Mirror/k3s
1
0
Fork 0
mirror of https://github.com/k3s-io/k3s.git synced 2024-06-07 19:41:36 +00:00
Code Issues Packages Projects Releases Wiki Activity
6e8284e3d4
k3s/pkg
History
Akihiro Suda 6e8284e3d4 rootless: enable resource limitation (requires cgroup v2, systemd) 
Now rootless mode can be used with cgroup v2 resource limitations.
A pod is executed in a cgroup like "/user.slice/user-1001.slice/user@1001.service/k3s-rootless.service/kubepods/podd0eb6921-c81a-4214-b36c-d3b9bb212fac/63b5a253a1fd4627da16bfce9bec58d72144cf30fe833e0ca9a6d60ebf837475".

This is accomplished by running `kubelet` in a cgroup namespace, and enabling `cgroupfs` driver for the cgroup hierarchy delegated by systemd.

To enable cgroup v2 resource limitation, `k3s server --rootless` needs to be launched as `systemctl --user` service.
Please see the comment lines in `k3s-rootless.service` for the usage.

Running `k3s server --rootless` via a terminal is not supported.
When it really needs to be launched via a terminal, `systemd-run --user -p Delegate --tty` needs to be prepended to create a systemd scope.

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2021-03-24 00:37:30 -07:00
..
agent rootless: enable resource limitation (requires cgroup v2, systemd) 2021-03-24 00:37:30 -07:00
apiaddresses Add disable flags for control components (#2900) 2021-02-12 17:35:57 +02:00
apis/k3s.cattle.io
authenticator Use secrets for node-passwd entries and cleanup 2020-11-05 09:48:53 -07:00
bootstrap
cli Define a Controllers and LeaderControllers on the server config (#3043) 2021-03-11 10:39:00 -08:00
clientaccess Always use static ports for client load-balancers (#3026) 2021-03-06 02:29:57 -08:00
cloudprovider Replace k3s cloud provider wrangler controller with core node informer (#2843) 2021-01-22 16:59:48 -08:00
cluster put etcd bootstrap save call in goroutine and update comment 2021-03-17 14:33:00 -07:00
codegen Add support for disabling all staged content 2020-09-14 14:21:37 -07:00
configfilearg Add support for both config-file and data-dir at a global level in the self-extracting wrapper for K3s (#2594) 2020-12-16 09:27:57 -08:00
containerd add fuse-overlayfs snapshotter (mainly for rootless mode) 2020-12-01 11:00:00 -08:00
ctr
daemons rootless: enable resource limitation (requires cgroup v2, systemd) 2021-03-24 00:37:30 -07:00
datadir Make program name a variable to be changed at compile time 2020-06-06 16:39:41 -07:00
dataverify Add file verification for data directory 2020-10-06 10:29:27 -07:00
deploy Update to Traefik 2.4.2 and combine manifests 2021-03-01 10:44:24 -07:00
etcd remove etcd data dir when etcd is disabled (#3059) 2021-03-16 18:14:43 +02:00
flock Add Release function for flock 2020-10-06 10:29:27 -07:00
generated Update go.mod for k8s 1.19 2020-08-28 17:18:31 -07:00
kubectl Update Kubernetes to v1.20.0-k3s1 2020-12-08 22:51:34 -08:00
netutil Initial Logging Output Update (#2246) 2020-09-21 09:56:03 -07:00
node Use secrets for node-passwd entries and cleanup 2020-11-05 09:48:53 -07:00
nodeconfig Call setproctitle to conceal node args in ps output 2020-07-28 15:49:49 -07:00
nodepassword Use secrets for node-passwd entries and cleanup 2020-11-05 09:48:53 -07:00
passwd Use secrets for node-passwd entries and cleanup 2020-11-05 09:48:53 -07:00
rootless rootless: enable resource limitation (requires cgroup v2, systemd) 2021-03-24 00:37:30 -07:00
rootlessports Initial Logging Output Update (#2246) 2020-09-21 09:56:03 -07:00
server Define a Controllers and LeaderControllers on the server config (#3043) 2021-03-11 10:39:00 -08:00
servicelb Collect IPs from all pods before deciding to use internal or external addresses (#2909) 2021-02-09 16:26:57 -08:00
static Update to Traefik 2.4.2 and combine manifests 2021-03-01 10:44:24 -07:00
token
untar Limit zstd decoder memory 2021-02-17 11:48:03 -08:00
util
version remove hard coded value 2020-07-09 11:20:06 -07:00