Class: OsCtld::UserControl::Commands::CtWrapperStart

Inherits:
Base show all
Includes:
OsCtl::Lib::Utils::Log
Defined in:
lib/osctld/user_control/commands/ct_wrapper_start.rb

Instance Attribute Summary

Attributes inherited from Base

#user

Attributes inherited from Commands::Base

#client, #client_handler, #id, #opts

Instance Method Summary collapse

Methods inherited from Base

handle, #initialize, #owns_ct?, run

Methods inherited from Commands::Base

#base_execute, #call_cmd, #call_cmd!, cmd, #error, #error!, handle, #handled, #indirect?, #initialize, #manipulate, #manipulation_holder, #ok, #progress, #request_stop, run, run!

Constructor Details

This class inherits a constructor from OsCtld::UserControl::Commands::Base

Instance Method Details

#executeObject



10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
# File 'lib/osctld/user_control/commands/ct_wrapper_start.rb', line 10

def execute
  ct = DB::Containers.find(opts[:id], opts[:pool])
  return error('container not found') unless ct
  return error('access denied') unless owns_ct?(ct)

  # Reset oom_score_adj of the calling process. The reset has to come from
  # a process with CAP_SYS_RESOURCE (which osctld is), so that
  # oom_score_adj_min is changed and container users cannot freely set
  # oom_score_adj to -1000.
  log(:debug, "Set /proc/#{opts[:pid]}/oom_score_adj=0")
  File.open(File.join('/proc', opts[:pid].to_s, 'oom_score_adj'), 'w') do |f|
    f.write('0')
  end

  ok
end