// Copyright (c) 2018 Levente Kurusa // Copyright (c) 2020 Ant Group // // SPDX-License-Identifier: Apache-2.0 or MIT // //! This module handles cgroup operations. Start here! use crate::error::ErrorKind::*; use crate::error::*; use crate::{CgroupPid, ControllIdentifier, Controller, Hierarchy, Resources, Subsystem}; use std::collections::HashMap; use std::convert::From; use std::fs; use std::path::{Path, PathBuf}; /// A control group is the central structure to this crate. /// /// /// # What are control groups? /// /// Lifting over from the Linux kernel sources: /// /// > Control Groups provide a mechanism for aggregating/partitioning sets of /// > tasks, and all their future children, into hierarchical groups with /// > specialized behaviour. /// /// This crate is an attempt at providing a Rust-native way of managing these cgroups. #[derive(Debug)] pub struct Cgroup { /// The list of subsystems that control this cgroup subsystems: Vec, /// The hierarchy. hier: Box, path: String, } impl Clone for Cgroup { fn clone(&self) -> Self { Cgroup { subsystems: self.subsystems.clone(), path: self.path.clone(), hier: crate::hierarchies::auto(), } } } impl Default for Cgroup { fn default() -> Self { Cgroup { subsystems: Vec::new(), hier: crate::hierarchies::auto(), path: "".to_string(), } } } impl Cgroup { /// Create this control group. fn create(&self) { if self.hier.v2() { let _ret = create_v2_cgroup(self.hier.root().clone(), &self.path); } else { for subsystem in &self.subsystems { subsystem.to_controller().create(); } } } pub fn v2(&self) -> bool { self.hier.v2() } /// Create a new control group in the hierarchy `hier`, with name `path`. /// /// Returns a handle to the control group that can be used to manipulate it. pub fn new>(hier: Box, path: P) -> Cgroup { let cg = Cgroup::load(hier, path); cg.create(); cg } /// Create a new control group in the hierarchy `hier`, with name `path` and `relative_paths` /// /// Returns a handle to the control group that can be used to manipulate it. /// /// Note that this method is only meaningful for cgroup v1, call it is equivalent to call `new` in the v2 mode pub fn new_with_relative_paths>( hier: Box, path: P, relative_paths: HashMap, ) -> Cgroup { let cg = Cgroup::load_with_relative_paths(hier, path, relative_paths); cg.create(); cg } /// Create a handle for a control group in the hierarchy `hier`, with name `path`. /// /// Returns a handle to the control group (that possibly does not exist until `create()` has /// been called on the cgroup. pub fn load>(hier: Box, path: P) -> Cgroup { let path = path.as_ref(); let mut subsystems = hier.subsystems(); if path.as_os_str() != "" { subsystems = subsystems .into_iter() .map(|x| x.enter(path)) .collect::>(); } let cg = Cgroup { path: path.to_str().unwrap().to_string(), subsystems: subsystems, hier, }; cg } /// Create a handle for a control group in the hierarchy `hier`, with name `path` and `relative_paths` /// /// Returns a handle to the control group (that possibly does not exist until `create()` has /// been called on the cgroup. /// /// Note that this method is only meaningful for cgroup v1, call it is equivalent to call `load` in the v2 mode pub fn load_with_relative_paths>( hier: Box, path: P, relative_paths: HashMap, ) -> Cgroup { // relative_paths only valid for cgroup v1 if hier.v2() { return Self::load(hier, path); } let path = path.as_ref(); let mut subsystems = hier.subsystems(); if path.as_os_str() != "" { subsystems = subsystems .into_iter() .map(|x| { let cn = x.controller_name(); if relative_paths.contains_key(&cn) { let rp = relative_paths.get(&cn).unwrap(); let valid_path = rp.trim_start_matches("/").to_string(); let mut p = PathBuf::from(valid_path); p.push(path); x.enter(p.as_ref()) } else { x.enter(path) } }) .collect::>(); } let cg = Cgroup { subsystems: subsystems, hier, path: path.to_str().unwrap().to_string(), }; cg } /// The list of subsystems that this control group supports. pub fn subsystems(&self) -> &Vec { &self.subsystems } /// Deletes the control group. /// /// Note that this function makes no effort in cleaning up the descendant and the underlying /// system call will fail if there are any descendants. Thus, one should check whether it was /// actually removed, and remove the descendants first if not. In the future, this behavior /// will change. pub fn delete(&self) -> Result<()> { if self.v2() { if self.path != "" { let mut p = self.hier.root().clone(); p.push(self.path.clone()); return fs::remove_dir(p).map_err(|e| Error::with_cause(RemoveFailed, e)); } return Ok(()); } self.subsystems.iter().try_for_each(|sub| match sub { Subsystem::Pid(pidc) => pidc.delete(), Subsystem::Mem(c) => c.delete(), Subsystem::CpuSet(c) => c.delete(), Subsystem::CpuAcct(c) => c.delete(), Subsystem::Cpu(c) => c.delete(), Subsystem::Devices(c) => c.delete(), Subsystem::Freezer(c) => c.delete(), Subsystem::NetCls(c) => c.delete(), Subsystem::BlkIo(c) => c.delete(), Subsystem::PerfEvent(c) => c.delete(), Subsystem::NetPrio(c) => c.delete(), Subsystem::HugeTlb(c) => c.delete(), Subsystem::Rdma(c) => c.delete(), Subsystem::Systemd(c) => c.delete(), }) } /// Apply a set of resource limits to the control group. pub fn apply(&self, res: &Resources) -> Result<()> { self.subsystems .iter() .try_fold((), |_, e| e.to_controller().apply(res)) } /// Retrieve a container based on type inference. /// /// ## Example: /// /// ```text /// let pids: &PidController = control_group.controller_of() /// .expect("No pids controller attached!"); /// let cpu: &CpuController = control_group.controller_of() /// .expect("No cpu controller attached!"); /// ``` pub fn controller_of<'a, T>(self: &'a Self) -> Option<&'a T> where &'a T: From<&'a Subsystem>, T: Controller + ControllIdentifier, { for i in &self.subsystems { if i.to_controller().control_type() == T::controller_type() { // N.B.: // https://play.rust-lang.org/?gist=978b2846bacebdaa00be62374f4f4334&version=stable&mode=debug&edition=2015 return Some(i.into()); } } None } /// Removes a task from the control group. /// /// Note that this means that the task will be moved back to the root control group in the /// hierarchy and any rules applied to that control group will _still_ apply to the task. pub fn remove_task(&self, pid: CgroupPid) { let _ = self.hier.root_control_group().add_task(pid); } /// Attach a task to the control group. pub fn add_task(&self, pid: CgroupPid) -> Result<()> { if self.v2() { let subsystems = self.subsystems(); if subsystems.len() > 0 { let c = subsystems[0].to_controller(); c.add_task(&pid) } else { Ok(()) } } else { self.subsystems() .iter() .try_for_each(|sub| sub.to_controller().add_task(&pid)) } } /// Attach a task to the control group by thread group id. pub fn add_task_by_tgid(&self, pid: CgroupPid) -> Result<()> { self.subsystems() .iter() .try_for_each(|sub| sub.to_controller().add_task_by_tgid(&pid)) } /// Set notify_on_release to the control group. pub fn set_notify_on_release(&self, enable: bool) -> Result<()> { self.subsystems() .iter() .try_for_each(|sub| sub.to_controller().set_notify_on_release(enable)) } /// Set release_agent pub fn set_release_agent(&self, path: &str) -> Result<()> { self.hier .root_control_group() .subsystems() .iter() .try_for_each(|sub| sub.to_controller().set_release_agent(path)) } /// Returns an Iterator that can be used to iterate over the tasks that are currently in the /// control group. pub fn tasks(&self) -> Vec { // Collect the tasks from all subsystems let mut v = if self.v2() { let subsystems = self.subsystems(); if subsystems.len() > 0 { let c = subsystems[0].to_controller(); c.tasks() } else { vec![] } } else { self.subsystems() .iter() .map(|x| x.to_controller().tasks()) .fold(vec![], |mut acc, mut x| { acc.append(&mut x); acc }) }; v.sort(); v.dedup(); v } } pub const UNIFIED_MOUNTPOINT: &'static str = "/sys/fs/cgroup"; fn enable_controllers(controllers: &Vec, path: &PathBuf) { let mut f = path.clone(); f.push("cgroup.subtree_control"); for c in controllers { let body = format!("+{}", c); let _rest = fs::write(f.as_path(), body.as_bytes()); } } fn supported_controllers() -> Vec { let p = format!("{}/{}", UNIFIED_MOUNTPOINT, "cgroup.controllers"); let ret = fs::read_to_string(p.as_str()); ret.unwrap_or(String::new()) .split(" ") .map(|x| x.to_string()) .collect::>() } fn create_v2_cgroup(root: PathBuf, path: &str) -> Result<()> { // controler list ["memory", "cpu"] let controllers = supported_controllers(); let mut fp = root; // enable for root enable_controllers(&controllers, &fp); // path: "a/b/c" let elements = path.split("/").collect::>(); let last_index = elements.len() - 1; for (i, ele) in elements.iter().enumerate() { // ROOT/a fp.push(ele); // create dir, need not check if is a file or directory if !fp.exists() { match ::std::fs::create_dir(fp.clone()) { Err(e) => return Err(Error::with_cause(ErrorKind::FsError, e)), Ok(_) => {} } } if i < last_index { // enable controllers for substree enable_controllers(&controllers, &fp); } } Ok(()) } pub fn get_cgroups_relative_paths() -> Result> { let mut m = HashMap::new(); let content = fs::read_to_string("/proc/self/cgroup").map_err(|e| Error::with_cause(ReadFailed, e))?; for l in content.lines() { let fl: Vec<&str> = l.split(':').collect(); if fl.len() != 3 { continue; } let keys: Vec<&str> = fl[1].split(',').collect(); for key in &keys { m.insert(key.to_string(), fl[2].to_string()); } } Ok(m) }