procd: set resource limits for service instances

useful to enable core dumps or set resource limits

Signed-off-by: Ulrich Weber <uw@xyne.com>

diff --git a/service/instance.c b/service/instance.c
index 20017ce1b52b43bc86a2bd63e6c4d69416d29413..27b81f5e2303cd7e996730161619085a112f927f 100644 (file)
--- a/service/instance.c
+++ b/service/instance.c
@@ -37,6 +37,7 @@ enum {
        INSTANCE_ATTR_TRIGGER,
        INSTANCE_ATTR_RESPAWN,
        INSTANCE_ATTR_NICE,
+       INSTANCE_ATTR_LIMITS,
        __INSTANCE_ATTR_MAX
 };
 
@@ -49,6 +50,7 @@ static const struct blobmsg_policy instance_attr[__INSTANCE_ATTR_MAX] = {
        [INSTANCE_ATTR_TRIGGER] = { "triggers", BLOBMSG_TYPE_ARRAY },
        [INSTANCE_ATTR_RESPAWN] = { "respawn", BLOBMSG_TYPE_ARRAY },
        [INSTANCE_ATTR_NICE] = { "nice", BLOBMSG_TYPE_INT32 },
+       [INSTANCE_ATTR_LIMITS] = { "limits", BLOBMSG_TYPE_TABLE },
 };
 
 struct instance_netdev {
@@ -61,6 +63,50 @@ struct instance_file {
        uint32_t md5[4];
 };
 
+struct rlimit_name {
+       const char *name;
+       int resource;
+};
+
+static const struct rlimit_name rlimit_names[] = {
+       { "as", RLIMIT_AS },
+       { "core", RLIMIT_CORE },
+       { "cpu", RLIMIT_CPU },
+       { "data", RLIMIT_DATA },
+       { "fsize", RLIMIT_FSIZE },
+       { "memlock", RLIMIT_MEMLOCK },
+       { "msgqueue", RLIMIT_MSGQUEUE },
+       { "nice", RLIMIT_NICE },
+       { "nofile", RLIMIT_NOFILE },
+       { "nproc", RLIMIT_NPROC },
+       { "rss", RLIMIT_RSS },
+       { "rtprio", RLIMIT_RTPRIO },
+       { "sigpending", RLIMIT_SIGPENDING },
+       { "stack", RLIMIT_STACK },
+       { NULL, 0 }
+};
+
+static void
+instance_limits(const char *limit, const char *value)
+{
+       int i;
+       struct rlimit rlim;
+
+       for (i = 0; rlimit_names[i].name != NULL; i++) {
+               if (strcmp(rlimit_names[i].name, limit))
+                       continue;
+               if (!strcmp(value, "unlimited")) {
+                       rlim.rlim_cur = RLIM_INFINITY;
+                       rlim.rlim_max = RLIM_INFINITY;
+               }
+               else if (getrlimit(rlimit_names[i].resource, &rlim) ||
+                        sscanf(value, "%lu %lu", &rlim.rlim_cur, &rlim.rlim_max) == 0)
+                       return;
+               setrlimit(rlimit_names[i].resource, &rlim);
+               return;
+       }
+}
+
 static void
 instance_run(struct service_instance *in)
 {
@@ -79,6 +125,9 @@ instance_run(struct service_instance *in)
        blobmsg_list_for_each(&in->env, var)
                setenv(blobmsg_name(var->data), blobmsg_data(var->data), 1);
 
+       blobmsg_list_for_each(&in->limits, var)
+               instance_limits(blobmsg_name(var->data), blobmsg_data(var->data));
+
        argv = alloca(sizeof(char *) * argc);
        argc = 0;
 
@@ -220,6 +269,9 @@ instance_config_changed(struct service_instance *in, struct service_instance *in
        if (in->nice != in_new->nice)
                return true;
 
+       if (!blobmsg_list_equal(&in->limits, &in_new->limits))
+               return true;
+
        return false;
 }
 
@@ -370,6 +422,9 @@ instance_config_parse(struct service_instance *in)
        if (!instance_fill_array(&in->file, tb[INSTANCE_ATTR_FILE], instance_file_update, true))
                return false;
 
+       if (!instance_fill_array(&in->limits, tb[INSTANCE_ATTR_LIMITS], NULL, false))
+               return false;
+
        return true;
 }
 
@@ -379,6 +434,7 @@ instance_config_cleanup(struct service_instance *in)
        blobmsg_list_free(&in->env);
        blobmsg_list_free(&in->data);
        blobmsg_list_free(&in->netdev);
+       blobmsg_list_free(&in->limits);
 }
 
 static void
@@ -388,6 +444,7 @@ instance_config_move(struct service_instance *in, struct service_instance *in_sr
        blobmsg_list_move(&in->env, &in_src->env);
        blobmsg_list_move(&in->data, &in_src->data);
        blobmsg_list_move(&in->netdev, &in_src->netdev);
+       blobmsg_list_move(&in->limits, &in_src->limits);
        in->trigger = in_src->trigger;
        in->command = in_src->command;
        in->name = in_src->name;
@@ -445,6 +502,7 @@ instance_init(struct service_instance *in, struct service *s, struct blob_attr *
        blobmsg_list_init(&in->file, struct instance_file, node, instance_file_cmp);
        blobmsg_list_simple_init(&in->env);
        blobmsg_list_simple_init(&in->data);
+       blobmsg_list_simple_init(&in->limits);
        in->valid = instance_config_parse(in);
 }
 
@@ -466,6 +524,14 @@ void instance_dump(struct blob_buf *b, struct service_instance *in, int verbose)
                blobmsg_close_table(b, e);
        }
 
+       if (!avl_is_empty(&in->limits.avl)) {
+               struct blobmsg_list_node *var;
+               void *e = blobmsg_open_table(b, "limits");
+               blobmsg_list_for_each(&in->limits, var)
+                       blobmsg_add_string(b, blobmsg_name(var->data), blobmsg_data(var->data));
+               blobmsg_close_table(b, e);
+       }
+
        if (in->respawn) {
                void *r = blobmsg_open_table(b, "respawn");
                blobmsg_add_u32(b, "timeout", in->respawn_timeout);

diff --git a/service/instance.h b/service/instance.h
index 65b670ed0202a593ba5ec0c8b34fb6cfb88ec25f..e7416ab04222d96c9f8d75ce911f6bd3655ab10c 100644 (file)
--- a/service/instance.h
+++ b/service/instance.h
@@ -49,6 +49,7 @@ struct service_instance {
        struct blobmsg_list data;
        struct blobmsg_list netdev;
        struct blobmsg_list file;
+       struct blobmsg_list limits;
 };
 
 void instance_start(struct service_instance *in);