Return-Path: X-Original-To: apmail-mesos-dev-archive@www.apache.org Delivered-To: apmail-mesos-dev-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 46F5E19030 for ; Fri, 15 Apr 2016 22:00:49 +0000 (UTC) Received: (qmail 72899 invoked by uid 500); 15 Apr 2016 22:00:48 -0000 Delivered-To: apmail-mesos-dev-archive@mesos.apache.org Received: (qmail 72806 invoked by uid 500); 15 Apr 2016 22:00:48 -0000 Mailing-List: contact dev-help@mesos.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@mesos.apache.org Delivered-To: mailing list dev@mesos.apache.org Received: (qmail 72794 invoked by uid 99); 15 Apr 2016 22:00:48 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd1-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 15 Apr 2016 22:00:48 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd1-us-west.apache.org (ASF Mail Server at spamd1-us-west.apache.org) with ESMTP id C8A5FC15C9 for ; Fri, 15 Apr 2016 22:00:47 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd1-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 1.879 X-Spam-Level: * X-Spam-Status: No, score=1.879 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=2, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=disabled Authentication-Results: spamd1-us-west.apache.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mx2-lw-us.apache.org ([10.40.0.8]) by localhost (spamd1-us-west.apache.org [10.40.0.7]) (amavisd-new, port 10024) with ESMTP id APV5wegiX3Be for ; Fri, 15 Apr 2016 22:00:47 +0000 (UTC) Received: from mail-yw0-f173.google.com (mail-yw0-f173.google.com [209.85.161.173]) by mx2-lw-us.apache.org (ASF Mail Server at mx2-lw-us.apache.org) with ESMTPS id D818E5F1EC for ; Fri, 15 Apr 2016 22:00:46 +0000 (UTC) Received: by mail-yw0-f173.google.com with SMTP id d68so150538068ywe.1 for ; Fri, 15 Apr 2016 15:00:46 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to; bh=NTnAlfFyRgOuA6blRA0Bcz78xVM4nsyspGc92nba4EY=; b=lhtyPV4axFDpgnx4TPyuCDQY828PQeqai/Z/l2Vkpj0jmxAlS02CYCBA7Ycy282l0J 2yeyLpMHRzVithqaqPRfr52TiZVKad5qitPxMDWhgF0z8LGgAknfLovIO80g0MllAZ70 ZpyCiJ6GSeGcYtBI60HN2xIoEMwtMdoKWllyDu91lefk8NjRQZ3B4inFUVKcCQB+c0hz UY621WgSlKPQd6AHWtY/YMycn/sLAmg6VTT/jqQGSwQlhmmxLqjgKSRPTjLaKPQ3qvbJ tZv+vYeDnm5554MKUw4CJUXcF2pMsurX6qMIQ0vxTQpec0rVmEKHcBNVmM0YuixV/WPP M9kw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:date:message-id:subject:from:to; bh=NTnAlfFyRgOuA6blRA0Bcz78xVM4nsyspGc92nba4EY=; b=FD5t7GDsyqI47JqZNL9XQHCRxSYUW2YyOC/9/5tPhfkeDhT9ps+UYLQdu3zEjL1YjU vuXzSH3kujEdzlrs07BajoAVPpHIecjFy/9/l9l5t6fofjLe0Qbrw+HnUp9NaE0Dh6Tf +EuQbXeUf9ajSDm2kirQOw6SctaUKF1GFYvSdReJkTYbl1zTe5hhNJ0pzRmL2ts5Ynfj VVkILFU6YrCl2nCr2nRCiyEqlCiP/ZXLB1OmCZ33SZGesTY6JZwO0J6WaFLZzK8gdd95 5I/qCDx9Qa3uimWguTsktUJKZ47R/kzMiddm3lxwv8UxWPRuBNabxVkSledDcdPAfR7Z ge6w== X-Gm-Message-State: AOPr4FW8XiLkITtaAC4Dg1XI/MIo3gJtF8EKrP67JplRhxDU7KajkCvg+NXkfO6lKPaXkj7LR3BkcNt0uy3iDQ== MIME-Version: 1.0 X-Received: by 10.129.55.204 with SMTP id e195mr13368134ywa.55.1460757646309; Fri, 15 Apr 2016 15:00:46 -0700 (PDT) Received: by 10.37.215.18 with HTTP; Fri, 15 Apr 2016 15:00:46 -0700 (PDT) Date: Fri, 15 Apr 2016 15:00:46 -0700 Message-ID: Subject: docker, systemd, and cfs_quota From: Michael Browning To: dev@mesos.apache.org Content-Type: multipart/alternative; boundary=001a114412309c89ef05308d24fb --001a114412309c89ef05308d24fb Content-Type: text/plain; charset=UTF-8 Hi all, We've run into an interesting issue with Docker and systemd that's hampering our attempts to use cfs_quota for CPU isolation with Docker containers. The issue is that Docker doesn't tell systemd when it changes cpu.cfs_quota_us, so when our Puppet run triggers a `systemctl daemon-reload` invocation, the quota is reset to -1. I assume this could be solved with the `Delegate=true` in the dockerd unit file, but unfortunately we're not running a recent enough version of systemd to take advantage. Has anyone else ran into this when using DockerContainerizer with cfs_quota, or found a workaround? Regards, Michael --001a114412309c89ef05308d24fb--