-
Notifications
You must be signed in to change notification settings - Fork 22
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
(#2215925) When Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit #397
(#2215925) When Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit #397
Conversation
Tracker - 2215925 The following commits meet all requirements
|
@dtardon CentOS CI is very unhappy, in results I see failures all over the place and but I am not sure if they can be attributed to this change. Can you please force push to retrigger the CI? |
…nds in a subcgroup of the unit Otherwise we might conflict with the "no-processes-in-inner-cgroup" rule of cgroupsv2. Consider nspawn starting up and initializing its cgroup hierarchy with "supervisor/" and "payload/" as subcgroup, with itself moved into the former and the payload into the latter. Now, if an ExecStartPre= is run right after it cannot be placed in the main cgroup, because that is now in inner cgroup with populated children. Hence, let's run these helpers in another sub-cgroup .control/ below it. This is somewhat ugly since it weakens the clear separation of ownership, but given that this is an explicit contract, and double opt-in should be acceptable. Fixes: #10482 (cherry picked from commit 78f9320) Resolves: #2215925
(cherry picked from commit 077c40b) Related: #2215925
adea707
to
2fc2acc
Compare
The fail is not related to this PR, I've seen it in other PRs as well. I'll try to figure out what's going on. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
Resolves: #2215925