[Unit]
Description=GRPC Socket for Containerd API
PartOf=containerd.service

[Socket]
ListenStream=/run/containerd/containerd.sock
SocketMode=0600
SocketUser=root
SocketGroup=root

[Install]
WantedBy=sockets.target