func (p *LinuxContainerPool) Restore(snapshot io.Reader) (linux_backend.Container, error) { var containerSnapshot linux_backend.ContainerSnapshot err := json.NewDecoder(snapshot).Decode(&containerSnapshot) if err != nil { return nil, err } id := containerSnapshot.ID log.Println("restoring", id) resources := containerSnapshot.Resources err = p.uidPool.Remove(resources.UID) if err != nil { return nil, err } err = p.networkPool.Remove(resources.Network) if err != nil { p.uidPool.Release(resources.UID) return nil, err } for _, port := range resources.Ports { err = p.portPool.Remove(port) if err != nil { p.uidPool.Release(resources.UID) p.networkPool.Release(resources.Network) for _, port := range resources.Ports { p.portPool.Release(port) } return nil, err } } containerPath := path.Join(p.depotPath, id) cgroupsManager := cgroups_manager.New("/tmp/warden/cgroup", id) bandwidthManager := bandwidth_manager.New(containerPath, id, p.runner) container := linux_backend.NewLinuxContainer( id, containerSnapshot.Handle, containerPath, containerSnapshot.Properties, containerSnapshot.GraceTime, linux_backend.NewResources( resources.UID, resources.Network, resources.Ports, ), p.portPool, p.runner, cgroupsManager, p.quotaManager, bandwidthManager, ) err = container.Restore(containerSnapshot) if err != nil { return nil, err } return container, nil }
. "github.com/onsi/gomega" "github.com/cloudfoundry-incubator/warden-linux/linux_backend/cgroups_manager" ) var _ = Describe("Container cgroups", func() { var cgroupsPath string var cgroupsManager *cgroups_manager.ContainerCgroupsManager BeforeEach(func() { tmpdir, err := ioutil.TempDir(os.TempDir(), "some-cgroups") Expect(err).ToNot(HaveOccurred()) cgroupsPath = tmpdir cgroupsManager = cgroups_manager.New(cgroupsPath, "some-container-id") }) Describe("setting", func() { It("writes the value to the name under the subsytem", func() { containerMemoryCgroupsPath := path.Join(cgroupsPath, "memory", "instance-some-container-id") err := os.MkdirAll(containerMemoryCgroupsPath, 0755) Expect(err).ToNot(HaveOccurred()) err = cgroupsManager.Set("memory", "memory.limit_in_bytes", "42") Expect(err).ToNot(HaveOccurred()) value, err := ioutil.ReadFile(path.Join(containerMemoryCgroupsPath, "memory.limit_in_bytes")) Expect(err).ToNot(HaveOccurred()) Expect(string(value)).To(Equal("42")) })
func (p *LinuxContainerPool) Create(spec warden.ContainerSpec) (linux_backend.Container, error) { uid, err := p.uidPool.Acquire() if err != nil { return nil, err } network, err := p.networkPool.Acquire() if err != nil { p.uidPool.Release(uid) return nil, err } id := <-p.containerIDs containerPath := path.Join(p.depotPath, id) cgroupsManager := cgroups_manager.New("/tmp/warden/cgroup", id) bandwidthManager := bandwidth_manager.New(containerPath, id, p.runner) handle := id if spec.Handle != "" { handle = spec.Handle } container := linux_backend.NewLinuxContainer( id, handle, containerPath, spec.Properties, spec.GraceTime, linux_backend.NewResources(uid, network, []uint32{}), p.portPool, p.runner, cgroupsManager, p.quotaManager, bandwidthManager, ) create := &exec.Cmd{ Path: path.Join(p.binPath, "create.sh"), Args: []string{containerPath}, Env: []string{ "id=" + container.ID(), "rootfs_path=" + p.rootFSPath, fmt.Sprintf("user_uid=%d", uid), fmt.Sprintf("network_host_ip=%s", network.HostIP()), fmt.Sprintf("network_container_ip=%s", network.ContainerIP()), "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin", }, } err = p.runner.Run(create) if err != nil { p.uidPool.Release(uid) p.networkPool.Release(network) return nil, err } err = p.writeBindMounts(containerPath, spec.BindMounts) if err != nil { return nil, err } return container, nil }
func (p *LinuxContainerPool) Create(spec warden.ContainerSpec) (linux_backend.Container, error) { uid, err := p.uidPool.Acquire() if err != nil { return nil, err } network, err := p.networkPool.Acquire() if err != nil { p.uidPool.Release(uid) return nil, err } id := <-p.containerIDs containerPath := path.Join(p.depotPath, id) cgroupsManager := cgroups_manager.New("/tmp/warden/cgroup", id) bandwidthManager := bandwidth_manager.New(containerPath, id, p.runner) handle := id if spec.Handle != "" { handle = spec.Handle } rootFSPath := p.rootFSPath rootFSRaw := false if strings.HasPrefix(spec.RootFSPath, imagePrefix) { repoSegments := strings.SplitN(spec.RootFSPath[len(imagePrefix):], ":", 2) repoName := repoSegments[0] tag := "latest" if len(repoSegments) >= 2 { tag = repoSegments[1] } imageID, err := p.repoFetcher.Fetch(repoName, tag) if err != nil { return nil, err } err = p.graphDriver.Create(id, imageID) if err != nil { return nil, err } rootFSPath, err = p.graphDriver.Get(id, "") if err != nil { return nil, err } rootFSRaw = true } else if spec.RootFSPath != "" { rootFSPath = spec.RootFSPath } container := linux_backend.NewLinuxContainer( id, handle, containerPath, spec.Properties, spec.GraceTime, linux_backend.NewResources(uid, network, []uint32{}), p.portPool, p.runner, cgroupsManager, p.quotaManager, bandwidthManager, ) create := &exec.Cmd{ Path: path.Join(p.binPath, "create.sh"), Args: []string{containerPath}, Env: []string{ "id=" + container.ID(), "rootfs_path=" + rootFSPath, fmt.Sprintf("rootfs_raw=%v", rootFSRaw), fmt.Sprintf("user_uid=%d", uid), fmt.Sprintf("network_host_ip=%s", network.HostIP()), fmt.Sprintf("network_container_ip=%s", network.ContainerIP()), "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin", }, } err = p.runner.Run(create) if err != nil { p.uidPool.Release(uid) p.networkPool.Release(network) return nil, err } err = p.writeBindMounts(containerPath, spec.BindMounts) if err != nil { return nil, err } return container, nil }