These are devices that are to be both allowed and created.

Config defines configuration options for executing a process inside a contained environment.

IDMap represents UID/GID Mappings for User Namespaces.

Namespace defines configuration for each namespace.

Network defines configuration for a container's networking stack The network configuration can be omitted from a container causing the container to be setup with the host's networking stack.

Routes can be specified to create entries in the route table as the container is started All of destination, source, and gateway should be either IPv4 or IPv6.