From owner-freebsd-jail@FreeBSD.ORG Sun Jun 10 21:32:43 2007 Return-Path: X-Original-To: freebsd-jail@freebsd.org Delivered-To: freebsd-jail@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 7AAF716A400 for ; Sun, 10 Jun 2007 21:32:43 +0000 (UTC) (envelope-from marko@exitcode.org) Received: from mailhub1.nextra.sk (mailhub1.nextra.sk [195.168.1.144]) by mx1.freebsd.org (Postfix) with ESMTP id EF43213C4B9 for ; Sun, 10 Jun 2007 21:32:42 +0000 (UTC) (envelope-from marko@exitcode.org) Received: from d610.network.home ([195.98.17.243]) (AUTH: LOGIN web4all, TLS: TLSv1/SSLv3,256bits,AES256-SHA) by mailhub1.nextra.sk with esmtp; Sun, 10 Jun 2007 23:22:38 +0200 id 0003C291.466C6B9E.0001865C Received: by d610.network.home (Postfix, from userid 1003) id 5F169416B79; Sun, 10 Jun 2007 23:22:37 +0200 (CEST) Date: Sun, 10 Jun 2007 23:22:36 +0200 From: Marek Holly To: Chris Jones Message-ID: <20070610212236.GA22550@d610.network.home> Mail-Followup-To: Chris Jones , freebsd-jail@freebsd.org References: <84ABEDBE-EB1F-4F5D-8BAC-6860A9CED184@novusordo.net> <20070529074956.da0fbbdf.wmoran@collaborativefusion.com> <16D3D588-F221-4B28-A723-4C4320D191F7@novusordo.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Content-Disposition: inline In-Reply-To: <16D3D588-F221-4B28-A723-4C4320D191F7@novusordo.net> User-Agent: Mutt/1.5.15 (2007-04-06) Cc: freebsd-jail@freebsd.org Subject: Re: Jail CPU/RAM Limits X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 10 Jun 2007 21:32:43 -0000 On Tue, May 29, 2007 at 10:02:39AM -0600, Chris Jones wrote: > > On 29-May-07, at 5:49 AM, Bill Moran wrote: > > > In response to Chris Jones : > > > >> > >> Hi, folks --- I did up some stuff to put (soft) limits in place for > >> CPU and RAM usage in jails as part of last year's Summer of Code > >> project, which was originally coded against 6.x. Over the past two > >> weeks, I've updated it so that it's built against -CURRENT; I've > >> tested it, and it seems to work, at least on my devel box. > >> > >> If you're interested in trying it out, please let me know and I'll > >> package it up. > > > > Are these patches against the source, or is this something that could > > be turned into a port? > > Hi, Bill --- they're patches to the kernel, mostly (there are some patches > to the source jail and jls, plus a new application, jtune, as well), so > producing a port is definitely not possible. Hi Chris, Are these patches for CURRENT somewhere available? I found patch only against RELENG_6. Thanks -- Marek Holly marko@exitcode.org From owner-freebsd-jail@FreeBSD.ORG Tue Jun 12 06:53:58 2007 Return-Path: X-Original-To: freebsd-jail@freebsd.org Delivered-To: freebsd-jail@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id D35C616A46B for ; Tue, 12 Jun 2007 06:53:58 +0000 (UTC) (envelope-from cdjones-freebsd-jail@novusordo.net) Received: from correo.novusordo.net (cdjj.org [216.194.85.7]) by mx1.freebsd.org (Postfix) with ESMTP id AA3C413C48C for ; Tue, 12 Jun 2007 06:53:58 +0000 (UTC) (envelope-from cdjones-freebsd-jail@novusordo.net) Received: from [192.168.2.100] (S01060004e29d3c67.ed.shawcable.net [68.148.229.10]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by correo.novusordo.net (Postfix) with ESMTP id 7103B114FC for ; Tue, 12 Jun 2007 00:53:57 -0600 (MDT) Mime-Version: 1.0 (Apple Message framework v752.2) Content-Transfer-Encoding: 7bit Message-Id: <5539F669-408C-45B0-B03A-9236DF4EDF8F@novusordo.net> Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed To: freebsd-jail@freebsd.org From: Chris Jones Date: Tue, 12 Jun 2007 00:53:52 -0600 X-Mailer: Apple Mail (2.752.2) Subject: CPU/Memory Limits X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Jun 2007 06:53:58 -0000 Ahoy, folks --- hit http://www.ualberta.ca/~cdjones/jail-cpumem- current.tgz for a patchset against -CURRENT. Instructions are included; contact me with questions. Cheers, Chris From owner-freebsd-jail@FreeBSD.ORG Tue Jun 12 13:06:16 2007 Return-Path: X-Original-To: freebsd-jail@freebsd.org Delivered-To: freebsd-jail@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id E6FC916A46E for ; Tue, 12 Jun 2007 13:06:16 +0000 (UTC) (envelope-from kefizh@gmail.com) Received: from an-out-0708.google.com (an-out-0708.google.com [209.85.132.246]) by mx1.freebsd.org (Postfix) with ESMTP id A1F8E13C45A for ; Tue, 12 Jun 2007 13:06:16 +0000 (UTC) (envelope-from kefizh@gmail.com) Received: by an-out-0708.google.com with SMTP id c14so503090anc for ; Tue, 12 Jun 2007 06:06:16 -0700 (PDT) DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:references; b=XiBWsL+qyU8K8xeogTGPeZssvk/30GfYJADRo/IjWWx7HlvPGij2YaxPC0IXvgbNaRBe6FmvpVx4OSeGmjKC/FcYJAkVq7H/WRB862Sko/+ertKXIWVkKA1jB0jWJs4s1FBIrzNC2pbCecjHuBSX2MkMFI4CCM2M/+puQ00jAQQ= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:references; b=kFXQH8YTYPZyOl5GAA1WYiGqBg00YRSlzJAboNyLIo9FoOr0dtkHZSjRfhOnjRtpy8W8Uv++g8X3sMpdwl1JLpjXGn/WN1QX7XSf5VO56DPtJ/38A5WmwgNWCUcZjB3o6vW3LZ55TujXRQ8cYRe0XM+1O/kSdjTaTro58KNZUZM= Received: by 10.100.227.5 with SMTP id z5mr3943017ang.1181651995216; Tue, 12 Jun 2007 05:39:55 -0700 (PDT) Received: by 10.100.125.13 with HTTP; Tue, 12 Jun 2007 05:39:55 -0700 (PDT) Message-ID: <6e6cc3bc0706120539m6470b59jbbff679616ddd260@mail.gmail.com> Date: Tue, 12 Jun 2007 20:39:55 +0800 From: ntr To: freebsd-jail@freebsd.org In-Reply-To: <20070612120028.9C07916A46E@hub.freebsd.org> MIME-Version: 1.0 References: <20070612120028.9C07916A46E@hub.freebsd.org> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Subject: Re: freebsd-jail Digest, Vol 5, Issue 2 X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Jun 2007 13:06:17 -0000 how about: http://wiki.freebsd.org/JailResourceLimits Are there good ways to limit each jail one by one ...? From owner-freebsd-jail@FreeBSD.ORG Tue Jun 12 18:52:07 2007 Return-Path: X-Original-To: freebsd-jail@freebsd.org Delivered-To: freebsd-jail@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 130D216A400 for ; Tue, 12 Jun 2007 18:52:07 +0000 (UTC) (envelope-from peter.schuller@infidyne.com) Received: from mxfep04.bredband.com (mxfep04.bredband.com [195.54.107.79]) by mx1.freebsd.org (Postfix) with ESMTP id 596F813C4C1 for ; Tue, 12 Jun 2007 18:52:06 +0000 (UTC) (envelope-from peter.schuller@infidyne.com) Received: from ironport2.bredband.com ([195.54.107.84] [195.54.107.84]) by mxfep01.bredband.com with ESMTP id <20070612182038.JPAD24171.mxfep01.bredband.com@ironport2.bredband.com> for ; Tue, 12 Jun 2007 20:20:38 +0200 Received: from c-5416e555.03-51-73746f3.cust.bredbandsbolaget.se (HELO scode.mine.nu) ([85.229.22.84]) by ironport2.bredband.com with ESMTP; 12 Jun 2007 20:20:38 +0200 Received: from scode.mine.nu (localhost [127.0.0.1]) by scode.mine.nu (Postfix) with ESMTP id A3E04374C for ; Tue, 12 Jun 2007 20:20:37 +0200 (CEST) Message-ID: <466EE3EC.1010203@infidyne.com> Date: Tue, 12 Jun 2007 20:20:28 +0200 From: Peter Schuller User-Agent: Thunderbird 2.0.0.0 (X11/20070501) MIME-Version: 1.0 To: freebsd-jail@freebsd.org X-Enigmail-Version: 0.95.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="------------enig4F08F6E4C01BFFA857D4C572" Subject: Jails getting stuck in existence X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Jun 2007 18:52:07 -0000 This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enig4F08F6E4C01BFFA857D4C572 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Hello, something I have noticed several times is that sometimes jails won't die. That is, you start them and they show up as normal with jls. After stopping them, they sometimes hang on in the output of jls even though, judging by ps, there is not a single process running that belongs to the jail. Sometimes it seems to drop off after some considerable amount of time; not sure if this is the case always. Can anyone shed some light on this? It makes some scripting a bit difficult if you cannot rely on jls to tell you whether a jail is truly running. --=20 / Peter Schuller PGP userID: 0xE9758B7D or 'Peter Schuller ' Key retrieval: Send an E-Mail to getpgpkey@scode.org E-Mail: peter.schuller@infidyne.com Web: http://www.scode.org --------------enig4F08F6E4C01BFFA857D4C572 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (FreeBSD) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFGbuP1DNor2+l1i30RCAydAKDmJqhQJ7Wer7g1ejF1HTsKzPEDTwCgsYc8 F0oRcafMrVlG0UrTRAo9PkI= =rLGx -----END PGP SIGNATURE----- --------------enig4F08F6E4C01BFFA857D4C572-- From owner-freebsd-jail@FreeBSD.ORG Wed Jun 13 03:51:14 2007 Return-Path: X-Original-To: freebsd-jail@freebsd.org Delivered-To: freebsd-jail@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 026C516A41F for ; Wed, 13 Jun 2007 03:51:14 +0000 (UTC) (envelope-from cdjones@novusordo.net) Received: from correo.novusordo.net (cdjj.org [216.194.85.7]) by mx1.freebsd.org (Postfix) with ESMTP id CAAAC13C457 for ; Wed, 13 Jun 2007 03:51:13 +0000 (UTC) (envelope-from cdjones@novusordo.net) Received: from [192.168.2.100] (S01060004e29d3c67.ed.shawcable.net [68.148.229.10]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by correo.novusordo.net (Postfix) with ESMTP id 3CE9B114FC; Tue, 12 Jun 2007 21:51:12 -0600 (MDT) In-Reply-To: <6e6cc3bc0706120539m6470b59jbbff679616ddd260@mail.gmail.com> References: <20070612120028.9C07916A46E@hub.freebsd.org> <6e6cc3bc0706120539m6470b59jbbff679616ddd260@mail.gmail.com> Mime-Version: 1.0 (Apple Message framework v752.2) Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed Message-Id: <65151847-B2C7-40CA-BAB3-0DDC97A05B93@novusordo.net> Content-Transfer-Encoding: 7bit From: Chris Jones Date: Tue, 12 Jun 2007 21:51:07 -0600 To: ntr X-Mailer: Apple Mail (2.752.2) Cc: freebsd-jail@freebsd.org Subject: Re: freebsd-jail Digest, Vol 5, Issue 2 X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Jun 2007 03:51:14 -0000 On 12-Jun-07, at 6:39 AM, ntr wrote: > how about: > http://wiki.freebsd.org/JailResourceLimits > > > Are there good ways to limit each jail one by one ...? The jtune command included with my patches allows you to set limits for each jail individually. Please test it out (see previous messages on this list for details). From owner-freebsd-jail@FreeBSD.ORG Wed Jun 13 10:58:45 2007 Return-Path: X-Original-To: freebsd-jail@freebsd.org Delivered-To: freebsd-jail@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 4AE5416A400 for ; Wed, 13 Jun 2007 10:58:45 +0000 (UTC) (envelope-from 000.fbsd@quip.cz) Received: from elsa.codelab.cz (elsa.codelab.cz [82.208.36.70]) by mx1.freebsd.org (Postfix) with ESMTP id 0DF4113C448 for ; Wed, 13 Jun 2007 10:58:44 +0000 (UTC) (envelope-from 000.fbsd@quip.cz) Received: from localhost (localhost.codelab.cz [127.0.0.1]) by elsa.codelab.cz (Postfix) with ESMTP id 7484B19E02A for ; Wed, 13 Jun 2007 12:39:01 +0200 (CEST) Received: from [192.168.1.2] (grimm.quip.cz [213.220.192.218]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by elsa.codelab.cz (Postfix) with ESMTP id EBADA19E027 for ; Wed, 13 Jun 2007 12:38:54 +0200 (CEST) Message-ID: <466FC94E.8090904@quip.cz> Date: Wed, 13 Jun 2007 12:39:10 +0200 From: Miroslav Lachman <000.fbsd@quip.cz> User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7.12) Gecko/20050915 X-Accept-Language: cz, cs, en, en-us MIME-Version: 1.0 To: freebsd-jail@freebsd.org Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Subject: Jail CPU + RAM Limits on 6.2 X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Jun 2007 10:58:45 -0000 Hi all, I am new to this list, but I read archive and didn't find an answer - is patch http://www.ualberta.ca/~cdjones/cdjones_jail_soc2006.patch applicable against FreeBSD 6.2 sources (or 6-STABLE) or are there any newer patches? I am interested in testing and deployment in to production. Thanks Miroslav Lachman From owner-freebsd-jail@FreeBSD.ORG Fri Jun 15 13:03:41 2007 Return-Path: X-Original-To: freebsd-jail@freebsd.org Delivered-To: freebsd-jail@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 868E816A41F for ; Fri, 15 Jun 2007 13:03:41 +0000 (UTC) (envelope-from ghz@info2k1.hu) Received: from mail.info2k1.hu (info2k1.hu [193.202.88.78]) by mx1.freebsd.org (Postfix) with ESMTP id 455E013C46C for ; Fri, 15 Jun 2007 13:03:41 +0000 (UTC) (envelope-from ghz@info2k1.hu) Received: from www.jail.info2k1.hu ([10.0.0.2] helo=info2k1.hu) by mail.info2k1.hu with esmtp (Exim 4.63 (FreeBSD)) (envelope-from ) id 1HzBA5-0001yx-NA for freebsd-jail@freebsd.org; Fri, 15 Jun 2007 14:44:27 +0200 MIME-Version: 1.0 Date: Fri, 15 Jun 2007 14:44:21 +0200 From: Andras GELANYI To: freebsd-jail@freebsd.org In-Reply-To: <466EE3EC.1010203@infidyne.com> References: <466EE3EC.1010203@infidyne.com> Message-ID: X-Sender: ghz@info2k1.hu User-Agent: RoundCube Webmail/0.1-rc1 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 8bit X-Spam-Score: -1.5 (-) Subject: Re: Jails getting stuck in existence X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 Jun 2007 13:03:41 -0000 On Tue, 12 Jun 2007 20:20:28 +0200, Peter Schuller wrote: > something I have noticed several times is that sometimes jails won't > die. That is, you start them and they show up as normal with jls. After > stopping them, they sometimes hang on in the output of jls even though, > judging by ps, there is not a single process running that belongs to the > jail. > > Sometimes it seems to drop off after some considerable amount of time; > not sure if this is the case always. jails are up until the assigned resources are in use. this means that even a stucked (eg. time_wait state) socket can force the jail to be alive regardless of what ps says.