Systemd/src/nspawn
Topi Miettinen 7d85383edb tree-wide: add size limits for tmpfs mounts
Limit size of various tmpfs mounts to 10% of RAM, except volatile root and /var
to 25%. Another exception is made for /dev (also /devs for PrivateDevices) and
/sys/fs/cgroup since no (or very few) regular files are expected to be used.

In addition, since directories, symbolic links, device specials and xattrs are
not counted towards the size= limit, number of inodes is also limited
correspondingly: 4MB size translates to 1k of inodes (assuming 4k each), 10% of
RAM (using 16GB of RAM as baseline) translates to 400k and 25% to 1M inodes.

Because nr_inodes option can't use ratios like size option, there's an
unfortunate side effect that with small memory systems the limit may be on the
too large side. Also, on an extremely small device with only 256MB of RAM, 10%
of RAM for /run may not be enough for re-exec of PID1 because 16MB of free
space is required.
2020-05-13 00:37:18 +02:00
..
meson.build meson: make source files including nspawn-settings.h depend on libseccomp 2019-04-30 19:31:22 +02:00
nspawn-cgroup.c tree-wide: add size limits for tmpfs mounts 2020-05-13 00:37:18 +02:00
nspawn-cgroup.h nspawn: Move cgroup mount stuff from nspawn-mount.c to nspawn-cgroup.c 2018-07-20 12:12:02 -04:00
nspawn-def.h tree-wide: remove Lennart's copyright lines 2018-06-14 10:20:20 +02:00
nspawn-expose-ports.c nspawn: some minor modernizations 2020-04-23 07:59:26 +02:00
nspawn-expose-ports.h tree-wide: remove Lennart's copyright lines 2018-06-14 10:20:20 +02:00
nspawn-gperf.gperf nspawn: add support for executing OCI runtime bundles with nspawn 2019-03-15 15:41:28 +01:00
nspawn-mount.c tree-wide: add size limits for tmpfs mounts 2020-05-13 00:37:18 +02:00
nspawn-mount.h nspawn: be more careful with creating/chowning directories to overmount 2020-04-28 19:40:46 +02:00
nspawn-network.c Merge pull request #14381 from keszybz/ifindex-cleanup 2020-01-13 17:57:59 +01:00
nspawn-network.h nspawn: Move --network-interface interfaces back to the host. 2020-01-02 14:13:03 +01:00
nspawn-oci.c tree-wide: fix spelling errors 2020-04-21 23:21:08 +02:00
nspawn-oci.h nspawn: add support for executing OCI runtime bundles with nspawn 2019-03-15 15:41:28 +01:00
nspawn-patch-uid.c *: convert amenable fdopendir() calls to take_fdopendir() 2020-03-31 06:48:03 -07:00
nspawn-patch-uid.h tree-wide: remove various unused functions 2018-12-02 13:35:34 +09:00
nspawn-register.c nspawn: switch to BusLocator-oriented helpers 2020-05-07 08:46:44 -07:00
nspawn-register.h nspawn: when stopping the machine, just deregister the machine 2019-10-29 10:54:45 +01:00
nspawn-seccomp.c nspawn: log syscalls we cannot add at debug level 2019-11-22 10:23:32 +01:00
nspawn-seccomp.h tree-wide: remove Lennart's copyright lines 2018-06-14 10:20:20 +02:00
nspawn-settings.c nspawn: beef up --resolve-conf= modes 2020-04-22 19:38:04 +02:00
nspawn-settings.h nspawn: beef up --resolve-conf= modes 2020-04-22 19:38:04 +02:00
nspawn-setuid.c *: convert amenable fdopen calls to take_fdopen 2020-03-31 06:48:03 -07:00
nspawn-setuid.h nspawn: refactor setuid code a bit 2019-03-15 15:33:09 +01:00
nspawn-stub-pid1.c tree-wide: drop missing.h 2019-10-31 17:57:03 +09:00
nspawn-stub-pid1.h tree-wide: remove Lennart's copyright lines 2018-06-14 10:20:20 +02:00
nspawn.c tree-wide: make sure our control buffers are properly aligned 2020-05-07 14:39:44 +02:00
test-nspawn-tables.c test-nspawn-tables: add another "tables" test 2018-05-28 10:40:00 +02:00
test-patch-uid.c util-lib: move yes_no() and friends to string-util.h 2019-09-16 18:06:20 +02:00