mirror of
https://github.com/containers/podman.git
synced 2025-07-15 03:02:52 +08:00
Don't limit the size on /run for systemd based containers
We had a customer incident where they ran out of space on /run. If you don't specify size, it will be still limited to 50% or memory available in the cgroup the container is running in. If the cgroup is unlimited then the /run will be limited to 50% of the total memory on the system. Also /run is mounted on the host as exec, so no reason for us to mount it noexec. Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
This commit is contained in:
@ -88,17 +88,11 @@ func parseVolumes(volumeFlag, mountFlag, tmpfsFlag []string, addReadOnlyTmpfs bo
|
||||
if _, ok := unifiedVolumes[dest]; ok {
|
||||
continue
|
||||
}
|
||||
localOpts := options
|
||||
if dest == "/run" {
|
||||
localOpts = append(localOpts, "noexec", "size=65536k")
|
||||
} else {
|
||||
localOpts = append(localOpts, "exec")
|
||||
}
|
||||
unifiedMounts[dest] = spec.Mount{
|
||||
Destination: dest,
|
||||
Type: TypeTmpfs,
|
||||
Source: "tmpfs",
|
||||
Options: localOpts,
|
||||
Options: options,
|
||||
}
|
||||
}
|
||||
}
|
||||
|
@ -571,7 +571,7 @@ func (c *Container) setupSystemd(mounts []spec.Mount, g generate.Generator) erro
|
||||
Destination: dest,
|
||||
Type: "tmpfs",
|
||||
Source: "tmpfs",
|
||||
Options: append(options, "tmpcopyup", "size=65536k"),
|
||||
Options: append(options, "tmpcopyup"),
|
||||
}
|
||||
g.AddMount(tmpfsMnt)
|
||||
}
|
||||
|
Reference in New Issue
Block a user