# gVisor (runsc) options. A rootless node has no cpuset cgroup controller to hand to the sandbox;
# without this runsc refuses to start one.
[runsc_config]
  ignore-cgroups = "true"