Mic92/lxc-config
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

default.conf: add cgroup restrictions

Browse Source
This commit is contained in:
root 2014-10-24 00:09:01 +02:00
parent 6656e70364
commit 4ad6fa387f
1 changed files with 21 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
default.conf
View File

@ -5,11 +5,31 @@ lxc.cap.drop = sys_module mac_admin mac_override sys_time net_admin
lxc.network.type = veth lxc.network.type = veth
lxc.network.link = br0 lxc.network.link = br0
lxc.network.flags = up lxc.network.flags = up
lxc.network.name =eth0 lxc.network.name = eth0
lxc.network.mtu = 1500 lxc.network.mtu = 1500
lxc.network.ipv4.gateway = auto lxc.network.ipv4.gateway = auto
lxc.network.ipv6.gateway = 2a01:4f8:210:31fd:1::1 lxc.network.ipv6.gateway = 2a01:4f8:210:31fd:1::1
# cgroups
lxc.cgroup.devices.deny = a
lxc.cgroup.devices.allow = c *:* m
lxc.cgroup.devices.allow = b *:* m
lxc.cgroup.devices.allow = c 1:3 rwm
lxc.cgroup.devices.allow = c 1:5 rwm
lxc.cgroup.devices.allow = c 1:7 rwm
lxc.cgroup.devices.allow = c 1:8 rwm
lxc.cgroup.devices.allow = c 1:9 rwm
lxc.cgroup.devices.allow = c 4:1 rwm
lxc.cgroup.devices.allow = c 5:0 rwm
lxc.cgroup.devices.allow = c 5:1 rwm
lxc.cgroup.devices.allow = c 5:2 rwm
lxc.cgroup.devices.allow = c 136:* rwm
lxc.cgroup.memory.soft_limit_in_bytes = 1500M
lxc.cgroup.memory.limit_in_bytes = 2000M
lxc.cgroup.cpu.shares = 256
lxc.cgroup.blkio.weight = 500
lxc.mount.entry = /data/pacman-pkg-cache var/cache/pacman/pkg none bind 0 0 lxc.mount.entry = /data/pacman-pkg-cache var/cache/pacman/pkg none bind 0 0
lxc.mount.entry = /data/repo srv/repo none bind,ro 0 0 lxc.mount.entry = /data/repo srv/repo none bind,ro 0 0
lxc.mount.entry = /run/systemd/journal mnt/journal none bind,ro,create=dir 0 0 lxc.mount.entry = /run/systemd/journal mnt/journal none bind,ro,create=dir 0 0