fe0669b26d
don't enable threaded mode by default
...
Because in threaded mode, we can't enable the memory controller -- it isn't thread-aware.
Signed-off-by: lifubang <lifubang@acmcoder.com >
2020-05-13 16:27:36 +08:00
bf15cc99b1
cgroup v2: support rootless systemd
...
Tested with both Podman (master) and Moby (master), on Ubuntu 19.10 .
$ podman --cgroup-manager=systemd run -it --rm --runtime=runc \
--cgroupns=host --memory 42m --cpus 0.42 --pids-limit 42 alpine
/ # cat /proc/self/cgroup
0::/user.slice/user-1001.slice/user@1001.service/user.slice/libpod-132ff0d72245e6f13a3bbc6cdc5376886897b60ac59eaa8dea1df7ab959cbf1c.scope
/ # cat /sys/fs/cgroup/user.slice/user-1001.slice/user@1001.service/user.slice/libpod-132ff0d72245e6f13a3bbc6cdc5376886897b60ac59eaa8dea1df7ab959cbf1c.scope/memory.max
44040192
/ # cat /sys/fs/cgroup/user.slice/user-1001.slice/user@1001.service/user.slice/libpod-132ff0d72245e6f13a3bbc6cdc5376886897b60ac59eaa8dea1df7ab959cbf1c.scope/cpu.max
42000 100000
/ # cat /sys/fs/cgroup/user.slice/user-1001.slice/user@1001.service/user.slice/libpod-132ff0d72245e6f13a3bbc6cdc5376886897b60ac59eaa8dea1df7ab959cbf1c.scope/pids.max
42
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2020-05-08 12:39:20 +09:00
60c647e3b8
fs2: fix cgroup.subtree_control EPERM on rootless + add CI
...
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp >
2020-04-27 13:30:15 +09:00
af3a81e48e
Add rootless testpath in Makefile
...
This commit modifies Makefile for rootless test to select testpath.
Signed-off-by: Kenta Tada <Kenta.Tada@sony.com >
2020-03-06 17:02:33 +09:00
23f4d3161b
tests: improve rootless_cg testing
...
This ensures that we don't hard-code the set of cgroups on the host, as
well as making the permissions granted by rootless.sh much more
restrictive (to improve the scope of testing).
Signed-off-by: Aleksa Sarai <asarai@suse.de >
2017-10-16 20:46:17 +11:00
ca4f427af1
Support cgroups with limits as rootless
...
Signed-off-by: Ed King <eking@pivotal.io >
Signed-off-by: Gabriel Rosenhouse <grosenhouse@pivotal.io >
Signed-off-by: Konstantinos Karampogias <konstantinos.karampogias@swisscom.com >
2017-10-05 11:22:54 +01:00
eb5bd4fa6a
tests: add tests for rootless multi-mapping configurations
...
Enable several previously disabled tests (for the idmap execution mode)
for rootless containers, in addition to making all tests use the
additional mappings. At the moment there's no strong need to add any
additional tests purely for rootless_idmap.
Signed-off-by: Aleksa Sarai <asarai@suse.de >
2017-09-09 12:45:33 +10:00
d0aec23c7e
tests: generalise rootless runner
...
This is necessary in order to add proper opportunistic tests, and is a
placeholder until we add tests for new{uid,gid}map configurations.
Signed-off-by: Aleksa Sarai <asarai@suse.de >
2017-09-09 12:45:33 +10:00
lifubang