External-Mirrors/kubespray
2
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-02-28 08:18:44 -03:30
Code Issues Packages Projects Releases Wiki Activity

Add LimitMEMLOCK parameter configuration in containerd.service (#9269)

Browse Source 
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>

Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
This commit is contained in:
ERIK
2022-09-13 17:51:06 +08:00
committed by GitHub
parent 08bfa0b18f
commit 7c2fb227f4
2 changed files with 10 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
roles/container-engine/containerd/defaults/main.yml
View File

@@ -46,3 +46,9 @@ containerd_registry_auth: []
# - registry: 10.0.0.2:5000 # - registry: 10.0.0.2:5000
# username: user # username: user
# password: pass # password: pass
# Configure containerd service
containerd_limit_proc_num: "infinity"
containerd_limit_core: "infinity"
containerd_limit_open_file_num: "infinity"
containerd_limit_mem_lock: "infinity"

7
roles/container-engine/containerd/templates/containerd.service.j2
View File

@@ -28,9 +28,10 @@ Restart=always
RestartSec=5 RestartSec=5
# Having non-zero Limit*s causes performance problems due to accounting overhead # Having non-zero Limit*s causes performance problems due to accounting overhead
# in the kernel. We recommend using cgroups to do container-local accounting. # in the kernel. We recommend using cgroups to do container-local accounting.
LimitNPROC=infinity LimitNPROC={{ containerd_limit_proc_num }}
LimitCORE=infinity LimitCORE={{ containerd_limit_core }}
LimitNOFILE=infinity LimitNOFILE={{ containerd_limit_open_file_num }}
LimitMEMLOCK={{ containerd_limit_mem_lock }}
# Comment TasksMax if your systemd version does not supports it. # Comment TasksMax if your systemd version does not supports it.
# Only systemd 226 and above support this version. # Only systemd 226 and above support this version.
TasksMax=infinity TasksMax=infinity