github/nohang
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

update nohang.service

Browse Source
This commit is contained in:
Alexey Avramov 2019-10-02 00:38:34 +09:00
parent 4601b93242
commit f73ff046ac
2 changed files with 5 additions and 35 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

30
nohang/nohang
View File

@ -645,13 +645,6 @@ def write(path, string):
f.write(string) f.write(string)
def write_self_oom_score_adj(new_value):
"""
"""
if root:
write('/proc/self/oom_score_adj', new_value)
def valid_re(reg_exp): def valid_re(reg_exp):
"""Validate regular expression. """Validate regular expression.
""" """
@ -2661,29 +2654,6 @@ separate_log = False # will be overwritten after parse config
cgroup_v1_index, cgroup_v2_index = find_cgroup_indexes() cgroup_v1_index, cgroup_v2_index = find_cgroup_indexes()
# del it
self_oom_score_adj_min = '-100'
self_oom_score_adj_max = '-10'
write_self_oom_score_adj(self_oom_score_adj_min)
pid_list = get_pid_list() pid_list = get_pid_list()

10
nohang/nohang.service.in
View File

@ -1,6 +1,7 @@
[Unit] [Unit]
Description=Highly configurable OOM prevention daemon Description=Highly configurable OOM prevention daemon
Documentation=man:nohang(1) https://github.com/hakavlad/nohang Documentation=man:nohang(1) https://github.com/hakavlad/nohang
After=system.slice
[Service] [Service]
ExecStart=:TARGET_BIN:/nohang --config :TARGET_CONF:/nohang/nohang.conf ExecStart=:TARGET_BIN:/nohang --config :TARGET_CONF:/nohang/nohang.conf
@ -11,13 +12,12 @@ Nice=-15
CPUSchedulingResetOnFork=true CPUSchedulingResetOnFork=true
OOMScoreAdjust=-10 OOMScoreAdjust=-10
RestrictRealtime=yes RestrictRealtime=yes
RestrictSUIDSGID=yes
MemoryDenyWriteExecute=yes MemoryDenyWriteExecute=yes
SystemCallFilter=~@mount
ProtectSystem=full
ProtectControlGroups=true
ProtectKernelModules=true ProtectKernelModules=true
ProtectKernelTunables=true SystemCallFilter=~@mount ~@clock ~@reboot ~@resources ~@setuid ~@swap
SystemCallArchitectures=native
ReadOnlyPaths=/
ReadWritePaths=/tmp /var /run /dev/shm
[Install] [Install]
WantedBy=multi-user.target WantedBy=multi-user.target