mirror of
https://github.com/moby/moby.git
synced 2026-01-11 18:51:37 +00:00
c8930105bc
During review, it was decided to remove `LimitNOFILE` from `docker.service` to rely on the systemd v240 implicit default of `1024:524288`. On supported platforms with systemd prior to v240, packagers will patch the service with an explicit `LimitNOFILE=1024:524288`. - `1024` soft limit is an implicit default, avoiding unexpected breakage. Software that needs a higher limit should request to raise the soft limit for its process. - `524288` hard limit is an implicit default since systemd v240 and is adequate for most processes (_half of the historical limit from `fs.nr_open` of `1048576`_), while 4096 is the implicit default from the kernel (often too low). Individual containers can be started with `--ulimit` when a larger hard limit is required. - The hard limit may not exceed `fs.nr_open` (_which a value of `infinity` will resolve to_). On most systems with systemd v240 or newer, this will resolve to an excessive size of 2^30 (over 1 billion). - When set to `infinity` (usually as the soft limit) software may experience significantly increased resource usage, resulting in a performance regression or runtime failures that are difficult to troubleshoot. - OpenRC current config approach lacks support for different soft/hard limits being set as it adjusts additional limits and `ulimit` does not support mixed usage of `-H` + `-S`. A soft limit of `524288` is not ideal, but 2^19 is much less overhead than 2^30, whilst a hard limit of 4096 would be problematic for Docker. Signed-off-by: Brennan Kinney <5098581+polarathene@users.noreply.github.com>
119 lines
2.9 KiB
Bash
Executable File
119 lines
2.9 KiB
Bash
Executable File
#!/bin/sh
|
|
set -e
|
|
|
|
### BEGIN INIT INFO
|
|
# Provides: docker
|
|
# Required-Start: $syslog $remote_fs
|
|
# Required-Stop: $syslog $remote_fs
|
|
# Should-Start: cgroupfs-mount cgroup-lite
|
|
# Should-Stop: cgroupfs-mount cgroup-lite
|
|
# Default-Start: 2 3 4 5
|
|
# Default-Stop: 0 1 6
|
|
# Short-Description: Create lightweight, portable, self-sufficient containers.
|
|
# Description:
|
|
# Docker is an open-source project to easily create lightweight, portable,
|
|
# self-sufficient containers from any application. The same container that a
|
|
# developer builds and tests on a laptop can run at scale, in production, on
|
|
# VMs, bare metal, OpenStack clusters, public clouds and more.
|
|
### END INIT INFO
|
|
|
|
export PATH=/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sbin:/usr/local/bin
|
|
|
|
BASE=docker
|
|
|
|
# modify these in /etc/default/$BASE (/etc/default/docker)
|
|
DOCKERD=/usr/bin/dockerd
|
|
# This is the pid file managed by docker itself
|
|
DOCKER_PIDFILE=/var/run/$BASE.pid
|
|
# This is the pid file created/managed by start-stop-daemon
|
|
DOCKER_SSD_PIDFILE=/var/run/$BASE-ssd.pid
|
|
DOCKER_LOGFILE=/var/log/$BASE.log
|
|
DOCKER_OPTS=
|
|
DOCKER_DESC="Docker"
|
|
|
|
# Get lsb functions
|
|
. /lib/lsb/init-functions
|
|
|
|
if [ -f /etc/default/$BASE ]; then
|
|
. /etc/default/$BASE
|
|
fi
|
|
|
|
# Check docker is present
|
|
if [ ! -x $DOCKERD ]; then
|
|
log_failure_msg "$DOCKERD not present or not executable"
|
|
exit 1
|
|
fi
|
|
|
|
fail_unless_root() {
|
|
if [ "$(id -u)" != '0' ]; then
|
|
log_failure_msg "$DOCKER_DESC must be run as root"
|
|
exit 1
|
|
fi
|
|
}
|
|
|
|
case "$1" in
|
|
start)
|
|
fail_unless_root
|
|
|
|
touch "$DOCKER_LOGFILE"
|
|
chgrp docker "$DOCKER_LOGFILE"
|
|
|
|
# Only set the hard limit (soft limit should remain as the system default of 1024):
|
|
ulimit -Hn 524288
|
|
|
|
# Having non-zero limits causes performance problems due to accounting overhead
|
|
# in the kernel. We recommend using cgroups to do container-local accounting.
|
|
if [ "$BASH" ]; then
|
|
ulimit -u unlimited
|
|
else
|
|
ulimit -p unlimited
|
|
fi
|
|
|
|
log_begin_msg "Starting $DOCKER_DESC: $BASE"
|
|
start-stop-daemon --start --background \
|
|
--no-close \
|
|
--exec "$DOCKERD" \
|
|
--pidfile "$DOCKER_SSD_PIDFILE" \
|
|
--make-pidfile \
|
|
-- \
|
|
-p "$DOCKER_PIDFILE" \
|
|
$DOCKER_OPTS \
|
|
>> "$DOCKER_LOGFILE" 2>&1
|
|
log_end_msg $?
|
|
;;
|
|
|
|
stop)
|
|
fail_unless_root
|
|
if [ -f "$DOCKER_SSD_PIDFILE" ]; then
|
|
log_begin_msg "Stopping $DOCKER_DESC: $BASE"
|
|
start-stop-daemon --stop --pidfile "$DOCKER_SSD_PIDFILE" --retry 10
|
|
log_end_msg $?
|
|
else
|
|
log_warning_msg "Docker already stopped - file $DOCKER_SSD_PIDFILE not found."
|
|
fi
|
|
;;
|
|
|
|
restart)
|
|
fail_unless_root
|
|
docker_pid=$(cat "$DOCKER_SSD_PIDFILE" 2> /dev/null || true)
|
|
[ -n "$docker_pid" ] \
|
|
&& ps -p $docker_pid > /dev/null 2>&1 \
|
|
&& $0 stop
|
|
$0 start
|
|
;;
|
|
|
|
force-reload)
|
|
fail_unless_root
|
|
$0 restart
|
|
;;
|
|
|
|
status)
|
|
status_of_proc -p "$DOCKER_SSD_PIDFILE" "$DOCKERD" "$DOCKER_DESC"
|
|
;;
|
|
|
|
*)
|
|
echo "Usage: service docker {start|stop|restart|status}"
|
|
exit 1
|
|
;;
|
|
esac
|