Wednesday, 15 July 2015

how to set ulimit / file descriptor on docker container the image tag is phusion/baseimage-docker -



how to set ulimit / file descriptor on docker container the image tag is phusion/baseimage-docker -

i need set file descriptor limit correctly on docker container connect container ssh

https://github.com/phusion/baseimage-docker

already tried:

edit limits.conf container ignore file

upstart procedure found @ https://coderwall.com/p/myodcq docker image

has different kind of init process. (runit)

i tried modify configuration of pam library in /etc/pam.d

try enabled pam ssh in sshd_config

the output same.

bash: ulimit: open files: cannot modify limit: operation not permitted

thank you

after searching found on google groups discussion:

docker inhibits capability enhanced safety.

that because ulimit settings of host scheme apply docker container. regarded security risk programs running in container can alter ulimit settings host.

the news have 2 different solutions take from.

remove sys_resource lxc_template.go , recompile docker. you'll able set ulimit high like.

or

stop docker demon. alter ulimit settings on host. start docker demon. has revised limits, , kid processes well.

i applied sec method:

sudo service docker stop;

changed limits in /etc/security/limits.conf

reboot machine

run container

run ulimit -a in container confirm open files limit has been inherited.

see: https://groups.google.com/forum/#!searchin/docker-user/limits/docker-user/t45kc9vd804/v8j_n4glbacj

docker ulimit

No comments:

Post a Comment