If I understand well the file
io.containerd.metadata.v1.bolt/meta.db on containerd context is Metadata that tell to containerd which container to run and which permission etc.