Skip to content

Instantly share code, notes, and snippets.

@sameo
Last active July 5, 2021 11:36
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save sameo/ef52ac026190ff5f4f765f3de64621b6 to your computer and use it in GitHub Desktop.
Save sameo/ef52ac026190ff5f4f765f3de64621b6 to your computer and use it in GitHub Desktop.
Kata Containers host cgroups

sandbox_cgroup_only = false

Sandbox creation

  • No sandbox cgroup manager is created
  • Cgroup for sandbox container is created
  • Takes linux:cgroup_parent as the cgroup root
  • Creates v1 cgroup hierearchy: /sys/fs/cgroup/memory/vc/<linux:cgroup_parent>/kata_<sandbox_id>/, etc
  • Add the process linked to the sandbox container to the cgroups.
  • Only adds the CPU resources at first

Container addition

  • A new cgroup is created for the container
  • Creates v1 cgroup hierearchy: /sys/fs/cgroup/memory/vc/<linux:cgroup_parent>/kata_<sandbox_id>/, etc
  • Add the process linked to the sandbox container to the cgroups.
  • Only adds the CPU resources at first
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment