Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Exec cgroup #5837

Merged
merged 3 commits into from
May 10, 2022
Merged

Exec cgroup #5837

merged 3 commits into from
May 10, 2022

Commits on May 9, 2022

  1. dependencies: Upversion conmon dependency to v2.0.27 

    Signed-off-by: Don Penney <dpenney@redhat.com>
    @donpenney
    donpenney committed May 9, 2022
    Configuration menu
    Copy the full SHA
    ae024bd View commit details
    Browse the repository at this point in the history

  2. config: Add monitor_exec_cgroup config option 

    Added runtime handler config option, monitor_exec_cgroup, to enable
moving the exec probe process to the container's cgroup. Users can
enable the feature by setting monitor_exec_cgroup to "container".

Signed-off-by: Don Penney <dpenney@redhat.com>
    @donpenney
    donpenney committed May 9, 2022
    Configuration menu
    Copy the full SHA
    8294126 View commit details
    Browse the repository at this point in the history

  3. oci: Move exec probe process to container cgroup, if enabled 

    Updated ExecSyncContainer to move the exec probe process to the
container's cgroup, if the runtime handler monitor_exec_cgroup config
option is set to "container". This ensures cpu usage and resource
accounting are restricted to the container's allowances.

Co-Authored-By: Brent Rowsell <browsell@redhat.com>
Signed-off-by: Don Penney <dpenney@redhat.com>
    @donpenney @browsell
    donpenney and browsell committed May 9, 2022
    Configuration menu
    Copy the full SHA
    3d516c5 View commit details
    Browse the repository at this point in the history