k3s/vendor/github.com/containerd/cgroups
Jacob Blain Christen 59a39e9a3b
containerd: v1.4.4-k3s1 (#3090)
Addresses k3s-io/k3s#3066 and CVE-2021-21334

Signed-off-by: Jacob Blain Christen <jacob@rancher.com>
2021-03-17 14:38:42 -07:00
..
stats/v1 Update go.mod for k8s 1.19 2020-08-28 17:18:31 -07:00
v2 containerd: v1.4.4-k3s1 (#3090) 2021-03-17 14:38:42 -07:00
.gitignore Update go.mod for k8s 1.19 2020-08-28 17:18:31 -07:00
blkio.go containerd: v1.4.4-k3s1 (#3090) 2021-03-17 14:38:42 -07:00
cgroup.go containerd: v1.4.4-k3s1 (#3090) 2021-03-17 14:38:42 -07:00
control.go Update go.mod for k8s 1.19 2020-08-28 17:18:31 -07:00
cpu.go containerd: v1.4.4-k3s1 (#3090) 2021-03-17 14:38:42 -07:00
cpuacct.go Update go.mod for k8s 1.19 2020-08-28 17:18:31 -07:00
cpuset.go containerd: v1.4.4-k3s1 (#3090) 2021-03-17 14:38:42 -07:00
devices.go containerd: v1.4.4-k3s1 (#3090) 2021-03-17 14:38:42 -07:00
errors.go Update vendor 2019-01-11 21:58:27 -07:00
freezer.go containerd: v1.4.4-k3s1 (#3090) 2021-03-17 14:38:42 -07:00
go.mod containerd: v1.4.4-k3s1 (#3090) 2021-03-17 14:38:42 -07:00
go.sum containerd: v1.4.4-k3s1 (#3090) 2021-03-17 14:38:42 -07:00
hierarchy.go Update go.mod for k8s 1.19 2020-08-28 17:18:31 -07:00
hugetlb.go containerd: v1.4.4-k3s1 (#3090) 2021-03-17 14:38:42 -07:00
LICENSE Update vendor 2019-01-11 21:58:27 -07:00
Makefile Update go.mod for k8s 1.19 2020-08-28 17:18:31 -07:00
memory.go containerd: v1.4.4-k3s1 (#3090) 2021-03-17 14:38:42 -07:00
named.go Update vendor 2019-01-11 21:58:27 -07:00
net_cls.go containerd: v1.4.4-k3s1 (#3090) 2021-03-17 14:38:42 -07:00
net_prio.go containerd: v1.4.4-k3s1 (#3090) 2021-03-17 14:38:42 -07:00
opts.go containerd: v1.4.4-k3s1 (#3090) 2021-03-17 14:38:42 -07:00
paths.go containerd: v1.4.4-k3s1 (#3090) 2021-03-17 14:38:42 -07:00
perf_event.go Update vendor 2019-01-11 21:58:27 -07:00
pids.go containerd: v1.4.4-k3s1 (#3090) 2021-03-17 14:38:42 -07:00
Protobuild.toml Update go.mod for k8s 1.19 2020-08-28 17:18:31 -07:00
rdma.go containerd: v1.4.4-k3s1 (#3090) 2021-03-17 14:38:42 -07:00
README.md containerd: v1.4.4-k3s1 (#3090) 2021-03-17 14:38:42 -07:00
state.go Update vendor 2019-01-11 21:58:27 -07:00
subsystem.go Update go.mod for k8s 1.19 2020-08-28 17:18:31 -07:00
systemd.go containerd: v1.4.4-k3s1 (#3090) 2021-03-17 14:38:42 -07:00
ticks.go Update vendor 2019-01-11 21:58:27 -07:00
utils.go containerd: v1.4.4-k3s1 (#3090) 2021-03-17 14:38:42 -07:00
v1.go Update go.mod for k8s 1.19 2020-08-28 17:18:31 -07:00
Vagrantfile containerd: v1.4.4-k3s1 (#3090) 2021-03-17 14:38:42 -07:00

cgroups

Build Status codecov GoDoc Go Report Card

Go package for creating, managing, inspecting, and destroying cgroups. The resources format for settings on the cgroup uses the OCI runtime-spec found here.

Examples

Create a new cgroup

This creates a new cgroup using a static path for all subsystems under /test.

  • /sys/fs/cgroup/cpu/test
  • /sys/fs/cgroup/memory/test
  • etc....

It uses a single hierarchy and specifies cpu shares as a resource constraint and uses the v1 implementation of cgroups.

shares := uint64(100)
control, err := cgroups.New(cgroups.V1, cgroups.StaticPath("/test"), &specs.LinuxResources{
    CPU: &specs.CPU{
        Shares: &shares,
    },
})
defer control.Delete()

Create with systemd slice support

control, err := cgroups.New(cgroups.Systemd, cgroups.Slice("system.slice", "runc-test"), &specs.LinuxResources{
    CPU: &specs.CPU{
        Shares: &shares,
    },
})

Load an existing cgroup

control, err = cgroups.Load(cgroups.V1, cgroups.StaticPath("/test"))

Add a process to the cgroup

if err := control.Add(cgroups.Process{Pid:1234}); err != nil {
}

Update the cgroup

To update the resources applied in the cgroup

shares = uint64(200)
if err := control.Update(&specs.LinuxResources{
    CPU: &specs.LinuxCPU{
        Shares: &shares,
    },
}); err != nil {
}

Freeze and Thaw the cgroup

if err := control.Freeze(); err != nil {
}
if err := control.Thaw(); err != nil {
}

List all processes in the cgroup or recursively

processes, err := control.Processes(cgroups.Devices, recursive)

Get Stats on the cgroup

stats, err := control.Stat()

By adding cgroups.IgnoreNotExist all non-existent files will be ignored, e.g. swap memory stats without swap enabled

stats, err := control.Stat(cgroups.IgnoreNotExist)

Move process across cgroups

This allows you to take processes from one cgroup and move them to another.

err := control.MoveTo(destination)

Create subcgroup

subCgroup, err := control.New("child", resources)

Registering for memory events

This allows you to get notified by an eventfd for v1 memory cgroups events.

event := cgroups.MemoryThresholdEvent(50 * 1024 * 1024, false)
efd, err := control.RegisterMemoryEvent(event)
event := cgroups.MemoryPressureEvent(cgroups.MediumPressure, cgroups.DefaultMode)
efd, err := control.RegisterMemoryEvent(event)
efd, err := control.OOMEventFD()
// or by using RegisterMemoryEvent
event := cgroups.OOMEvent()
efd, err := control.RegisterMemoryEvent(event)

Attention

All static path should not include /sys/fs/cgroup/ prefix, it should start with your own cgroups name

Project details

Cgroups is a containerd sub-project, licensed under the Apache 2.0 license. As a containerd sub-project, you will find the:

information in our containerd/project repository.