Re: [systemd-devel] SystemCallFilter

2019-06-20 Thread Lennart Poettering
On Di, 28.05.19 17:16, Josef Moellers ([email protected]) wrote: > On 28.05.19 16:59, Lennart Poettering wrote: > > On Di, 28.05.19 14:04, Josef Moellers ([email protected]) wrote: > > > >>> Regarding the syscall groupings: yes, the groups exist precisely to > >>> improve cases like this. That sai

Re: [systemd-devel] Delegate v1 cgroup controller permissions

2019-06-20 Thread Lennart Poettering
On Mi, 19.06.19 17:33, John Lane ([email protected]) wrote: > > I have a service which runs as an unprivileged user (User=foo) with > delegated cgroup (Delegate=true) that wants to use the "memory" and > "cpu" controllers. Systemd is using the hybrid mode with both v1 and v2 > cgroups, and the c

Re: [systemd-devel] Allocating resource to achieve predictable run times

2019-06-20 Thread Michal Koutný
Hi. On Mon, Jun 17, 2019 at 02:15:19PM +0100, John Lane wrote: > I am trying to meet a requirement to have predictable execution of jobs. > [...] > When I say "container" I mean "an environment with reserved resources". > I have been looking at using cgroups both directly and via systemd. > [...]