> ## Documentation Index
> Fetch the complete documentation index at: https://docs.siderolabs.com/llms.txt
> Use this file to discover all available pages before exploring further.

# SeccompProfileConfig

> SeccompProfileConfig declares a named seccomp profile.
SeccompProfileConfig declares a seccomp profile which can be referenced by name.

Every profile is written to `/var/lib/kubelet/seccomp/profiles/<name>`, so Kubernetes pods
can use it with `securityContext.seccompProfile.type: Localhost` and
`localhostProfile: profiles/<name>`.

This document replaces the deprecated `.machine.seccompProfiles` field.


```yaml theme={null}
apiVersion: v1alpha1
kind: SeccompProfileConfig
name: audit.json # Name of the seccomp profile.
# The seccomp profile, in the OCI runtime specification `LinuxSeccomp` format.
profile:
    defaultAction: SCMP_ACT_LOG
```

<table>
  <thead>
    <tr>
      <th>Field</th>
      <th>Type</th>
      <th>Description</th>
      <th>Value(s)</th>
    </tr>
  </thead>

  <tbody>
    <tr>
      <td>`name`</td>
      <td>string</td>
      <td>Name of the seccomp profile.\
      \
      The name is used as the profile's file name, so it must be at most 255 characters long\
      and may only contain ASCII letters, digits, `.`, `_` and `-`.</td>

      <td />
    </tr>

    <tr>
      <td>`profile`</td>
      <td>Unstructured</td>
      <td>The seccomp profile, in the OCI runtime specification `LinuxSeccomp` format.\
      \
      This is the same JSON format Kubernetes `Localhost` seccomp profiles use, expressed\
      as YAML. `defaultAction` is required.</td>

      <td />
    </tr>
  </tbody>
</table>


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.