reno 0.1.0

Implementation of the Open Container Initiative Runtime Specification
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40

use anyhow::{Context, Result};
use oci_spec::runtime::{LinuxRlimit, LinuxRlimitType};
use rlimit::Resource;

/// `set_rlimit` sets a soft and hard limit for each resource.
/// The soft limit is the value that the kernel enforces for the resource.
/// The hard limit is a maximum value for the soft limit.
/// For example, `RLIMIT_CPU` limits the amount of CPU time the container process could consume.
/// For more information, see the [getrlimit(2)](https://man7.org/linux/man-pages/man2/getrlimit.2.html)
/// man page.
pub fn set_rlimit(rlimit: &LinuxRlimit) -> Result<()> {
    let resource = linux_rlimit_type_to_resource(&rlimit.typ());
    rlimit::setrlimit(resource, rlimit.soft(), rlimit.hard()).context(format!(
        "failed to set resource limit for {}",
        resource.as_name()
    ))?;
    Ok(())
}

/// `linux_rlimit_type_to_resource` converts [LinuxRlimitType] to [Resource].
fn linux_rlimit_type_to_resource(rlimit: &LinuxRlimitType) -> Resource {
    match rlimit {
        LinuxRlimitType::RlimitCpu => Resource::CPU,
        LinuxRlimitType::RlimitFsize => Resource::FSIZE,
        LinuxRlimitType::RlimitData => Resource::DATA,
        LinuxRlimitType::RlimitStack => Resource::STACK,
        LinuxRlimitType::RlimitCore => Resource::CORE,
        LinuxRlimitType::RlimitRss => Resource::RSS,
        LinuxRlimitType::RlimitNproc => Resource::NPROC,
        LinuxRlimitType::RlimitNofile => Resource::NOFILE,
        LinuxRlimitType::RlimitMemlock => Resource::MEMLOCK,
        LinuxRlimitType::RlimitAs => Resource::AS,
        LinuxRlimitType::RlimitLocks => Resource::LOCKS,
        LinuxRlimitType::RlimitSigpending => Resource::SIGPENDING,
        LinuxRlimitType::RlimitMsgqueue => Resource::MSGQUEUE,
        LinuxRlimitType::RlimitNice => Resource::NICE,
        LinuxRlimitType::RlimitRtprio => Resource::RTPRIO,
        LinuxRlimitType::RlimitRttime => Resource::RTTIME,
    }
}