Expose `cgroup_writable` in API

[z0rc]

What I'd like:

I'm looking into setting cgroup_writeable = true in containerd settings, per https://docs.gitlab.com/administration/gitaly/kubernetes/#enable-cgroup_writable-field-in-containerd.

This is recent feature of containerd 2.1.0, see containerd/containerd#11131 and containerd/containerd#12227.

---

Citation from bottlerocket-os/bottlerocket-core-kit#621

would likely needed to be added as a setting if we were interested.

...so, here is the interest.

Any alternatives you've considered:

kubernetes/enhancements#5475 potenaltially doable in Kubernetes container spec in the future.

[koooosh]

Hey @z0rc , thanks for cutting this issue and sharing your use-case! We will consider this new setting as a feature request.

[bilby91]

@koooosh We also need this. Would you be open to a PR ?

[vigh-m]

Hi @bilby91!
Do feel free to send us a PR for this. You'd need to update the bottlerocket-settings-sdk along with the bottlerocket-core-kit to plumb the setting through.
Thanks

[bilby91]

@vigh-m I just submitted both prs. First time contributing to the ecosystem. Let me know if I missed something please.

bottlerocket-os/bottlerocket-settings-sdk#128
bottlerocket-os/bottlerocket-core-kit#890