Upgrade to Pro — share decks privately, control downloads, hide ads and more …

SRE讀書會#3 深入剖析Kubernates_CH6 白話容器基礎（二）-隔離與限制

Avatar for 曾義格 曾義格
March 21, 2019
67
0

SRE讀書會#3 深入剖析Kubernates_CH6 白話容器基礎（二）-隔離與限制

Avatar for 曾義格

曾義格

March 21, 2019

More Decks by 曾義格

See All by 曾義格
SRE part2 Continuous Delivery CH4 Implementing a testing strategy
Avatar for 曾義格 tsengeagle
0
150

Featured

See All Featured
WENDY [Excerpt]
Avatar for Tessa Abrams tessaabrams
10
37k
Noah Learner - AI + Me: how we built a GSC Bulk Export data pipeline
Avatar for Tech SEO Connect techseoconnect
PRO
0
160
How to Build an AI Search Optimization Roadmap - Criteria and Steps to Take #SEOIRL
Avatar for Aleyda Solis aleyda
1
2k
XXLCSS - How to scale CSS and keep your sanity
Avatar for Zaharenia Atzitzikaki sugarenia
250
1.3M
The Illustrated Guide to Node.js - THAT Conference 2024
Avatar for David Neal reverentgeek
1
330
Leadership Guide Workshop - DevTernity 2021
Avatar for David Neal reverentgeek
1
260
The innovator’s Mindset - 
Leading Through an Era of Exponential Change - McGill University 2025
Avatar for Jean-Marc De Jonghe jdejongh
PRO
1
160
A better future with KSS
Avatar for Kyle Neath kneath
240
18k
Have SEOs Ruined the Internet? - User Awareness of SEO in 2025
Avatar for Akash Hashmi akashhashmi
0
310
Learning to Love Humans: Emotional Interface Design
Avatar for Aarron Walter aarron
275
41k
Discover your Explorer Soul
Avatar for Emna emna__ayadi
2
1.1k
RailsConf & Balkan Ruby 2019: The Past, Present, and Future of Rails at GitHub
Avatar for Eileen M. Uchitelle eileencodes
141
35k

Transcript

  1. 隔離與限制 Cgroup

  2. Linux Control Group • ⽤用途：限制處理理序可使⽤用的資源 • 提供的功能： • 限制 •

    優先權控制 • 統計稽核 • 控制-恢復或是暫停處理理程序 • 以file system的⽅方式呈現`/sys/fs/cgroup/` • blkio • cpu • memory • net_cls • 等等...

  3. 限制cpu使⽤用 • 當前使⽤用者的限制在 `/sys/fs/cgroup/<資源>/user.slice/` • docker啟動之後，會在 `/sys/fs/cgroup/<資源>/docker` 下 建立容器的限制組， •

    demo

  4. docker • —cpu-quota • —cpu-period • —memory

  5. 問題 • lxcfs • free • top-記憶體、cpu數、cpu使⽤用率