if you use this server.                      |
+-------------------------------------+-----------------------------------------------------------------------------------------------------------+
| ``HTTP_PROXY_USER``                 | The user name used by the HTTP proxy server for your authentication.                                      |
+-------------------------------------+-----------------------------------------------------------------------------------------------------------+
| ``HTTP_PROXY_PASSWORD``             | The password of the user specified in the ``HTPP_PROXY_USER`` parameter and used for your authentication  |
|                                     | by the HTTP proxy server.                                                                                 |
+-------------------------------------+-----------------------------------------------------------------------------------------------------------+
| ``METADATA_EXPIRE``                 | Defines the period of time, in seconds, in the course of which the downloaded software packages in the    |
|                                     | ``vzpkg`` cache are regarded as *not obsolete*. During this time, the ``vzpkg`` utility searches for the  |
|                                     | EZ template packages in the local cache only (without checking the remote repositories set for EZ         |
|                                     | templates). By default, this period is set to 86400 seconds (24 hours).                                   |
+-------------------------------------+-----------------------------------------------------------------------------------------------------------+
| ``EXCLUDE``                         | List of comma-separated packages that are not to be installed or updated during the ``vzpkg`` execution.  |
|                                     | The package names should correspond to the name of real packages in the repository and can contain file   |
|                                     | globs (e.g., ``*`` and ``?``).                                                                            |
+-------------------------------------+-----------------------------------------------------------------------------------------------------------+

.. _pcompact.conf:

pcompact.conf
~~~~~~~~~~~~~

The ``/etc/vz/pcompact.conf`` file is used by the ``pcompact`` utility to compact virtual disks in containers.

::

    <parameter_name>=<parameter_value>

+-------------------------------------+-----------------------------------------------------------------------------------------------------------+
| Name                                | Description                                                                                               |
+=====================================+===========================================================================================================+
| ``THRESHOLD=<number>``              | Compact the virtual disk if unused space on it exceeds **THRESHOLD** percent of the ploop size.           |
+-------------------------------------+-----------------------------------------------------------------------------------------------------------+
| ``DELTA=<number>``                  | Reduce disk space to be compacted by **DELTA** percent of the ploop size.                                 |
+-------------------------------------+-----------------------------------------------------------------------------------------------------------+
| ``DEFRAG=<yes|no>``                 | Perform or skip file system defragmentation.                                                              |
+-------------------------------------+-----------------------------------------------------------------------------------------------------------+

.. _tools-update.conf:

tools-update.conf
~~~~~~~~~~~~~~~~~

The file ``/etc/vz/tools-update.conf`` is used by the ``vz-guest-tools-updater`` script to manage automatic Virtuozzo tools updating.

::

    "<parameter_name>": <parameter_value>

+-------------------------------------+-----------------------------------------------------------------------------------------------------------+
| Name                                | Description                                                                                               |
+=====================================+===========================================================================================================+
| ``"MaxVMs": <number>``              | Sets the maximum number of virtual machines whose Virtuozzo tools can be updated simultaneously.          |
+-------------------------------------+-----------------------------------------------------------------------------------------------------------+
