Zoe 62963fef9f libct/cg/sd/v1: do not update non-frozen cgroup after frozen failed. ...

In code we have frozen the cgroup to avoid the processes get
an occasional "permission denied" error, while the systemd's application of device
rules is done disruptively. When the processes in the container can not
be frozen over 2 seconds (which defined in fs/freezer.go),
we still update the cgroup which resulting the container get an occasional
"permission denied" error in some cases.

Return error directly without updating cgroup, when freeze fails.

Fixes: #3803

Signed-off-by: Zoe <hi@zoe.im>

2023-06-12 10:10:04 +08:00

..

common.go

libct/cg/sd: use systemd version when generating dev props

2023-04-24 17:05:26 -07:00

cpuset_test.go

cgroups: cpuset: fix byte order while parsing cpuset range to bits

2022-10-13 11:13:29 +08:00

cpuset.go

cgroups: cpuset: fix byte order while parsing cpuset range to bits

2022-10-13 11:13:29 +08:00

dbus.go

libct/cg/sd: check dbus.ErrClosed instead of isDbusError

2022-05-20 14:47:19 +08:00

devices.go

libcontainer/cgroups: return concrete types

2022-10-07 17:31:11 +02:00

freeze_test.go

libcontainer/cgroups: return concrete types

2022-10-07 17:31:11 +02:00

systemd_test.go

libct/cg/sd: support setting cpu.idle via systemd

2023-04-03 18:25:07 -07:00

user.go

libct/cg/sd: simplify DetectUserDbusSessionBusAddress

2022-03-01 11:39:01 -08:00

v1.go

libct/cg/sd/v1: do not update non-frozen cgroup after frozen failed.

2023-06-12 10:10:04 +08:00

v2.go

libct/cg/sd: use systemd version when generating dev props

2023-04-24 17:05:26 -07:00