diff --git a/containerd.service b/containerd.service
index 5577208c7..d86eb065f 100644
--- a/containerd.service
+++ b/containerd.service
@@ -8,6 +8,11 @@ ExecStartPre=/sbin/modprobe overlay
 ExecStart=/usr/local/bin/containerd
 Delegate=yes
 KillMode=process
+LimitNOFILE=1048576
+# Having non-zero Limit*s causes performance problems due to accounting overhead
+# in the kernel. We recommend using cgroups to do container-local accounting.
+LimitNPROC=infinity
+LimitCORE=infinity
 
 [Install]
 WantedBy=multi-user.target