admin-guide/cgroup-v1/pids.rst

6 --------
9 new tasks from being fork()'d or clone()'d after a certain limit is reached.
11 Since it is trivial to hit the task limit without hitting any kmemcg limits in
17 -----
21 number of processes currently in the cgroup is given by pids.current.
24 to have pids.current > pids.max. This can be done by either setting the limit to
25 be smaller than pids.current, or attaching enough processes to the cgroup such
26 that pids.current > pids.max. However, it is not possible to violate a cgroup
27 policy through fork() or clone(). fork() and clone() will return -EAGAIN if the
30 To set a cgroup to have no limit, set pids.max to "max". This is the default for
32 limit in the hierarchy is followed).
34 pids.current tracks all child cgroup hierarchies, so parent/pids.current is a
35 superset of parent/child/pids.current.
39   - max: Number of times fork failed in the cgroup because limit was hit in
43 -------
47 	# mkdir -p /sys/fs/cgroup/pids
48 	# mount -t cgroup -o pids none /sys/fs/cgroup/pids
52 	# mkdir -p /sys/fs/cgroup/pids/parent/child
55 	# cat /sys/fs/cgroup/pids/parent/pids.current
59 It should be noted that attempts to overcome the set limit (2 in this case) will
62 	# cat /sys/fs/cgroup/pids/parent/pids.current
68 Even if we migrate to a child cgroup (which doesn't have a set limit), we will
69 not be able to overcome the most stringent limit in the hierarchy (in this case,
73 	# cat /sys/fs/cgroup/pids/parent/pids.current
75 	# cat /sys/fs/cgroup/pids/parent/child/pids.current
83 We can set a limit that is smaller than pids.current, which will stop any new
85 pids.current)::