# /etc/systemd/system/containerd@.service
[Unit]
Description=containerd (instance %i)
After=network-online.target local-fs.target
Wants=network-online.target

[Service]
Type=notify
ExecStart=/usr/bin/containerd \
          --root /var/lib/containerd-%i \
          --state /run/containerd-%i \
          --address /run/containerd-%i/containerd.sock
Delegate=yes
KillMode=process
Restart=always
RestartSec=5
LimitNOFILE=infinity
LimitNPROC=infinity
LimitCORE=infinity
TasksMax=infinity
OOMScoreAdjust=-999

[Install]
WantedBy=multi-user.target