Go package for creating, managing, inspecting, and destroying cgroups. The resources format for settings on the cgroup uses the OCI runtime-spec found here.
This creates a new cgroup using a static path for all subsystems under /test.
- /sys/fs/cgroup/cpu/test
- /sys/fs/cgroup/memory/test
- etc....
It uses a single hierarchy and specifies cpu shares as a resource constraint and uses the v1 implementation of cgroups.
shares:=uint64(100)
control, err:=cgroups.New(cgroups.V1, cgroups.StaticPath("/test"), &specs.LinuxResources{
CPU: &specs.LinuxCPU{
Shares: &shares,
},
})
defercontrol.Delete()control, err:=cgroups.New(cgroups.Systemd, cgroups.Slice("system.slice", "runc-test"), &specs.LinuxResources{
CPU: &specs.CPU{
Shares: &shares,
},
})control, err=cgroups.Load(cgroups.V1, cgroups.StaticPath("/test"))iferr:=control.Add(cgroups.Process{Pid:1234}); err!=nil {
}To update the resources applied in the cgroup
shares=uint64(200)
iferr:=control.Update(&specs.LinuxResources{
CPU: &specs.LinuxCPU{
Shares: &shares,
},
}); err!=nil {
}iferr:=control.Freeze(); err!=nil {
}
iferr:=control.Thaw(); err!=nil {
}processes, err:=control.Processes(cgroups.Devices, recursive)stats, err:=control.Stat()By adding cgroups.IgnoreNotExist all non-existent files will be ignored, e.g. swap memory stats without swap enabled
stats, err:=control.Stat(cgroups.IgnoreNotExist)This allows you to take processes from one cgroup and move them to another.
err:=control.MoveTo(destination)subCgroup, err:=control.New("child", resources)This allows you to get notified by an eventfd for v1 memory cgroups events.
event:=cgroups.MemoryThresholdEvent(50*1024*1024, false)
efd, err:=control.RegisterMemoryEvent(event)event:=cgroups.MemoryPressureEvent(cgroups.MediumPressure, cgroups.DefaultMode)
efd, err:=control.RegisterMemoryEvent(event)efd, err:=control.OOMEventFD()
// or by using RegisterMemoryEventevent:=cgroups.OOMEvent()
efd, err:=control.RegisterMemoryEvent(event)varcgroupV2boolifcgroups.Mode() ==cgroups.Unified {
cgroupV2=true
}This creates a new systemd v2 cgroup slice. Systemd slices consider "-" a special character, so the resulting slice would be located here on disk:
- /sys/fs/cgroup/my.slice/my-cgroup.slice/my-cgroup-abc.slice
import (
cgroupsv2 "github.com/KubrickLiu/cgroups/v2"
specs "github.com/opencontainers/runtime-spec/specs-go"
)
res:= cgroupsv2.Resources{}
// dummy PID of -1 is used for creating a "general slice" to be used as a parent cgroup.// see https://github.com/KubrickLiu/cgroups/blob/1df78138f1e1e6ee593db155c6b369466f577651/v2/manager.go#L732-L735m, err:=cgroupsv2.NewSystemd("/", "my-cgroup-abc.slice", -1, &res)
iferr!=nil {
returnerr
}m, err:=cgroupsv2.LoadSystemd("/", "my-cgroup-abc.slice")
iferr!=nil {
returnerr
}m, err:=cgroupsv2.LoadSystemd("/", "my-cgroup-abc.slice")
iferr!=nil {
returnerr
}
err=m.DeleteSystemd()
iferr!=nil {
returnerr
}All static path should not include /sys/fs/cgroup/ prefix, it should start with your own cgroups name
Cgroups is a containerd sub-project, licensed under the Apache 2.0 license. As a containerd sub-project, you will find the:
information in our containerd/project repository.