mirror of
https://github.com/k3s-io/kubernetes.git
synced 2025-07-23 11:50:44 +00:00
Config root_maxkeys to 1000000, root_maxbytes to 25000000
This commit is contained in:
parent
025b017277
commit
303d5a16cb
@ -21,6 +21,7 @@ import (
|
|||||||
"crypto/tls"
|
"crypto/tls"
|
||||||
"errors"
|
"errors"
|
||||||
"fmt"
|
"fmt"
|
||||||
|
"io/ioutil"
|
||||||
"math/rand"
|
"math/rand"
|
||||||
"net"
|
"net"
|
||||||
"net/http"
|
"net/http"
|
||||||
@ -668,6 +669,22 @@ func RunKubelet(kcfg *KubeletConfig) error {
|
|||||||
|
|
||||||
util.ApplyRLimitForSelf(kcfg.MaxOpenFiles)
|
util.ApplyRLimitForSelf(kcfg.MaxOpenFiles)
|
||||||
|
|
||||||
|
// TODO(dawnchen): remove this once we deprecated old debian containervm images.
|
||||||
|
// This is a workaround for issue: https://github.com/opencontainers/runc/issues/726
|
||||||
|
// The current chosen number is consistent with most of other os dist.
|
||||||
|
const maxkey_path = "/proc/sys/kernel/keys/root_maxkeys"
|
||||||
|
glog.Infof("Setting keys quota in %s to %d", maxkey_path, 1000000)
|
||||||
|
err = ioutil.WriteFile(maxkey_path, []byte(fmt.Sprintf("%d", uint32(1000000))), 0644)
|
||||||
|
if err != nil {
|
||||||
|
return fmt.Errorf("failed to update %s: %v", maxkey_path, err)
|
||||||
|
}
|
||||||
|
const maxbyte_path = "/proc/sys/kernel/keys/root_maxbytes"
|
||||||
|
glog.Infof("Setting keys bytes in %s to %d", maxbyte_path, 25000000)
|
||||||
|
err = ioutil.WriteFile(maxbyte_path, []byte(fmt.Sprintf("%d", uint32(25000000))), 0644)
|
||||||
|
if err != nil {
|
||||||
|
return fmt.Errorf("failed to update %s: %v", maxbyte_path, err)
|
||||||
|
}
|
||||||
|
|
||||||
// process pods and exit.
|
// process pods and exit.
|
||||||
if kcfg.Runonce {
|
if kcfg.Runonce {
|
||||||
if _, err := k.RunOnce(podCfg.Updates()); err != nil {
|
if _, err := k.RunOnce(podCfg.Updates()); err != nil {
|
||||||
|
Loading…
Reference in New Issue
Block a user