Add LimitNPROC, LimitNOFILE and LimitCORE for containerd and

cri-containerd.

Signed-off-by: Lantao Liu <lantaol@google.com>
This commit is contained in:
Lantao Liu
2017-12-01 00:16:58 +00:00
parent 0db6e04ba1
commit 5a17149a70
5 changed files with 40 additions and 0 deletions

View File

@@ -11,6 +11,11 @@ RestartSec=5
Delegate=yes
KillMode=process
OOMScoreAdjust=-999
LimitNOFILE=1048576
# Having non-zero Limit*s causes performance problems due to accounting overhead
# in the kernel. We recommend using cgroups to do container-local accounting.
LimitNPROC=infinity
LimitCORE=infinity
[Install]
WantedBy=multi-user.target

View File

@@ -6,6 +6,11 @@ After=containerd.service
[Service]
Restart=always
RestartSec=5
LimitNOFILE=1048576
# Having non-zero Limit*s causes performance problems due to accounting overhead
# in the kernel. We recommend using cgroups to do container-local accounting.
LimitNPROC=infinity
LimitCORE=infinity
ExecStart=/usr/local/bin/cri-containerd --logtostderr
[Install]