Upgrade to Pro — share decks privately, control downloads, hide ads and more …
Sign up for free

SRE讀書會#3 深入剖析Kubernates_CH6 白話容器基礎（二）-隔離與限制

Avatar for 曾義格 曾義格
March 21, 2019
94
0

SRE讀書會#3 深入剖析Kubernates_CH6 白話容器基礎（二）-隔離與限制

Avatar for 曾義格

曾義格

March 21, 2019

More Decks by 曾義格

See All by 曾義格
SRE part2 Continuous Delivery CH4 Implementing a testing strategy
Avatar for 曾義格 tsengeagle
0
170

Featured

See All Featured
BBQ
Avatar for Matthew Crist matthewcrist
90
10k
Java REST API Framework Comparison - PWX 2021
Avatar for Matt Raible mraible
34
9.8k
Music & Morning Musume
Avatar for Bryan Veloso bryan
48
7.4k
Lightning talk: Run Django tests with GitHub Actions
Avatar for Sarah Abderemane sabderemane
0
300
The MySQL Ecosystem @ GitHub 2015
Avatar for Sam Lambert samlambert
251
13k
Public Speaking Without Barfing On Your Shoes - THAT 2023
Avatar for David Neal reverentgeek
1
600
Introduction to Domain-Driven Design and Collaborative software design
Avatar for Kenny Baas-Schwegler baasie
1
1k
Lessons Learnt from Crawling 1000+ Websites
Avatar for Charles Meaden charlesmeaden
PRO
1
1.6k
WENDY [Excerpt]
Avatar for Tessa Abrams tessaabrams
14
40k
B2B Lead Gen: Tactics, Traps & Triumph
Avatar for Sophie Logan marketingsoph
1
280
jQuery: Nuts, Bolts and Bling
Avatar for Doug Neiner dougneiner
66
8.6k
Automating Front-end Workflow
Avatar for Addy Osmani addyosmani
1369
210k

Transcript

  1. 隔離與限制 Cgroup

  2. Linux Control Group • ⽤用途：限制處理理序可使⽤用的資源 • 提供的功能： • 限制 •

    優先權控制 • 統計稽核 • 控制-恢復或是暫停處理理程序 • 以file system的⽅方式呈現`/sys/fs/cgroup/` • blkio • cpu • memory • net_cls • 等等...

  3. 限制cpu使⽤用 • 當前使⽤用者的限制在 `/sys/fs/cgroup/<資源>/user.slice/` • docker啟動之後，會在 `/sys/fs/cgroup/<資源>/docker` 下 建立容器的限制組， •

    demo

  4. docker • —cpu-quota • —cpu-period • —memory

  5. 問題 • lxcfs • free • top-記憶體、cpu數、cpu使⽤用率