Forum Debian Users Gang

# dpkg -l |grep systemd
ii  libsystemd-daemon0:i386                       44-12                            i386         systemd utility library
ii  libsystemd-login0:i386                        44-12                            i386         systemd login utility library

cgcreate -a morfik -g memory,cpu:morfiki

sudo cgcreate -a $USER -g memory,cpu:groupname
$ ls -l /sys/fs/cgroup/memory/groupname

root:~# CGDIR='/sys/fs/cgroup/'
root:~# mkdir -p $CGDIR/cpu/users/opera
root:~# echo '1'> $CGDIR/cpu/users/opera/cgroup.clone_children
root:~# echo '300' > $CGDIR/cpu/users/opera/cpu.shares
root:~# mkdir -p $CGDIR/cpuacct/users/opera
root:~# mkdir -p $CGDIR/cpuset/users/opera
root:~# mkdir -p $CGDIR/memory/users/opera
root:~# echo '1'> $CGDIR/memory/users/opera/cgroup.clone_children
root:~# echo '200m' >   $CGDIR/memory/users/opera/memory.limit_in_bytes
root:~# echo '200m' >   $CGDIR/memory/users/opera/memory.soft_limit_in_bytes
root:~# echo '32m' > $CGDIR/memory/users/opera/memory.kmem.tcp.limit_in_bytes
-su: /sys/fs/cgroup//memory/users/opera/memory.kmem.tcp.limit_in_bytes: Permission denied
root:~# echo '32m' > $CGDIR/memory/users/opera/memory.kmem.tcp.limit_in_bytes
-su: /sys/fs/cgroup//memory/users/opera/memory.kmem.tcp.limit_in_bytes: Permission denied
root:~# echo  '200m' >$CGDIR/memory/users/opera/memory.memsw.limit_in_bytes
-su: /sys/fs/cgroup//memory/users/opera/memory.memsw.limit_in_bytes: Permission denied
root:~# echo  '200m' >$CGDIR/memory/users/opera/memory.memsw.limit_in_bytes
-su: /sys/fs/cgroup//memory/users/opera/memory.memsw.limit_in_bytes: Permission denied
root:~# mkdir -p $CGDIR/net_cls/users/opera
root:~# echo '1' > $CGDIR/net_cls/users/opera/cgroup.clone_children
root:~# echo '0x1004' > $CGDIR/net_cls/users/opera/net_cls.classid
root:~# cat $CGDIR/memory/users/opera/memory.limit_in_bytes
209715200

mkdir -p /sys/fs/cgroup/memory/morfikownia/browsers
mkdir -p /sys/fs/cgroup/cpu/morfikownia/browsers

/etc/init.d/cgconfig restart

*:opera*                                   cpu,memory,net_cls    users/opera/
*:opera                                    cpu,memory,net_cls   users/opera/

# cgrulesengd 
Error: libcgroup failed to initialize rulescache from /etc/cgrules.conf. No such file or directory

cat /proc/`pidof opera`/cgroup
2:perf_event,blkio,net_cls,freezer,devices,memory,cpuacct,cpu,cpuset:/

root:/sys/fs/cgroup/memory/users/opera# cat memory.limit_in_bytes 
209715200

cgrulesengd -v -f /var/log/cgrulesengd

Proceeding with PID 6330
Rule: *:opera*
  UID: any
  GID: any
  DEST: users/opera/
  CONTROLLERS:
    cpu
    memory
    net_cls

Rule: *:opera
  UID: any
  GID: any
  DEST: users/opera/
  CONTROLLERS:
    cpu
    memory
    net_cls

Started the CGroup Rules Engine Daemon.
....
Cgroup change for PID: 6583, UID: 1000, GID: 1000, PROCNAME: /usr/bin/opera FAILED! (Error Code: 50002)
Cgroup change for PID: 6583, UID: 1000, GID: 1000, PROCNAME: /usr/bin/opera FAILED! (Error Code: 50002)
Cgroup change for PID: 6583, UID: 1000, GID: 1000, PROCNAME: /usr/lib/opera/opera FAILED! (Error Code: 50002)

root:~# find / -iname *cgconfig*
/usr/sbin/cgconfigparser
/usr/share/man/man8/cgconfigparser.8.gz
/usr/share/man/man5/cgconfig.conf.5.gz
/usr/share/doc/cgroup-bin/examples/cgconfig.sysconfig
/usr/share/doc/cgroup-bin/examples/cgconfig.gz
/usr/share/doc/cgroup-bin/examples/cgconfig.conf
root:~# find / -iname *cgred*
/usr/share/man/man5/cgred.conf.5.gz
/usr/share/doc/cgroup-bin/examples/cgred
/usr/share/doc/cgroup-bin/examples/cgred.conf

#!/bin/bash
#
# Start/Stop the workload manager
#
# Copyright IBM Corporation. 2008
#
# Authors:     Balbir Singh <balbir@linux.vnet.ibm.com>
# This program is free software; you can redistribute it and/or modify it
# under the terms of version 2.1 of the GNU Lesser General Public License
# as published by the Free Software Foundation.
#
# This program is distributed in the hope that it would be useful, but
# WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
#
# cgconfig Control Groups Configuration Startup
# chkconfig: - 5 95
# description: This script runs the cgconfigparser utility to parse and setup
#              the control group filesystem. It uses /etc/cgconfig.conf
#              and parses the configuration specified in there.

### BEGIN INIT INFO
# Provides:             cgconfig
# Required-Start:
# Required-Stop:
# Should-Start:         ypbind
# Should-Stop:          ypbind
# Short-Description:    Create and setup control group filesystem(s)
# Description:          Create and setup control group filesystem(s)
### END INIT INFO

# get correct location of binaries from configure
prefix=/usr;exec_prefix=${prefix};sbindir=${exec_prefix}/sbin
CGCONFIGPARSER_BIN=$sbindir/cgconfigparser
CONFIG_FILE=/etc/cgconfig.conf
servicename=cgconfig
lockfile=/var/lock/subsys/$servicename

#
# Source LSB routines
#
. /lib/lsb/init-functions

# read the config
CREATE_DEFAULT=yes
if [ -e /etc/sysconfig/cgconfig ]; then
        . /etc/sysconfig/cgconfig
fi

create_default_groups() {
    defaultcgroup=

        if [ -f /etc/cgrules.conf ]; then
        grep -m1 '^\*[[:space:]]\+' /etc/cgrules.conf | \
            read user ctrl defaultcgroup
            if [ -n "$defaultcgroup" -a "$defaultcgroup" = "*" ]; then
                log_warning_msg "/etc/cgrules.conf incorrect"
                log_warning_msg "Overriding it"
                defaultcgroup=
            fi
        fi

        if [ -z $defaultcgroup ]
        then
            defaultcgroup=sysdefault/
        fi

        #
        # Find all mounted subsystems and create comma-separated list
        # of controllers.
        #
        controllers=`lssubsys 2>/dev/null | tr '\n' ',' | sed s/.$//`

        #
        # Create the default group, ignore errors when the default group
        # already exists.
        #
        cgcreate -f 664 -d 775 -g $controllers:$defaultcgroup 2>/dev/null

        #
        # special rule for cpusets
        #
        if echo $controllers | grep -q -w cpuset; then
                cpus=`cgget -nv -r cpuset.cpus /`
                cgset -r cpuset.cpus=$cpus $defaultcgroup
                mems=`cgget -nv -r cpuset.mems /`
                cgset -r cpuset.mems=$mems $defaultcgroup
        fi

        #
        # Classify everything to default cgroup. Ignore errors, some processes
        # may exit after ps is run and before cgclassify moves them.
        #
        cgclassify -g $controllers:$defaultcgroup `ps --no-headers -eL o tid` \
                 2>/dev/null || :
}

start() {
        echo -n "Starting cgconfig service: "
    if [ -f "$lockfile" ]; then
            log_warning_msg "lock file already exists"
            return 0
        fi

        if [ $? -eq 0 ]; then
                if [ ! -s $CONFIG_FILE ]; then
                    log_failure_msg $CONFIG_FILE "is not configured"
                    return 6
                fi

                $CGCONFIGPARSER_BIN -l $CONFIG_FILE
                retval=$?
                if [ $retval -ne 0 ]; then
                    log_failure_msg "Failed to parse " $CONFIG_FILE
                    return 1
                fi
        fi

        if [ $CREATE_DEFAULT = "yes" ]; then
                create_default_groups
        fi

        touch "$lockfile"
        retval=$?
        if [ $retval -ne 0 ]; then
            log_failure_msg "Failed to touch $lockfile"
            return 1
        fi
        log_success_msg
        return 0
}

stop() {
    echo -n "Stopping cgconfig service: "
    cgclear
    rm -f "$lockfile"
    log_success_msg
    return 0
}

trapped() {
    #
    # Do nothing
    #
    true
}

usage() {
    echo "$0 <start|stop|restart|condrestart|status>"
    exit 2
}

common() {
    #
    # main script work done here
    #
    trap "trapped ABRT" ABRT
    trap "trapped QUIT" QUIT
    trap "trapped TERM" TERM
    trap "trapped INT"   INT
}

restart() {
    common
    stop
    start
}

RETVAL=0

case $1 in
    'stop')
        common
        stop
        RETVAL=$?
        ;;
    'start')
        common
        start
        RETVAL=$?
        ;;
    'restart'|'reload')
    restart
        RETVAL=$?
        ;;
    'condrestart')
        if [ -f "$lockfile" ]; then
            restart
            RETVAL=$?
        fi
        ;;
    'status')
        if [ -f "$lockfile" ]; then
            echo "Running"
            exit 0
        else
            echo "Stopped"
            exit 3
        fi
    ;;
    *)
        usage
        ;;
esac

exit $RETVAL

#!/bin/bash
#
# Start/Stop the CGroups Rules Engine Daemon
#
# Copyright Red Hat Inc. 2008
#
# Authors:    Steve Olivieri <sjo@redhat.com>
# This program is free software; you can redistribute it and/or modify it
# under the terms of version 2.1 of the GNU Lesser General Public License
# as published by the Free Software Foundation.
# 
# This program is distributed in the hope that it would be useful, but
# WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
#
# cgred        CGroups Rules Engine Daemon
# chkconfig:    - 14 86
# description:    This is a daemon for automatically classifying processes \
#        into cgroups based on UID/GID.
#
# processname: cgrulesengd
# pidfile: /var/run/cgred.pid
#
### BEGIN INIT INFO
# Provides:        cgrulesengd
# Required-Start:    $local_fs $syslog $cgconfig
# Required-Stop:    $local_fs $syslog
# Should-Start:        
# Should-Stop:        
# Short-Description:    start and stop the cgroups rules engine daemon
# Description:        CGroup Rules Engine is a tool for automatically using \
#            cgroups to classify processes
### END INIT INFO

prefix=/usr;exec_prefix=${prefix};sbindir=${exec_prefix}/sbin
CGRED_BIN=$sbindir/cgrulesengd
CGRED_CONF=/etc/cgrules.conf

# Sanity checks
[ -x $CGRED_BIN ] || exit 1

# Source function library & LSB routines
. /etc/rc.d/init.d/functions
. /lib/lsb/init-functions

# Read in configuration options.
if [ -f "/etc/sysconfig/cgred.conf" ] ; then
    . /etc/sysconfig/cgred.conf
    OPTIONS="$NODAEMON $LOG"
    if [ -n "$LOG_FILE" ]; then
        OPTIONS="$OPTIONS --logfile=$LOG_FILE"
    fi
    if [ -n "$SOCKET_USER" ]; then
        OPTIONS="$OPTIONS -u $SOCKET_USER"
    fi
    if [ -n "$SOCKET_GROUP" ]; then
        OPTIONS="$OPTIONS -g $SOCKET_GROUP"
    fi
else
    OPTIONS=""
fi

# For convenience
processname=cgrulesengd
servicename=cgred
lockfile="/var/lock/subsys/$servicename"
pidfile=/var/run/cgred.pid

start()
{
    echo -n $"Starting CGroup Rules Engine Daemon: "
    if [ -f "$lockfile" ]; then
        log_failure_msg "$servicename is already running with PID `cat ${pidfile}`"
        return 0
    fi
    if [ ! -s $CGRED_CONF ]; then
        log_failure_msg "not configured"
        return 6
    fi
    if ! grep "^cgroup" /proc/mounts &>/dev/null; then
        echo
        log_failure_msg $"Cannot find cgroups, is cgconfig service running?"
        return 1
    fi
    daemon --check $servicename --pidfile $pidfile $CGRED_BIN $OPTIONS
    retval=$?
    echo
    if [ $retval -ne 0 ]; then
        return 7
    fi
    touch "$lockfile"
    if [ $? -ne 0 ]; then
        return 1
    fi
    echo "`pidof $processname`" > $pidfile
    return 0
}

stop()
{
    echo -n $"Stopping CGroup Rules Engine Daemon..."
    if [ ! -f $pidfile ]; then
        log_success_msg
        return 0
    fi
    killproc -p $pidfile -TERM "$processname"
    retval=$?
    echo
    if [ $retval -ne 0 ]; then
        return 1
    fi
    rm -f "$lockfile" "$pidfile"
    return 0
}

RETVAL=0

# See how we are called
case "$1" in
    start)
        start
        RETVAL=$?
        ;;
    stop)
        stop
        RETVAL=$?
        ;;
    status)
        status -p $pidfile $servicename
        RETVAL=$?
        ;;
    restart)
        stop
        start
        RETVAL=$?
        ;;
    condrestart)
        if [ -f "$lockfile" ]; then
            stop
            start
            RETVAL=$?
        fi
        ;;
    reload|flash)
        if [ -f "$lockfile" ]; then
            echo $"Reloading rules configuration..."
            kill -s 12 `cat ${pidfile}`
            RETVAL=$?
            if [ $RETVAL -eq 0 ] ; then
                log_success_msg
            else
                log_failure_msg
            fi
        else
            log_failure_msg "$servicename is not running."
        fi
        ;;
    *)
        echo $"Usage: $0 {start|stop|status|restart|condrestart|reload}"
        RETVAL=2
        ;;
esac

exit $RETVAL