EVE Runtime Configuration Properties

June 29, 2026 · View on GitHub

The single source of truth for these runtime configuration properties is NewConfigItemSpecMap() in pkg/pillar/types/global.go. This document mirrors the key names, types, defaults, and ranges defined there.

NameTypeDefaultMin ValueMax ValueDescription
app.allow.vncbooleanfalse--allow access to EVE's VNC ports from external IPs
app.boot.orderstring""--Set device-wide default boot order for VMs. Supported values: "" (default UEFI behavior), "usb" (prioritize USB devices), "nousb" (remove USB devices from boot order). Can be overridden per-VM via Controller API (VmConfig.boot_order) or LPS (/api/v1/appbootinfo). See VM-BOOT-ORDER.md for details.
app.fml.resolutionstring""--Set system-wide value of forced resolution for applications running in FML mode, it can be one of predefined FmlResolution* values.
timer.config.intervalinteger in seconds60 (1 minute)586400 (1 day)how frequently device gets config (needs a reboot to take effect)
timer.cert.intervalinteger in seconds86400 (1 day)60 (1 minute)4294967295 (max uint32)how frequently device checks for new controller certificates
timer.metric.intervalinteger in seconds60 (1 minute)53600 (1 hour)how frequently device reports metrics
timer.hardwarehealth.intervalinteger in seconds43200 (12 hours)21600 (6 hours)4294967295 (max uint32)how frequently device reports hardware health information (ECC, SMART) to controller
timer.deviceinfo.intervalinteger in seconds600 (10 minutes)304294967295 (max uint32)how frequently device is forced to report device info to controller even though nothing changed (needs a reboot to take effect)
timer.metric.diskscan.intervalinteger in seconds300 (5 minutes)53600 (1 hour)how frequently device should scan the disk for metrics
timer.location.cloud.intervalinteger in seconds3600 (1 hour)300 (5 minutes)4294967295 (max uint32)how frequently device reports geographic location information to controller
timer.location.app.intervalinteger in seconds2053600 (1 hour)how frequently device reports geographic location information to applications (to local profile server and to other apps via metadata server)
timer.ntpsources.intervalinteger in seconds600 (10 minutes)60 (1 minute)4294967295 (max uint32)how frequently device forcibly reports information about NTP sources to which EVE has established a connection for the NTP synchronization. Requests are also sent to the controller if the list of NTP peers or NTP peer fields, such as mode, state, have changed. (doesn't need a reboot to take effect)
timer.send.timeouttimer in seconds120 (2 minutes)03600 (1 hour)time for each http/send
timer.dial.timeouttimer in seconds1003600 (1 hour)maximum time allowed to establish connection
timer.reboot.no.networkinteger in seconds604800 (7 days)120 (2 minutes)4294967295 (max uint32)reboot after no cloud connectivity
timer.update.fallback.no.networkinteger in seconds300 (5 minutes)60 (1 minute)4294967295 (max uint32)fallback after no cloud connectivity
timer.test.baseimage.updateinteger in seconds600 (10 minutes)303600 (1 hour)commit to update
timer.gc.vdiskinteger in seconds3600 (1 hour)60 (1 minute)4294967295 (max uint32)garbage collect unused instance virtual disk
timer.defer.content.deleteinteger in seconds0086400 (1 day)if set, keep content trees around for reuse after they have been deleted
timer.download.retryinteger in seconds600 (10 minutes)60 (1 minute)4294967295 (max uint32)retry a failed download
timer.download.stalledinteger in seconds600 (10 minutes)204294967295 (max uint32)cancel a stalled download
timer.boot.retryinteger in seconds600 (10 minutes)104294967295 (max uint32)retry a failed domain boot
timer.port.georedointeger in seconds3600 (1 hour)60 (1 minute)4294967295 (max uint32)redo IP geolocation
timer.port.georetryinteger in seconds600 (10 minutes)54294967295 (max uint32)retry geolocation after failure
timer.port.testdurationinteger in seconds30103600 (1 hour)wait for DHCP to give address
timer.port.testintervaltimer in seconds300 (5 minutes)300 (5 minutes)3600 (1 hour)retest the current port config
timer.port.timeouttimer in seconds1503600 (1 hour)time for each http/send
timer.port.testbetterintervaltimer in seconds600 (10 minutes)04294967295retry the highest-priority port configuration when the current port configuration is a lower-priority fallback
network.fallback.any.eth"enabled" or "disabled"disabled--if no connectivity try any Ethernet, WiFi, or LTE with DHCP client (enabled forcefully during onboarding if no network config)
network.download.max.cost0-25500255max port cost for download to avoid e.g., LTE ports
blob.download.max.retries1-105110max download retries when image verification fails.
debug.disable.dhcp.all-ones.netmaskbooleanfalse--deprecated; retained only to avoid reporting errors for older deployments where this option is still configured
debug.enable.usbbooleantrue--allow USB e.g. keyboards on device (controller by default overrides to false)
debug.enable.vgabooleantrue--allow VGA console on device (controller by default overrides to false)
debug.enable.sshauthorized ssh key""--allow ssh to EVE; empty string disables SSH
debug.enable.consolebooleantrue--allow console access to EVE, reboot required to disable (controller by default overrides to false)
debug.enable.vnc.shim.vmbooleanfalse--allow VNC access to the container application shim VM (reboot required to disable)
datastore.http.security.allowinsecureauthbooleanfalse--allow sending authorization header over unencrypted http connection
storage.dom0.disk.minusage.percentinteger percent202080min. percent of persist partition reserved for dom0
storage.dom0.disk.maxusagebytesinteger bytes21474836481048576004294967295 (max uint32)max bytes of persist partition that can be used by dom0
storage.zfs.reserved.percentinteger percent20199min. percent of persist partition reserved for zfs performance
storage.longhorn.disk.reserved.gigabytesinteger GB201048576per-disk storage reserved by Longhorn on the local node; overrides Longhorn's default 25% reservation. 0 sets storageReserved to 0 bytes (no reservation). 1048576 disables EVE's override, leaving Longhorn's current value in place
storage.longhorn.snapshot.croncron string0 0 * * *--cron schedule for Longhorn recurring snapshots; empty string disables. Snapshots bound delta rebuilds after node power loss to writes since the last snapshot. Default daily at midnight UTC. Standard 5-field cron syntax. EVE-k only.
storage.longhorn.node-drain-policystringblock-for-eviction-if-contains-last-replica--Longhorn cluster-wide node-drain-policy setting. Controls whether a node drain is permitted when the node holds Longhorn replicas. Valid values: block-for-eviction, block-for-eviction-if-contains-last-replica, allow-if-replica-is-stopped, always-allow. EVE-k only.
storage.apps.ignore.disk.checkbooleanfalse--Ignore disk usage check for Apps. Allows apps to create images bigger than available disk
timer.appcontainer.stats.intervalinteger in seconds300 (5 minutes)14294967295 (max uint32)collect application container stats
timer.vault.ready.cutoffinteger in seconds300 (5 minutes)60 (1 minute)4294967295 (max uint32)reboot after inaccessible vault
maintenance.mode"enabled" or "disabled"none--don't run applications etc
airgap.mode"enabled" or "disabled"none--Enable when the device is expected to operate without connectivity to the main controller and is instead managed locally via the LOC (Local Operator Console)
force.fallback.counterinteger004294967295 (max uint32)forces fallback to other image if counter is changed
newlog.allow.fastuploadbooleanfalse--allow faster upload gzip logfiles to controller
memory.apps.ignore.checkbooleanfalse--Ignore memory usage check for Apps
memory.eve.limit.bytesinteger bytesbase.ClampToUint32(eveMemoryLimitInBytes)base.ClampToUint32(eveMemoryLimitInBytes)4294967295 (max uint32)deprecated; use memory.eve.limit.MiB instead. This legacy value is limited to 4GB and still has higher priority for backward compatibility
memory.eve.limit.MiBinteger MiBeveMemoryLimitInMiBeveMemoryLimitInMiB4294967295 (max uint32)memory limit reserved for EVE in MiB, rounded up from the detected byte limit
memory.vmm.limit.MiBinteger001073741824 (1 PiB)Manually override how much overhead is allocated for each running VMM
gogc.memory.limit.bytesinteger004294967295 (max uint32)Golang runtime soft memory limit, see details in API doc ["https://pkg.go.dev/runtime/debug#SetMemoryLimit"]
gogc.percentinteger1000500Golang runtime garbage collector target percentage, see details in API doc ["https://pkg.go.dev/runtime/debug#SetGCPercent"]
gogc.forced.interval.secondsinteger in seconds1001000minimum interval of forced execution of the GC. Forced GC is disabled when interval is set to 0
gogc.forced.growth.memory.MiBinteger in Mbytes50101024minimum allocated memory in MiB required for the next GC execution
gogc.forced.growth.memory.percentinteger205300minimum allocated memory percentage from last reclaim required for the next GC execution
newlog.gzipfiles.ondisk.maxmegabytesinteger in Mbytes2048104294967295 (max uint32)the quota for keepig newlog gzip files on device
process.cloud-init.multipartbooleanfalse--help VMs which do not handle mime multi-part themselves
netdump.enablebooleantrue--enable publishing of network diagnostics (as tgz archives to /persist/netdump)
netdump.topic.preonboard.intervalinteger in seconds3600 (1 hour)60 (1 minute)4294967295 (max uint32)how frequently (in seconds) can be netdumps of the same topic published while device is not yet onboarded
netdump.topic.postonboard.intervalinteger in seconds86400 (1 day)60 (1 minute)4294967295 (max uint32)how frequently (in seconds) can be netdumps of the same topic published after device has been onboarded
netdump.topic.maxcountinteger1014294967295 (max uint32)maximum number of netdumps that can be published for each topic. The oldest netdump is unpublished should a new netdump exceed the limit.
netdump.downloader.with.pcapbooleanfalse--include packet captures inside netdumps for download requests. However, even if enabled, TCP segments carrying non-empty payload (i.e. content which is being downloaded) are excluded and the overall PCAP size is limited to 64MB.
netdump.downloader.http.with.fieldvaluebooleanfalse--include HTTP header field values in captured network traces for download requests (beware: may contain secrets, such as datastore credentials).
network.switch.enable.arpsnoopbooleantrue--enable ARP Snooping on switch Network Instances
wwan.query.visible.providersboolfalse--enable to periodically (once per hour) query the set of visible cellular service providers and publish them under WirelessStatus (for every modem)
network.local.legacy.mac.addressboolfalse--enables legacy MAC address generation for local network instances for those EVE nodes where changing MAC addresses in applications will lead to incorrect network configuration
goroutine.leak.detection.thresholdinteger500014294967295 (max uint32)Amount of goroutines, reaching which will trigger leak detection regardless of growth rate.
goroutine.leak.detection.check.interval.minutesinteger (minutes)114294967295 (max uint32)Interval in minutes between the measurements of the goroutine count.
goroutine.leak.detection.check.window.minutesinteger (minutes)10104294967295 (max uint32)Interval in minutes for which the leak analysis is performed. It should contain at least 10 measurements, so no less than 10 × goroutine.leak.detection.check.interval.minutes.
goroutine.leak.detection.keep.stats.hoursinteger (hours)2414294967295 (max uint32)Amount of hours to keep the stats for leak detection. We keep more stats than the check window to be able to react to settings with a bigger check window via configuration.
goroutine.leak.detection.cooldown.minutesinteger (minutes)514294967295 (max uint32)Cooldown period in minutes after the leak detection is triggered. During this period, no stack traces are collected; only warning messages are logged.
kubernetes.drain.timeoutinteger2414294967295 (max uint32)hours to allow kubernetes to drain a node
drain.skip.k8sapinotreachable.timeoutinteger in seconds300 (5 minutes)14294967295 (max uint32)how long the drain request handler retries the Kubernetes API before declaring the node unavailable and continuing device operations
kubernetes.drain.allnodes.config.multipleinteger211000multiplier applied to timer.config.interval to derive the cluster-wide simultaneous-drain detection window; increase if nodes fetch config at widely staggered intervals
k3s.config.overridestring""--Base64-encoded K3s config override. Config merge behavior follows K3s config file rules.
k3s.versionstring""--User override for K3s version; takes priority over the EVE-OS baseos-defined K3s version.
kubernetes.vmi.deschedule.eventsstring""--Comma-separated list of events that trigger VMI descheduling. Currently only boot is supported. When empty (default), no event-driven descheduling is performed.
memory-monitor.enabledbooleanfalse--Enable external memory monitoring and memory pressure events handling
internal-memory-monitor.store.enabledbooleantrue--Enable Internal Memory Monitor (IMM) data collection and CSV storage. When enabled, the watcher service collects memory metrics (Go heap and RSS) at regular intervals and stores them in /persist/memory-monitor/output/memory_usage.csv for analysis and debugging of potential memory leaks
internal-memory-monitor.analyze.enabledbooleantrue--Enable Internal Memory Monitor (IMM) leak detection analysis. When enabled, IMM analyzes collected memory metrics using statistical methods (Theil-Sen slope, Pearson/Spearman correlation) to detect memory growth patterns and compute leak scores. Requires internal-memory-monitor.store.enabled to be true
log.dedup.window.sizeinteger004294967295 (max uint32)The size of the log deduplicator's sliding window (in number of messages). See logging docs for details. If the window size is set to 0 (default), no deduplication is performed.
log.count.filenamesstring""--Comma-separated list of log's filenames to be counted and logged once instead of logging them every time. Example /my-pkg/main.go:123,/other-pkg/code.go:42. Empty string "" doesn't filter anything out, however a single comma "," will filter out all entries that don't have a filename field set (e.g. logs not coming from components written in Golang). See logging docs for details.
log.filter.filenamesstring""--Comma-separated list of log's filenames to be filtered out. Example /my-pkg/main.go:123,/other-pkg/code.go:42. Empty string "" doesn't filter anything out, however a single comma "," will filter out all entries that don't have a filename field set (e.g. logs not coming from components written in Golang). See logging docs for details.
vector.enabledbooleantrue--Enable Vector service for advanced log filtering and transformations.
vector.configstring""--Full base64-encoded configuration file for Vector in YAML format. See the default config for examples. Please only change the transforms and don't touch the sources and sinks.
msrv.prometheus.metrics.rpsinteger114294967295 (max uint32)The maximum number of requests per second (RPS) for the Prometheus metrics endpoint.
msrv.prometheus.metrics.burstinteger1014294967295 (max uint32)The maximum burst size for the Prometheus metrics endpoint.
msrv.prometheus.metrics.idletimeout.secondsinteger240 (4 minutes)14294967295 (max uint32)The idle timeout in seconds for the Prometheus metrics endpoint. If the connection is idle for this duration, the limit is reset.
edgeview.authen.publickeystring""--Specifies SSH public keys for Edgeview client command authentication. The user must provide the path to the SSH private key in the client script, and the device verifies the command using one of the configured public keys. Separate multiple public keys with newline characters.
wwan.modem.recovery.watchdogbooleanfalse--Enable watchdog for cellular modems. If a modem firmware crashes and fails to recover, the device will automatically reboot.
wwan.modem.recovery.reload.driversbooleanfalse--If a modem firmware crashes and fails to recover, EVE will attempt to reload the MBIM/QMI/MHI drivers as a recovery step. This occurs before the watchdog mechanism is triggered (if enabled).
wwan.modem.recovery.restart.modemmanagerbooleanfalse--If a modem firmware crash occurs and ModemManager fails to properly recognize or manage the restarted modem, EVE will attempt to restart ModemManager as a recovery step. This occurs before the watchdog mechanism is triggered (if enabled) and can be combined with driver reload recovery mechanism.
diag.probe.remote.http.endpointstringwww.google.com--Remote endpoint hostname or IP address queried over HTTP to assess the state of network connectivity whenever the controller is not reachable. Used only for diagnostics (no functional impact). Set to an empty string to disable.
diag.probe.remote.https.endpointstringwww.google.com--Remote endpoint hostname queried over HTTPS to assess the state of network connectivity whenever the controller is not reachable. IP addresses are not accepted. Used only for diagnostics (no functional impact). Set to an empty string to disable.
app.enable.tcp.mss.clampingbooltrue--Configuration property that enables EVE to automatically adjust (clamp) the TCP MSS on forwarded application traffic to match the path MTU, preventing fragmentation and connectivity issues on lower-MTU links.
scep.retry.intervaltimer in seconds300 (5 minutes)60 (1 minute)3600 (1 hour)Interval between retry attempts for certificates that previously failed to enroll/renew or returned PENDING from the SCEP server.
pnac.dhcp.reacquire.max.retriesinteger408Maximum number of DHCP reacquire retries after a PNAC (802.1X) port authentication state change. When the network switch reassigns the port to a different access VLAN, EVE retries with exponential backoff (2s, 4s, 8s, ...) until the IP subnet changes or the retry limit is reached. Setting this value to 0 disables DHCP reacquire.
dhcp.enable.vendorclassidbooltrue--Enables sending the DHCP Vendor Class Identifier (Option 60) to identify the device as EVE OS. This allows networks or DHCP servers to apply policies such as VLAN assignment or granting access to the EVE controller. Some badly configured DHCP servers may reject unknown vendor class IDs. Setting this to false disables sending the vendor class ID.
igpu.gopstring""--Filename (basename only) of a proprietary Intel GOP Option ROM placed under /persist/gop/. Used for Intel iGPU passthrough to provide a pre-OS UEFI framebuffer. Empty (default) or a missing file falls back to the bundled open-source igd.rom (IgdAssignmentDxe only — OS display works but no pre-OS framebuffer). Path separators, .., and absolute paths are rejected to prevent directory traversal. See INTEL-IGPU-PASSTHROUGH.md for details.
debug.enable.efibooleanfalse--When true, attaches an isa-debugcon device at I/O port 0x402 to each KVM guest, writing OVMF/EDK2 DEBUG() output to /run/hypervisor/kvm/<domain>/efi-debug.log. Only produces useful output with a TARGET=DEBUG OVMF build (default is TARGET=RELEASE which compiles DEBUG() macros out). Primary diagnostic for iGPU passthrough GOP failures.

Local Profile Server (LPS) intervals

NameTypeDefaultMin ValueMax ValueDescription
timer.lps.profile.intervalinteger in seconds60 (1 minute)33600 (1 hour)how frequently EVE fetches the local profile from the Local Profile Server (LPS)
timer.lps.radio.intervalinteger in seconds533600 (1 hour)how frequently EVE POSTs radio status to LPS and fetches radio silence configuration
timer.lps.appinfo.intervalinteger in seconds60 (1 minute)33600 (1 hour)how frequently EVE POSTs application info to LPS and fetches application commands
timer.lps.devinfo.intervalinteger in seconds60 (1 minute)33600 (1 hour)how frequently EVE POSTs device info to LPS and fetches device commands
timer.lps.network.intervalinteger in seconds60 (1 minute)33600 (1 hour)how frequently EVE POSTs network configuration to LPS and fetches locally-made network configuration
timer.lps.appbootinfo.intervalinteger in seconds60 (1 minute)33600 (1 hour)how frequently EVE POSTs application boot info to LPS and fetches boot configuration

Note: when an LPS endpoint responds with HTTP 404 (the endpoint is not implemented by the deployed LPS application), EVE overrides the configured interval with a longer backoff — 1 hour for most endpoints, 5 minutes for the radio endpoint — to avoid unnecessary traffic. The configured interval resumes automatically if the LPS address changes or if LPS starts implementing the endpoint.

Log levels

Log level can be set for four different components of EVE: EVE microservices, syslog, kernel, and TUI monitor application. Logs for TUI monitor are not sent to the controller and only available locally on the device. The log levels set this way are used to control the verbosity of the logs produced by the corresponding components. All logs produced this way will be saved locally in /persist/newlog/keepSentQueue/ directory and will be subject to rotation based on the max total size of stored logs.

Due to implementation specifics, there are two different sets of log levels that can be set: logrus and syslog levels. Logrus levels are used by the EVE microservices, while syslog levels are used by syslog and kernel.

Additionally all log levels can be set to "none" to disable logging for the corresponding component or to "all" to enable all log levels.

Furthermore, the "remote" log levels control which subset of the generated logs are sent to the controller. A corresponding "remote" log level can be set for each of the three components: EVE microservices, syslog, and kernel.

NameTypeDefaultDescription
debug.default.loglevelstringinfodefault level of logs produced by EVE microservices. Can be overwritten by agent.agentname.debug.loglevel. Uses logrus log levels as described here ["https://pkg.go.dev/github.com/sirupsen/logrus"]: panic, fatal, error, warning, info, debug and trace.
debug.default.remote.loglevelstringinfodefault level of logs sent by EVE microservices to the controller. Can be overwritten by agent.agentname.debug.remote.loglevel. Uses logrus log levels as described here ["https://pkg.go.dev/github.com/sirupsen/logrus"]: panic, fatal, error, warning, info, debug and trace.
debug.syslog.loglevelstringinfolevel of the produced syslog messages. System default loglevel string representation should be used as described here ["https://man7.org/linux/man-pages/man3/syslog.3.html"]: emerg, alert, crit, err, warning, notice, info, debug.
debug.syslog.remote.loglevelstringinfolevel of the syslog messages sent to the controller. System default loglevel string representation should be used as described here ["https://man7.org/linux/man-pages/man3/syslog.3.html"]: emerg, alert, crit, err, warning, notice, info, debug.
debug.kernel.loglevelstringinfolevel of the produced kernel log messages. System default loglevel string representation should be used as described here ["https://man7.org/linux/man-pages/man3/syslog.3.html"]: emerg, alert, crit, err, warning, notice, info, debug.
debug.kernel.remote.loglevelstringinfolevel of the kernel log messages sent to the controller. System default loglevel string representation should be used as described here ["https://man7.org/linux/man-pages/man3/syslog.3.html"]: emerg, alert, crit, err, warning, notice, info, debug.
debug.tui.loglevelstringinfoSet log level for EVE Text UI (TUI) monitor. Possible values are "OFF", "ERROR", "WARN", "INFO", "DEBUG", "TRACE" and are case insensitive

In addition, there can be per-agent settings to overwrite the default log level set for EVE microservices. These use the same log levels as the default log level settings (logrus). The per-agent settings begin with "agent.agentname.setting":

NameTypeDefaultDescription
agent.agentname.debug.loglevelstring""if set overrides debug.default.loglevel for this particular agent (Legacy setting debug.agentname.loglevel still supported)
agent.agentname.debug.remote.loglevelstring""if set overrides debug.default.remote.loglevel for this particular agent (Legacy setting debug.agentname.remote.loglevel)

Right now the following agents support per-agent log level settings:

  • newlogd
  • wwan
  • nodeagent
  • downloader
  • tpmmgr
  • client
  • vcomlink
  • executor
  • vaultmgr
  • baseosmgr
  • zedagent
  • verifier
  • wstunnelclient
  • zfsmanager
  • zedkube
  • ledmanager
  • faultinjection
  • zedmanager
  • nim
  • loguploader
  • watcher
  • volumemgr
  • zedrouter
  • msrv
  • domainmgr
  • diag
  • scepclient