From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S932444AbdCFTHf (ORCPT ); Mon, 6 Mar 2017 14:07:35 -0500 Received: from mail-yw0-f170.google.com ([209.85.161.170]:33754 "EHLO mail-yw0-f170.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1753657AbdCFTF4 (ORCPT ); Mon, 6 Mar 2017 14:05:56 -0500 Date: Mon, 6 Mar 2017 13:58:20 -0500 From: Tejun Heo To: Krzysztof Opasiak Cc: lizefan@huawei.com, hannes@cmpxchg.org, =?utf-8?Q?=C5=81ukasz?= Stelmach , linux-kernel@vger.kernel.org, Karol Lewandowski , cgroups@vger.kernel.org Subject: Re: counting file descriptors with a cgroup controller Message-ID: <20170306185820.GA19696@htj.duckdns.org> References: <87poihtaya.fsf%l.stelmach@samsung.com> <9a57890c-d9e9-5719-e155-ce1161795a02@samsung.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <9a57890c-d9e9-5719-e155-ce1161795a02@samsung.com> User-Agent: Mutt/1.7.1 (2016-10-04) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Hello, On Fri, Feb 17, 2017 at 12:37:11PM +0100, Krzysztof Opasiak wrote: > > We need to limit and monitor the number of file descriptors processes > > keep open. If a process exceeds certain limit we'd like to terminate it > > and restart it or reboot the whole system. Currently the RLIMIT API > > allows limiting the number of file descriptors but to achieve our goals > > we'd need to make sure all programmes we run handle EMFILE errno > > properly. That is why we consider developing a cgroup controller that > > limits the number of open file descriptors of its members (similar to > > memory controler). > > > > Any comments? Is there any alternative that: > > > > + does not require modifications of user-land code, > > + enables other process (e.g. init) to be notified and apply policy. Hmm... I'm not quite sure fds qualify as an independent system-wide resource. We did that for pids because pids are globally limited and can run out way earlier than memory backing it. I don't think we have similar restructions for fds, do we? Thanks. -- tejun