stefanschneider

Overly aggressive CFS

We're looking at CPU bandwidth control via CFS:

• https://www.kernel.org/doc/Documentation/scheduler/sched-bwc.txt

Reproduction program

Program does number of iterations, in each iteration we burn CPU in small chunks until we get 5ms of real time spent. On each iteration we also print how much

stefanschneider

#!/bin/bash

# Give the usual warning.
clear;
echo "[INFO] Automated Android root script started.\n\n[WARN] Exploit requires sdk module \"NDK\".\nFor more information, visit the installation guide @ https://goo.gl/E2nmLF\n[INFO] Press Ctrl+C to stop the script if you need to install the NDK module. Waiting 10 seconds...";
sleep 10;
clear;

# Download and extract exploit files.
echo "[INFO] Downloading exploit files from GitHub...";

stefanschneider

// hcs-toy1 project main.go
package main

import (
	"encoding/json"
	"fmt"
	"log"
	"os"
	"path/filepath"

stefanschneider

diff --git a/manifest-generation/diego.yml b/manifest-generation/diego.yml
index b20b724..9d64b4f 100644
--- a/manifest-generation/diego.yml
+++ b/manifest-generation/diego.yml
@@ -602,6 +602,12 @@ properties:
       dropsonde_port: (( config_from_cf.metron_agent.dropsonde_incoming_port ))
       log_level: (( property_overrides.cc_uploader.log_level || nil ))
     nsync:
+      lifecycle_bundles:
+        - "buildpack/cflinuxfs2:buildpack_app_lifecycle/buildpack_app_lifecycle.tgz"

stefanschneider

if (!$env:HOST ) { $env:HOST = "127.0.0.1" }
if (!$env:PORT ) { $env:PORT = "8089" }
 
$listener = New-Object System.Net.HttpListener
$listener.Prefixes.Add("http://${env:HOST}:${env:PORT}/")
$listener.Start()

Write-Host "Listening at $($listener.Prefixes[0]) ..."

while ($listener.IsListening)

stefanschneider

package main

import (
	"log"
	"syscall"
	"unsafe"
)

var (
	kernel32 = syscall.NewLazyDLL("kernel32.dll")

stefanschneider

2015-11-20 14:01:30.972471 cc.background  pid=12501 tid=37de fid=00bd jobs/exception_catching_job.rb/log_error:24    ERROR -- Request failed: 500: {"code"=>10001, "description"=>"undefined method `use_instad=' for #<MIME::Type::Columnar:0x007f3572f017a8>", "error_code"=>"CF-NoMethodError", "backtrace"=>["/var/vcap/packages/cloud_controller_ng/cloud_controller_ng/vendor/bundle/ruby/2.2.0/gems/mime-types-2.6.1/lib/mime/types/columnar.rb:121:in `block in load_use_instead'", "/var/vcap/packages/cloud_controller_ng/cloud_controller_ng/vendor/bundle/ruby/2.2.0/gems/mime-types-2.6.1/lib/mime/types/columnar.rb:53:in `block (3 levels) in each_file_line'", "/var/vcap/packages/cloud_controller_ng/cloud_controller_ng/vendor/bundle/ruby/2.2.0/gems/mime-types-2.6.1/lib/mime/types/columnar.rb:48:in `each_line'", "/var/vcap/packages/cloud_controller_ng/cloud_controller_ng/vendor/bundle/ruby/2.2.0/gems/mime-types-2.6.1/lib/mime/types/columnar.rb:48:in `block (2 levels) in each_file_line'", "/var/vcap/packages/cloud_controller

stefanschneider

rep              [ERROR] 10/16 03:43:06.43 10.522.1.9.1.1 rep.running-bulker.sync.batch-operations.executing-container-operation.ordinary-lrp-processor.process-completed-container.failed-deleting-container
                                                      Error: 404 Not Found
                                                      {"container-guid":"da0420f6-95d4-4e05-af80-4e8c34bbfe36-4a8a22d9-7c90-4552-bdec-55c8a7a9350b-a9f432da-b8d2-4b0a-7053-4b969e8a7a67","container-state":"completed","lrp-instance-key":{"cell_id":"WIN-MDJMHMVLENB","instance_guid":"a9f432da-b8d2-4b0a-7053-4b969e8a7a67"},"lrp-key":{"domain":"cf-apps","index":6,"process_guid":"da0420f6-95d4-4e05-af80-4e8c34bbfe36-4a8a22d9-7c90-4552-bdec-55c8a7a9350b"}}
rep              [ERROR] 10/16 03:43:06.43 5.6124     rep.depot-client.delete-container.failed-to-delete-garden-container
                                                      Error: 404 Not Found
                                                      {"guid":"da0420f6-95d4-4e05-af80-4e8c34b

stefanschneider

using System;
using System.Collections.Generic;
using System.Diagnostics;
using System.Linq;
using System.Runtime.InteropServices;
using System.Security.Principal;
using System.Text;
using System.Threading.Tasks;

namespace credsTest

stefanschneider

// hcs-test project main.go
package main

/*
Docker daemon is running in debug mode under win 2016 TP3.
Reading the logs can provide some insight in how the docker is using the
windows execdriver (and other drivers related to images and networks)
cat "c:\ProgramData\docker\daemon.log"
*/