4ad490007b
Replace the very generic cgroup hookup with a much simpler one. With this change only the high-level cgroup settings remain, the ability to set arbitrary cgroup attributes is removed, so is support for adding units to arbitrary cgroup controllers or setting arbitrary paths for them (especially paths that are different for the various controllers). This also introduces a new -.slice root slice, that is the parent of system.slice and friends. This enables easy admin configuration of root-level cgrouo properties. This replaces DeviceDeny= by DevicePolicy=, and implicitly adds in /dev/null, /dev/zero and friends if DeviceAllow= is used (unless this is turned off by DevicePolicy=).
117 lines
3.7 KiB
C
117 lines
3.7 KiB
C
/*-*- Mode: C; c-basic-offset: 8; indent-tabs-mode: nil -*-*/
|
|
|
|
#pragma once
|
|
|
|
/***
|
|
This file is part of systemd.
|
|
|
|
Copyright 2013 Lennart Poettering
|
|
|
|
systemd is free software; you can redistribute it and/or modify it
|
|
under the terms of the GNU Lesser General Public License as published by
|
|
the Free Software Foundation; either version 2.1 of the License, or
|
|
(at your option) any later version.
|
|
|
|
systemd is distributed in the hope that it will be useful, but
|
|
WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
Lesser General Public License for more details.
|
|
|
|
You should have received a copy of the GNU Lesser General Public License
|
|
along with systemd; If not, see <http://www.gnu.org/licenses/>.
|
|
***/
|
|
|
|
#include "list.h"
|
|
|
|
typedef struct CGroupContext CGroupContext;
|
|
typedef struct CGroupDeviceAllow CGroupDeviceAllow;
|
|
typedef struct CGroupBlockIODeviceWeight CGroupBlockIODeviceWeight;
|
|
typedef struct CGroupBlockIODeviceBandwidth CGroupBlockIODeviceBandwidth;
|
|
|
|
typedef enum CGroupDevicePolicy {
|
|
|
|
/* When devices listed, will allow those, plus built-in ones,
|
|
if none are listed will allow everything. */
|
|
CGROUP_AUTO,
|
|
|
|
/* Everything forbidden, except built-in ones and listed ones. */
|
|
CGROUP_CLOSED,
|
|
|
|
/* Everythings forbidden, except for the listed devices */
|
|
CGROUP_STRICT,
|
|
|
|
_CGROUP_DEVICE_POLICY_MAX,
|
|
_CGROUP_DEVICE_POLICY_INVALID = -1
|
|
} CGroupDevicePolicy;
|
|
|
|
struct CGroupDeviceAllow {
|
|
LIST_FIELDS(CGroupDeviceAllow, device_allow);
|
|
char *path;
|
|
bool r:1;
|
|
bool w:1;
|
|
bool m:1;
|
|
};
|
|
|
|
struct CGroupBlockIODeviceWeight {
|
|
LIST_FIELDS(CGroupBlockIODeviceWeight, device_weights);
|
|
char *path;
|
|
unsigned long weight;
|
|
};
|
|
|
|
struct CGroupBlockIODeviceBandwidth {
|
|
LIST_FIELDS(CGroupBlockIODeviceBandwidth, device_bandwidths);
|
|
char *path;
|
|
uint64_t bandwidth;
|
|
bool read;
|
|
};
|
|
|
|
struct CGroupContext {
|
|
bool cpu_accounting;
|
|
bool blockio_accounting;
|
|
bool memory_accounting;
|
|
|
|
unsigned long cpu_shares;
|
|
|
|
unsigned long blockio_weight;
|
|
LIST_HEAD(CGroupBlockIODeviceWeight, blockio_device_weights);
|
|
LIST_HEAD(CGroupBlockIODeviceBandwidth, blockio_device_bandwidths);
|
|
|
|
uint64_t memory_limit;
|
|
uint64_t memory_soft_limit;
|
|
|
|
CGroupDevicePolicy device_policy;
|
|
LIST_HEAD(CGroupDeviceAllow, device_allow);
|
|
};
|
|
|
|
#include "unit.h"
|
|
#include "manager.h"
|
|
#include "cgroup-util.h"
|
|
|
|
void cgroup_context_init(CGroupContext *c);
|
|
void cgroup_context_done(CGroupContext *c);
|
|
void cgroup_context_dump(CGroupContext *c, FILE* f, const char *prefix);
|
|
void cgroup_context_apply(CGroupContext *c, CGroupControllerMask mask, const char *path);
|
|
CGroupControllerMask cgroup_context_get_mask(CGroupContext *c);
|
|
|
|
void cgroup_context_free_device_allow(CGroupContext *c, CGroupDeviceAllow *a);
|
|
void cgroup_context_free_blockio_device_weight(CGroupContext *c, CGroupBlockIODeviceWeight *w);
|
|
void cgroup_context_free_blockio_device_bandwidth(CGroupContext *c, CGroupBlockIODeviceBandwidth *b);
|
|
|
|
void unit_realize_cgroup(Unit *u);
|
|
void unit_destroy_cgroup(Unit *u);
|
|
|
|
int manager_setup_cgroup(Manager *m);
|
|
void manager_shutdown_cgroup(Manager *m, bool delete);
|
|
|
|
unsigned manager_dispatch_cgroup_queue(Manager *m);
|
|
|
|
Unit *manager_get_unit_by_cgroup(Manager *m, const char *cgroup);
|
|
Unit* manager_get_unit_by_pid(Manager *m, pid_t pid);
|
|
|
|
pid_t unit_search_main_pid(Unit *u);
|
|
|
|
int manager_notify_cgroup_empty(Manager *m, const char *group);
|
|
|
|
const char* cgroup_device_policy_to_string(CGroupDevicePolicy i) _const_;
|
|
CGroupDevicePolicy cgroup_device_policy_from_string(const char *s) _pure_;
|