[libvirt] lxc: dominfo.cpuTime support using cgroups.cpuacct

Ryota Ozaki ozaki.ryota at gmail.com
Fri Mar 6 14:39:21 UTC 2009


Hi Daniel,

On Fri, Mar 6, 2009 at 11:28 PM, Daniel P. Berrange <berrange at redhat.com> wrote:
> On Fri, Mar 06, 2009 at 02:27:04PM +0100, Daniel Veillard wrote:
>> On Thu, Mar 05, 2009 at 02:34:48AM +0900, Ryota Ozaki wrote:
>> > Hi,
>> >
>> > This patch enables to get CPU usage of a lxc using cpuacct subsystem
>> > of cgroups.
>>
>>   Looks cool, what kernel version is required to make use of this ?
>> The kernel patch seems to be from last december, but I'm not sure.
>> I would just prefer to make sure it's in a released kernel version
>> before applying the patch here :-)
>
> It is in 2.6.27 because I can see it there on my Fedora 9 box after
> doing
>
> # mount -t cgroup none /mnt/cg
> # ls /mnt/cg
> cpuacct.usage           cpuset.memory_pressure_enabled   devices.deny
> cpuset.cpu_exclusive    cpuset.memory_spread_page        devices.list
> cpuset.cpus             cpuset.memory_spread_slab        notify_on_release
> cpuset.mem_exclusive    cpuset.mems                      release_agent
> cpuset.mem_hardwall     cpuset.sched_load_balance        tasks
> cpuset.memory_migrate   cpuset.sched_relax_domain_level
> cpuset.memory_pressure  devices.allow
>
>
> The Linux kernel support for containers is still incomplete, so I don't
> think it is worth fixing on a long term minimum kernel version for LXC
> just yet. We still need the PTS filesystem virtualization before you can
> consider LXC a reasonably secure container and I don't think that's
> until 2.6.30.

2.6.29 will include 'devpts multiple instances' feature so I hope LXC in
the next released kernel will be secure enough. I'm missing anything?

Thanks,
  ozaki-r

>
> Daniel
> --
> |: Red Hat, Engineering, London   -o-   http://people.redhat.com/berrange/ :|
> |: http://libvirt.org  -o-  http://virt-manager.org  -o-  http://ovirt.org :|
> |: http://autobuild.org       -o-         http://search.cpan.org/~danberr/ :|
> |: GnuPG: 7D3B9505  -o-  F3C9 553F A1DA 4AC2 5648 23C1 B3DF F742 7D3B 9505 :|
>




More information about the libvir-list mailing list