mirror of
https://github.com/kata-containers/cgroups-rs.git
synced 2026-08-05 02:13:23 +00:00
c9d02afe33
Support to set threaded mode in cgroup v2. The premise of switching to threaded mode is that only the cgroup of cpuset, cpu and pids is supported. Fixes: #90 Signed-off-by: yaoyinnan <yaoyinnan@foxmail.com>
406 lines
12 KiB
Rust
406 lines
12 KiB
Rust
// Copyright (c) 2018 Levente Kurusa
|
|
// Copyright (c) 2020 Ant Group
|
|
//
|
|
// SPDX-License-Identifier: Apache-2.0 or MIT
|
|
//
|
|
|
|
//! This module allows the user to create a control group using the Builder pattern.
|
|
//! # Example
|
|
//!
|
|
//! The following example demonstrates how the control group builder looks like. The user
|
|
//! specifies the name of the control group (here: "hello") and the hierarchy it belongs to (here:
|
|
//! a V1 hierarchy). Next, the user selects a subsystem by calling functions like `memory()`,
|
|
//! `cpu()` and `devices()`. The user can then add restrictions and details via subsystem-specific
|
|
//! calls. To finalize a subsystem, the user may call `done()`. Finally, if the control group build
|
|
//! is done and all requirements/restrictions have been specified, the control group can be created
|
|
//! by a call to `build()`.
|
|
//!
|
|
//! ```rust,no_run
|
|
//! # use cgroups_rs::*;
|
|
//! # use cgroups_rs::devices::*;
|
|
//! # use cgroups_rs::cgroup_builder::*;
|
|
//! let h = cgroups_rs::hierarchies::auto();
|
|
//! let cgroup: Cgroup = CgroupBuilder::new("hello")
|
|
//! .memory()
|
|
//! .kernel_memory_limit(1024 * 1024)
|
|
//! .memory_hard_limit(1024 * 1024)
|
|
//! .done()
|
|
//! .cpu()
|
|
//! .shares(100)
|
|
//! .done()
|
|
//! .devices()
|
|
//! .device(1000, 10, DeviceType::Block, true,
|
|
//! vec![DevicePermissions::Read,
|
|
//! DevicePermissions::Write,
|
|
//! DevicePermissions::MkNod])
|
|
//! .device(6, 1, DeviceType::Char, false, vec![])
|
|
//! .done()
|
|
//! .network()
|
|
//! .class_id(1337)
|
|
//! .priority("eth0".to_string(), 100)
|
|
//! .priority("wl0".to_string(), 200)
|
|
//! .done()
|
|
//! .hugepages()
|
|
//! .limit("2M".to_string(), 0)
|
|
//! .limit("4M".to_string(), 4 * 1024 * 1024 * 100)
|
|
//! .limit("2G".to_string(), 2 * 1024 * 1024 * 1024)
|
|
//! .done()
|
|
//! .blkio()
|
|
//! .weight(123)
|
|
//! .leaf_weight(99)
|
|
//! .weight_device(6, 1, Some(100), Some(55))
|
|
//! .weight_device(6, 1, Some(100), Some(55))
|
|
//! .throttle_iops()
|
|
//! .read(6, 1, 10)
|
|
//! .write(11, 1, 100)
|
|
//! .throttle_bps()
|
|
//! .read(6, 1, 10)
|
|
//! .write(11, 1, 100)
|
|
//! .done()
|
|
//! .build(h).unwrap();
|
|
//! ```
|
|
|
|
use crate::{
|
|
BlkIoDeviceResource, BlkIoDeviceThrottleResource, Cgroup, DeviceResource, Error, Hierarchy,
|
|
HugePageResource, MaxValue, NetworkPriority, Resources,
|
|
};
|
|
|
|
macro_rules! gen_setter {
|
|
($res:ident, $cont:ident, $func:ident, $name:ident, $ty:ty) => {
|
|
/// See the similarly named function in the respective controller.
|
|
pub fn $name(mut self, $name: $ty) -> Self {
|
|
self.cgroup.resources.$res.$name = Some($name);
|
|
self
|
|
}
|
|
};
|
|
}
|
|
|
|
/// A control group builder instance
|
|
pub struct CgroupBuilder {
|
|
name: String,
|
|
/// Internal, unsupported field: use the associated builders instead.
|
|
resources: Resources,
|
|
/// List of controllers specifically enabled in the control group.
|
|
specified_controllers: Option<Vec<String>>,
|
|
}
|
|
|
|
impl CgroupBuilder {
|
|
/// Start building a control group with the supplied hierarchy and name pair.
|
|
///
|
|
/// Note that this does not actually create the control group until `build()` is called.
|
|
pub fn new(name: &str) -> CgroupBuilder {
|
|
CgroupBuilder {
|
|
name: name.to_owned(),
|
|
resources: Resources::default(),
|
|
specified_controllers: None,
|
|
}
|
|
}
|
|
|
|
/// Builds the memory resources of the control group.
|
|
pub fn memory(self) -> MemoryResourceBuilder {
|
|
MemoryResourceBuilder { cgroup: self }
|
|
}
|
|
|
|
/// Builds the pid resources of the control group.
|
|
pub fn pid(self) -> PidResourceBuilder {
|
|
PidResourceBuilder { cgroup: self }
|
|
}
|
|
|
|
/// Builds the cpu resources of the control group.
|
|
pub fn cpu(self) -> CpuResourceBuilder {
|
|
CpuResourceBuilder { cgroup: self }
|
|
}
|
|
|
|
/// Builds the devices resources of the control group, disallowing or
|
|
/// allowing access to certain devices in the system.
|
|
pub fn devices(self) -> DeviceResourceBuilder {
|
|
DeviceResourceBuilder { cgroup: self }
|
|
}
|
|
|
|
/// Builds the network resources of the control group, setting class id, or
|
|
/// various priorities on networking interfaces.
|
|
pub fn network(self) -> NetworkResourceBuilder {
|
|
NetworkResourceBuilder { cgroup: self }
|
|
}
|
|
|
|
/// Builds the hugepage/hugetlb resources available to the control group.
|
|
pub fn hugepages(self) -> HugepagesResourceBuilder {
|
|
HugepagesResourceBuilder { cgroup: self }
|
|
}
|
|
|
|
/// Builds the block I/O resources available for the control group.
|
|
pub fn blkio(self) -> BlkIoResourcesBuilder {
|
|
BlkIoResourcesBuilder {
|
|
cgroup: self,
|
|
throttling_iops: false,
|
|
}
|
|
}
|
|
|
|
/// Finalize the control group, consuming the builder and creating the control group.
|
|
pub fn build(self, hier: Box<dyn Hierarchy>) -> Result<Cgroup, Error> {
|
|
if let Some(controllers) = self.specified_controllers {
|
|
let cg = Cgroup::new_with_specified_controllers(hier, self.name, Some(controllers))?;
|
|
cg.apply(&self.resources)?;
|
|
Ok(cg)
|
|
} else {
|
|
let cg = Cgroup::new(hier, self.name)?;
|
|
cg.apply(&self.resources)?;
|
|
Ok(cg)
|
|
}
|
|
}
|
|
|
|
/// Specifically enable some controllers in the control group.
|
|
pub fn set_specified_controllers(mut self, specified_controllers: Vec<String>) -> Self {
|
|
self.specified_controllers = Some(specified_controllers);
|
|
self
|
|
}
|
|
}
|
|
|
|
/// A builder that configures the memory controller of a control group.
|
|
pub struct MemoryResourceBuilder {
|
|
cgroup: CgroupBuilder,
|
|
}
|
|
|
|
impl MemoryResourceBuilder {
|
|
gen_setter!(
|
|
memory,
|
|
MemController,
|
|
set_kmem_limit,
|
|
kernel_memory_limit,
|
|
i64
|
|
);
|
|
gen_setter!(memory, MemController, set_limit, memory_hard_limit, i64);
|
|
gen_setter!(
|
|
memory,
|
|
MemController,
|
|
set_soft_limit,
|
|
memory_soft_limit,
|
|
i64
|
|
);
|
|
gen_setter!(
|
|
memory,
|
|
MemController,
|
|
set_tcp_limit,
|
|
kernel_tcp_memory_limit,
|
|
i64
|
|
);
|
|
gen_setter!(
|
|
memory,
|
|
MemController,
|
|
set_memswap_limit,
|
|
memory_swap_limit,
|
|
i64
|
|
);
|
|
gen_setter!(memory, MemController, set_swappiness, swappiness, u64);
|
|
|
|
/// Finish the construction of the memory resources of a control group.
|
|
pub fn done(self) -> CgroupBuilder {
|
|
self.cgroup
|
|
}
|
|
}
|
|
|
|
/// A builder that configures the pid controller of a control group.
|
|
pub struct PidResourceBuilder {
|
|
cgroup: CgroupBuilder,
|
|
}
|
|
|
|
impl PidResourceBuilder {
|
|
gen_setter!(
|
|
pid,
|
|
PidController,
|
|
set_pid_max,
|
|
maximum_number_of_processes,
|
|
MaxValue
|
|
);
|
|
|
|
/// Finish the construction of the pid resources of a control group.
|
|
pub fn done(self) -> CgroupBuilder {
|
|
self.cgroup
|
|
}
|
|
}
|
|
|
|
/// A builder that configures the cpuset & cpu controllers of a control group.
|
|
pub struct CpuResourceBuilder {
|
|
cgroup: CgroupBuilder,
|
|
}
|
|
|
|
impl CpuResourceBuilder {
|
|
gen_setter!(cpu, CpuSetController, set_cpus, cpus, String);
|
|
gen_setter!(cpu, CpuSetController, set_mems, mems, String);
|
|
gen_setter!(cpu, CpuController, set_shares, shares, u64);
|
|
gen_setter!(cpu, CpuController, set_cfs_quota, quota, i64);
|
|
gen_setter!(cpu, CpuController, set_cfs_period, period, u64);
|
|
gen_setter!(cpu, CpuController, set_rt_runtime, realtime_runtime, i64);
|
|
gen_setter!(cpu, CpuController, set_rt_period, realtime_period, u64);
|
|
|
|
/// Finish the construction of the cpu resources of a control group.
|
|
pub fn done(self) -> CgroupBuilder {
|
|
self.cgroup
|
|
}
|
|
}
|
|
|
|
/// A builder that configures the devices controller of a control group.
|
|
pub struct DeviceResourceBuilder {
|
|
cgroup: CgroupBuilder,
|
|
}
|
|
|
|
impl DeviceResourceBuilder {
|
|
/// Restrict (or allow) a device to the tasks inside the control group.
|
|
pub fn device(
|
|
mut self,
|
|
major: i64,
|
|
minor: i64,
|
|
devtype: crate::devices::DeviceType,
|
|
allow: bool,
|
|
access: Vec<crate::devices::DevicePermissions>,
|
|
) -> DeviceResourceBuilder {
|
|
self.cgroup.resources.devices.devices.push(DeviceResource {
|
|
allow,
|
|
devtype,
|
|
major,
|
|
minor,
|
|
access,
|
|
});
|
|
self
|
|
}
|
|
|
|
/// Finish the construction of the devices resources of a control group.
|
|
pub fn done(self) -> CgroupBuilder {
|
|
self.cgroup
|
|
}
|
|
}
|
|
|
|
/// A builder that configures the net_cls & net_prio controllers of a control group.
|
|
pub struct NetworkResourceBuilder {
|
|
cgroup: CgroupBuilder,
|
|
}
|
|
|
|
impl NetworkResourceBuilder {
|
|
gen_setter!(network, NetclsController, set_class, class_id, u64);
|
|
|
|
/// Set the priority of the tasks when operating on a networking device defined by `name` to be
|
|
/// `priority`.
|
|
pub fn priority(mut self, name: String, priority: u64) -> NetworkResourceBuilder {
|
|
self.cgroup
|
|
.resources
|
|
.network
|
|
.priorities
|
|
.push(NetworkPriority { name, priority });
|
|
self
|
|
}
|
|
|
|
/// Finish the construction of the network resources of a control group.
|
|
pub fn done(self) -> CgroupBuilder {
|
|
self.cgroup
|
|
}
|
|
}
|
|
|
|
/// A builder that configures the hugepages controller of a control group.
|
|
pub struct HugepagesResourceBuilder {
|
|
cgroup: CgroupBuilder,
|
|
}
|
|
|
|
impl HugepagesResourceBuilder {
|
|
/// Limit the usage of certain hugepages (determined by `size`) to be at most `limit` bytes.
|
|
pub fn limit(mut self, size: String, limit: u64) -> HugepagesResourceBuilder {
|
|
self.cgroup
|
|
.resources
|
|
.hugepages
|
|
.limits
|
|
.push(HugePageResource { size, limit });
|
|
self
|
|
}
|
|
|
|
/// Finish the construction of the network resources of a control group.
|
|
pub fn done(self) -> CgroupBuilder {
|
|
self.cgroup
|
|
}
|
|
}
|
|
|
|
/// A builder that configures the blkio controller of a control group.
|
|
pub struct BlkIoResourcesBuilder {
|
|
cgroup: CgroupBuilder,
|
|
throttling_iops: bool,
|
|
}
|
|
|
|
impl BlkIoResourcesBuilder {
|
|
gen_setter!(blkio, BlkIoController, set_weight, weight, u16);
|
|
gen_setter!(blkio, BlkIoController, set_leaf_weight, leaf_weight, u16);
|
|
|
|
/// Set the weight of a certain device.
|
|
pub fn weight_device(
|
|
mut self,
|
|
major: u64,
|
|
minor: u64,
|
|
weight: Option<u16>,
|
|
leaf_weight: Option<u16>,
|
|
) -> BlkIoResourcesBuilder {
|
|
self.cgroup
|
|
.resources
|
|
.blkio
|
|
.weight_device
|
|
.push(BlkIoDeviceResource {
|
|
major,
|
|
minor,
|
|
weight,
|
|
leaf_weight,
|
|
});
|
|
self
|
|
}
|
|
|
|
/// Start configuring the I/O operations per second metric.
|
|
pub fn throttle_iops(mut self) -> BlkIoResourcesBuilder {
|
|
self.throttling_iops = true;
|
|
self
|
|
}
|
|
|
|
/// Start configuring the bytes per second metric.
|
|
pub fn throttle_bps(mut self) -> BlkIoResourcesBuilder {
|
|
self.throttling_iops = false;
|
|
self
|
|
}
|
|
|
|
/// Limit the read rate of the current metric for a certain device.
|
|
pub fn read(mut self, major: u64, minor: u64, rate: u64) -> BlkIoResourcesBuilder {
|
|
let throttle = BlkIoDeviceThrottleResource { major, minor, rate };
|
|
if self.throttling_iops {
|
|
self.cgroup
|
|
.resources
|
|
.blkio
|
|
.throttle_read_iops_device
|
|
.push(throttle);
|
|
} else {
|
|
self.cgroup
|
|
.resources
|
|
.blkio
|
|
.throttle_read_bps_device
|
|
.push(throttle);
|
|
}
|
|
self
|
|
}
|
|
|
|
/// Limit the write rate of the current metric for a certain device.
|
|
pub fn write(mut self, major: u64, minor: u64, rate: u64) -> BlkIoResourcesBuilder {
|
|
let throttle = BlkIoDeviceThrottleResource { major, minor, rate };
|
|
if self.throttling_iops {
|
|
self.cgroup
|
|
.resources
|
|
.blkio
|
|
.throttle_write_iops_device
|
|
.push(throttle);
|
|
} else {
|
|
self.cgroup
|
|
.resources
|
|
.blkio
|
|
.throttle_write_bps_device
|
|
.push(throttle);
|
|
}
|
|
self
|
|
}
|
|
|
|
/// Finish the construction of the blkio resources of a control group.
|
|
pub fn done(self) -> CgroupBuilder {
|
|
self.cgroup
|
|
}
|
|
}
|