mirror of
https://github.com/kubernetes/kubernetes.git
synced 2026-08-07 14:30:35 +00:00
4d8a83b428
This change updates four dependencies: - github.com/containerd/containerd/api from v1.11.0 to v1.11.1 - github.com/cyphar/filepath-securejoin from v0.6.1 to v0.7.0 - github.com/opencontainers/cgroups from v0.0.6 to v0.0.7 - github.com/opencontainers/selinux from v1.13.1 to v1.15.1 The new filepath-securejoin release requires a newer version of cyphar.com/go-pathrs, so that module also moves from v0.2.2 to v0.2.5. The file hack/unwanted-dependencies.json did not need any changes. Signed-off-by: Davanum Srinivas <davanum@gmail.com>
72 lines
1.7 KiB
Go
72 lines
1.7 KiB
Go
package fs
|
|
|
|
import (
|
|
"math"
|
|
"strconv"
|
|
|
|
"github.com/opencontainers/cgroups"
|
|
"github.com/opencontainers/cgroups/fscommon"
|
|
)
|
|
|
|
type PidsGroup struct{}
|
|
|
|
func (s *PidsGroup) Name() string {
|
|
return "pids"
|
|
}
|
|
|
|
// ID returns the controller ID for pids subsystem.
|
|
func (s *PidsGroup) ID() cgroups.Controller {
|
|
return cgroups.Pids
|
|
}
|
|
|
|
func (s *PidsGroup) Apply(path string, _ *cgroups.Resources, pid int) error {
|
|
return apply(path, pid)
|
|
}
|
|
|
|
func (s *PidsGroup) Set(path string, r *cgroups.Resources) error {
|
|
if r.PidsLimit == nil {
|
|
return nil
|
|
}
|
|
|
|
// "max" is the fallback value.
|
|
val := "max"
|
|
if limit := *r.PidsLimit; limit > 0 {
|
|
val = strconv.FormatInt(limit, 10)
|
|
} else if limit == 0 {
|
|
// systemd doesn't support setting pids.max to "0", so when setting
|
|
// TasksMax we need to remap it to "1". We do the same thing here to
|
|
// avoid flip-flop behaviour between the fs and systemd drivers. In
|
|
// practice, the pids cgroup behaviour is basically identical.
|
|
val = "1"
|
|
}
|
|
if err := cgroups.WriteFile(path, "pids.max", val); err != nil {
|
|
return err
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func (s *PidsGroup) GetStats(path string, stats *cgroups.Stats) error {
|
|
if !cgroups.PathExists(path) {
|
|
return nil
|
|
}
|
|
current, err := fscommon.GetCgroupParamUint(path, "pids.current")
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
max, err := fscommon.GetCgroupParamUint(path, "pids.max")
|
|
if err != nil {
|
|
return err
|
|
}
|
|
// If no limit is set, read from pids.max returns "max", which is
|
|
// converted to MaxUint64 by GetCgroupParamUint. Historically, we
|
|
// represent "no limit" for pids as 0, thus this conversion.
|
|
if max == math.MaxUint64 {
|
|
max = 0
|
|
}
|
|
|
|
stats.PidsStats.Current = current
|
|
stats.PidsStats.Limit = max
|
|
return nil
|
|
}
|