Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

In rootless + cgroupsv1, resource limits are an error #6837

Closed
wants to merge 1 commit into from

Conversation

mheon
Copy link
Member

@mheon mheon commented Jul 1, 2020

However, in some cases (unset limits), we can completely remove the limit and avoid errors. This works around a bug where the Podman frontend is setting a Pids limit of 0 on some rootless systems.

For now, this is only implemented for the PID limit. It can easily be extended to other resource limits, but it is a fair bit of code to do so, so I leave that exercise to someone else.

Fixes #6834

@openshift-ci-robot openshift-ci-robot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Jul 1, 2020
However, in some cases (unset limits), we can completely remove
the limit and avoid errors. This works around a bug where the
Podman frontend is setting a Pids limit of 0 on some rootless
systems.

For now, this is only implemented for the PID limit. It can
easily be extended to other resource limits, but it is a fair bit
of code to do so, so I leave that exercise to someone else.

Fixes containers#6834

Signed-off-by: Matthew Heon <[email protected]>
@mheon mheon force-pushed the drop_pids_cgroup branch from 2ffc6c0 to 5a7b910 Compare July 1, 2020 18:40
@mheon
Copy link
Member Author

mheon commented Jul 1, 2020

@goochjj This seems to work on my Debian Testing cgroupsv1 machine, but I'd appreciate it if you verify as well.

@goochjj
Copy link
Contributor

goochjj commented Jul 1, 2020

@mheon YES THANK YOU
Confirmed on Ubuntu 20.04 cgroups v1

Copy link
Member

@giuseppe giuseppe left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@openshift-ci-robot
Copy link
Collaborator

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: giuseppe, mheon

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@rhatdan
Copy link
Member

rhatdan commented Jul 2, 2020

I think this should be handled via this PR.
#6842
WDYT?

@baude
Copy link
Member

baude commented Jul 5, 2020

where are we with this one ?

@mheon
Copy link
Member Author

mheon commented Jul 5, 2020

Dan's proposed alternative is more elegant, but also requires a revendor and is failing tests.

@rhatdan
Copy link
Member

rhatdan commented Jul 6, 2020

#6860

@openshift-ci-robot
Copy link
Collaborator

@mheon: PR needs rebase.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@openshift-ci-robot openshift-ci-robot added the needs-rebase Indicates a PR cannot be merged because it has merge conflicts with HEAD. label Jul 12, 2020
@rhatdan rhatdan closed this Jul 13, 2020
@github-actions github-actions bot added the locked - please file new issue/PR Assist humans wanting to comment on an old issue or PR with locked comments. label Sep 24, 2023
@github-actions github-actions bot locked as resolved and limited conversation to collaborators Sep 24, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
approved Indicates a PR has been approved by an approver from all required OWNERS files. locked - please file new issue/PR Assist humans wanting to comment on an old issue or PR with locked comments. needs-rebase Indicates a PR cannot be merged because it has merge conflicts with HEAD.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

podman run failure on cgroupsv1 rootless related to --pids-limit
6 participants