CentOS 8 Cgroup或 v2安装，无需 CWP

如何解决CentOS 8 Cgroup或 v2安装，无需 CWP

我们正在尝试将 cgroup v2 安装到我们的 centOS 8 虚拟服务器，但毕竟我们可以限制内存但我们不能限制 cpu。我们看不到 cpu.max (sys/fs/cgroup/user.slice)

cgroup v2 是否在 CentOS 8 上得到全面支持？ ，我们对此没有任何想法。 （一定要用centOS 8，不能是Rhel 8）

你对 cgroup V2 如何在没有 CWP 的 CentOS 8 上工作有什么想法或解决方案吗？

谢谢大家

解决方法

##https://www.redhat.com/en/authors/marc-richter #https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/pdf/managing_monitoring_and_updating_the_kernel/Red_Hat_Enterprise_Linux-8-Managing_monitoring_and_updating_the_kernel-en-US.pdf

1. GRUB

---

grubby --update-kernel=/boot/vmlinuz-$(uname -r) --args="cgroup_no_v1=all"
reboot

2. /usr/bin/configure_cgroups.sh

---

#!/bin/bash

touch /var/tmp/configure_cgroups.sh.ok

mkdir -p /mnt/cgroupv2

if [ ! -f /mnt/cgroupv2/cgroup.subtree_control ]
then
    mount -t cgroup2 none /mnt/cgroupv2
    echo "+cpu" > /mnt/cgroupv2/cgroup.subtree_control
    echo "+cpuset" > /mnt/cgroupv2/cgroup.subtree_control
    echo "+memory" > /mnt/cgroupv2/cgroup.subtree_control
fi

##cpuNo=0
numberfCpus=$(nproc --all)
numberOfUsers=$(ls /home| wc -l)
cpuShare=$((numberfCpus*100000/numberOfUsers))
totalMemory=$(cat /proc/meminfo | grep MemTotal| awk '{print $2}')
memoryShare=$((totalMemory/numberOfUsers*1024))
for username in $(ls /home)
do
  if [ ! -d /mnt/cgroupv2/user.$username ]
  then
      mkdir -p /mnt/cgroupv2/user.$username
      ##echo "$cpuNo" > /mnt/cgroupv2/user.$username/cpuset.cpus
      ##echo "$cpuNo" > /mnt/cgroupv2/user.$username/cpuset.mems
      echo "$cpuShare 100000" > /mnt/cgroupv2/user.$username/cpu.max
      echo "$memoryShare" > /mnt/cgroupv2/user.$username/memory.max
      ##cpuNo=$((cpuNo+1))
  fi

done

for username in $(ls /home)
do
      for pid in $(ps -ef |  grep -i "^$username" | awk '{print $2}')
      do
         grep $pid /mnt/cgroupv2/user.$username/cgroup.procs >/dev/null
         if [ $? != 0 ]
         then
             echo $pid > /mnt/cgroupv2/user.$username/cgroup.procs
         fi
      done
done

3. 服务：/usr/lib/systemd/system/configure-cgroupsv2.service

---

[Unit]
Description=Configure CGroups V2

[Service]
Type=oneshot
ExecStart=/usr/bin/configure_cgroups.sh

---

4. 服务：/usr/lib/systemd/system/configure-cgroupsv2.timer

---

[Unit]
Description=Configure CGroups V2 Timer

[Timer]
OnUnitActiveSec=10s
OnBootSec=10s

[Install]
WantedBy=timers.target

---

systemctl daemon-reload
systemctl enable configure-cgroupsv2.timer
systemctl start configure-cgroupsv2.timer

systemctl list-timers --all| grep configure

systemctl start configure-cgroupsv2.service
systemctl status configure-cgroupsv2.service
journalctl -xe

5. 测试：

---

CPU: "while true; do   echo > /dev/null; done"  then  top
                                                   
RAM :  "cat /dev/zero | head -c 20000M | tail " then top

,

此外，您必须执行以下操作才能运行您的 docker 镜像：

1. yum install crun -y

2. cp  /usr/share/containers/containers.conf /etc/containers/

3. edit  /etc/containers/containers.conf 
   cgroups="disabled"
   runtime="crun"