kotovalexarian-likes-github
/
moby--moby
mirror of https://github.com/moby/moby.git
1
0
Fork 0
Code Releases Activity
moby--moby/contrib/init/systemd/docker.service

43 lines
1.5 KiB
SYSTEMD
Raw Normal View History

Add systemd files, add containerd-proxy config Signed-off-by: Eli Uriegas <eli.uriegas@docker.com>
2018-08-14 20:30:22 +00:00
[Unit]
Description=Docker Application Container Engine
Documentation=https://docs.docker.com
Set containerd to be a systemd bind for docker The daemon won't actually start without containerd Signed-off-by: Eli Uriegas <eli.uriegas@docker.com>
2018-08-20 21:13:52 +00:00
BindsTo=containerd.service
After=network-online.target firewalld.service
Wants=network-online.target
Add systemd files, add containerd-proxy config Signed-off-by: Eli Uriegas <eli.uriegas@docker.com>
2018-08-14 20:30:22 +00:00
[Service]
# Install containerd-shim-process if it's not already installed
Revive pre / post steps, update offline location Signed-off-by: Eli Uriegas <eli.uriegas@docker.com>
2018-08-15 23:13:21 +00:00
ExecStartPre=/usr/libexec/containerd-offline-installer /var/lib/containerd-offline-installer/containerd-shim-process.tar docker.io/docker/containerd-shim-process
systemd: add "Delegate=yes" to docker's service file We need to add delegate yes to docker's service file so that it can manage the cgroups of the processes that it launches without systemd interfering with them and moving the processes after it is reloaded. Delegate= Turns on delegation of further resource control partitioning to processes of the unit. For unprivileged services (i.e. those using the User= setting), this allows processes to create a subhierarchy beneath its control group path. For privileged services and scopes, this ensures the processes will have all control group controllers enabled. This is the proper fix for issue moby/moby#20152 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2018-08-31 10:53:49 +00:00
# the default is not to use systemd for cgroups because the delegate issues still
# exists and systemd currently does not support the cgroup feature set required
# for containers run by docker
Add systemd files, add containerd-proxy config Signed-off-by: Eli Uriegas <eli.uriegas@docker.com>
2018-08-14 20:30:22 +00:00
ExecStart=/usr/bin/dockerd
systemd: add support for reloading daemon configuration through systemd This adds support for reloading the docker daemon (SIGHIUP) so that changes in '/etc/docker/daemon.json' can be loaded at runtime by reloading the service through systemd ('systemctl reload docker') Before this change, systemd would output an error that "reloading" is not supported for the docker service; systemctl reload docker Failed to reload docker.service: Job type reload is not applicable for unit docker.service. After this change, the docker daemon can be reloaded through 'systemctl reload docker', which reloads the configuration; journalctl -f -u docker.service May 02 03:49:20 testing systemd[1]: Reloading Docker Application Container Engine. May 02 03:49:20 testing docker[28496]: time="2016-05-02T03:49:20.143964103-04:00" level=info msg="Got signal to reload configuration, reloading from: /etc/docker/daemon.json" May 02 03:49:20 testing systemd[1]: Reloaded Docker Application Container Engine. Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2018-08-31 10:57:03 +00:00
ExecReload=/bin/kill -s HUP $MAINPID
Add post-stop Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
2018-08-28 17:51:21 +00:00
ExecStopPost=/usr/bin/dockerd post-stop
Some changes to get this working on CentOS 7 Old versions of things on CentOS 7 strike again! infinity is not a thing for TimeoutSec on systemd < 229 Signed-off-by: Eli Uriegas <eli.uriegas@docker.com>
2018-08-16 04:03:40 +00:00
TimeoutSec=0
added RestartSec Signed-off-by: Andrew Hsu <andrewhsu@docker.com> (cherry picked from commit 51879873897afe298cbb736acef34b5a0b500424) Signed-off-by: Andrew Hsu <andrewhsu@docker.com>
2018-08-24 22:40:02 +00:00
RestartSec=2
Round out systemd for RPM packaging Signed-off-by: Eli Uriegas <eli.uriegas@docker.com>
2018-08-15 01:42:10 +00:00
Restart=always
# On RPM Based distributions PATH isn't defined so we define it here
# /opt/containerd/bin is in front so dockerd grabs the correct runc binary
Environment="PATH=/opt/containerd/bin:/sbin:/usr/bin:/usr/local/bin:$PATH"
Add systemd files, add containerd-proxy config Signed-off-by: Eli Uriegas <eli.uriegas@docker.com>
2018-08-14 20:30:22 +00:00
systemd: set Limit* to infinity There is a not-insignificant performance overhead for all containers (if containerd is a child of Docker, which is the current setup) if systemd sets rlimits on the main Docker daemon process (because the limits propogate to all children). Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2018-08-31 10:45:07 +00:00
# Having non-zero Limit*s causes performance problems due to accounting overhead
# in the kernel. We recommend using cgroups to do container-local accounting.
LimitNOFILE=infinity
LimitNPROC=infinity
systemd: no limit on core size set LimitCORE=infinity to ensure complete core creation, allows extraction of as much information as possible. Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2018-08-31 10:43:32 +00:00
LimitCORE=infinity
systemd: don't limit tasks Systemd sets a default of 512 tasks, which is far too low to run many containers. Note that TasksMax is only supported on systemd 226 and above. Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2018-08-31 10:50:05 +00:00
# Comment TasksMax if your systemd version does not supports it.
# Only systemd 226 and above support this option.
TasksMax=infinity
systemd: add "Delegate=yes" to docker's service file We need to add delegate yes to docker's service file so that it can manage the cgroups of the processes that it launches without systemd interfering with them and moving the processes after it is reloaded. Delegate= Turns on delegation of further resource control partitioning to processes of the unit. For unprivileged services (i.e. those using the User= setting), this allows processes to create a subhierarchy beneath its control group path. For privileged services and scopes, this ensures the processes will have all control group controllers enabled. This is the proper fix for issue moby/moby#20152 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2018-08-31 10:53:49 +00:00
# set delegate yes so that systemd does not reset the cgroups of docker containers
Delegate=yes
systemd: set systemd KillMode Change the kill mode to process so that systemd does not kill container processes when the daemon is shutdown but only the docker daemon Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2018-08-31 10:55:39 +00:00
# kill only the docker process, not all processes in the cgroup
KillMode=process
Add systemd files, add containerd-proxy config Signed-off-by: Eli Uriegas <eli.uriegas@docker.com>
2018-08-14 20:30:22 +00:00
[Install]
WantedBy=multi-user.target