linux使用cgroup资源限制

[root@master ~]# cat /etc/redhat-release 
CentOS Linux release 7.9.2009 (Core)
[root@master ~]# df -h
Filesystem      Size  Used Avail Use% Mounted on
devtmpfs        1.8G     0  1.8G   0% /dev
tmpfs           1.8G     0  1.8G   0% /dev/shm
tmpfs           1.8G  460K  1.8G   1% /run
tmpfs           1.8G     0  1.8G   0% /sys/fs/cgroup
/dev/vda1        40G  2.0G   36G   6% /
tmpfs           365M     0  365M   0% /run/user/0

[root@master ~]# ll /sys/fs/cgroup/cpu/
total 0
drwxr-xr-x 2 root root 0 May  7 10:16 assist
-rw-r--r-- 1 root root 0 May  7  2021 cgroup.clone_children
--w--w--w- 1 root root 0 May  7  2021 cgroup.event_control
-rw-r--r-- 1 root root 0 May  7  2021 cgroup.procs
-r--r--r-- 1 root root 0 May  7  2021 cgroup.sane_behavior
-r--r--r-- 1 root root 0 May  7  2021 cpuacct.stat
-rw-r--r-- 1 root root 0 May  7  2021 cpuacct.usage
-r--r--r-- 1 root root 0 May  7  2021 cpuacct.usage_percpu
-rw-r--r-- 1 root root 0 May  7  2021 cpu.cfs_period_us
-rw-r--r-- 1 root root 0 May  7  2021 cpu.cfs_quota_us
-rw-r--r-- 1 root root 0 May  7  2021 cpu.rt_period_us
-rw-r--r-- 1 root root 0 May  7  2021 cpu.rt_runtime_us
-rw-r--r-- 1 root root 0 May  7  2021 cpu.shares
-r--r--r-- 1 root root 0 May  7  2021 cpu.stat
-rw-r--r-- 1 root root 0 May  7  2021 notify_on_release
-rw-r--r-- 1 root root 0 May  7  2021 release_agent
-rw-r--r-- 1 root root 0 May  7  2021 tasks
[root@master ~]# cat /sys/fs/cgroup/cpu/cpu.cfs_period_us
100000 #表示将cpu时间片分成100000份

[root@master ~]# mkdir  /sys/fs/cgroup/cpu/testcpu
[root@master ~]# ll /sys/fs/cgroup/cpu/testcpu
total 0
-rw-r--r-- 1 root root 0 May  7 10:28 cgroup.clone_children
--w--w--w- 1 root root 0 May  7 10:28 cgroup.event_control
-rw-r--r-- 1 root root 0 May  7 10:28 cgroup.procs
-r--r--r-- 1 root root 0 May  7 10:28 cpuacct.stat
-rw-r--r-- 1 root root 0 May  7 10:28 cpuacct.usage
-r--r--r-- 1 root root 0 May  7 10:28 cpuacct.usage_percpu
-rw-r--r-- 1 root root 0 May  7 10:28 cpu.cfs_period_us
-rw-r--r-- 1 root root 0 May  7 10:28 cpu.cfs_quota_us
-rw-r--r-- 1 root root 0 May  7 10:28 cpu.rt_period_us
-rw-r--r-- 1 root root 0 May  7 10:28 cpu.rt_runtime_us
-rw-r--r-- 1 root root 0 May  7 10:28 cpu.shares
-r--r--r-- 1 root root 0 May  7 10:28 cpu.stat
-rw-r--r-- 1 root root 0 May  7 10:28 notify_on_release
-rw-r--r-- 1 root root 0 May  7 10:28 tasks

[root@master ~]# cat /sys/fs/cgroup/cpu/testcpu/cpu.cfs_quota_us
-1
[root@master ~]# echo 5000 > /sys/fs/cgroup/cpu/testcpu/cpu.cfs_quota_us
[root@master ~]# cat /sys/fs/cgroup/cpu/testcpu/cpu.cfs_quota_us
5000

[root@master ~]# cat  /sys/fs/cgroup/cpu/testcpu/tasks 
[root@master ~]# echo <pid>  /sys/fs/cgroup/cpu/testcpu/tasks #将限制的pid好写道tasks中就完成限制了

mkdir  /sys/fs/cgroup/memory/testmem

#查看初始值，初始值没有做限制
[root@master ~]# cat  /sys/fs/cgroup/memory/testmem/memory.limit_in_bytes 
9223372036854771712

#设置1M大小的内存限制
[root@master ~]# echo  1M >/sys/fs/cgroup/memory/testmem/memory.limit_in_bytes
[root@master ~]# cat /sys/fs/cgroup/memory/testmem/memory.limit_in_bytes
1048576

#将需要限制的pid写入tasks中
echo <pid> > /sys/fs/cgroup/memory/testmem/tasks 

[root@master ~]# useradd test
[root@master ~]# su - test
[test@master ~]$ echo $$ #查看当前的pid
2209

[test@master ~]$ seq 10000000 > test.txt
[test@master ~]$ ll test.txt  -h
-rw-rw-r-- 1 test test 76M May  7 11:24 test.txt

[test@master ~]$ vim test.txt 
[test@master ~]$ 

[root@master ~]# cat     /sys/fs/cgroup/memory/testmem/tasks 
[root@master ~]# echo 2209 > /sys/fs/cgroup/memory/testmem/tasks
[root@master ~]# cat /sys/fs/cgroup/memory/testmem/tasks
2209

[test@master ~]$ echo $$
2209
[test@master ~]$ vim test.txt 
Killed