rlmctl 0.2.2

Unprivileged cgroup v2 limits and a freeze guard for your own Linux processes
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61

//! Scripting behavior: no ANSI/log noise on piped stdout, and batch limits
//! refuse to guess when there is no TTY to confirm on.

use std::process::{Command, Stdio};

#[test]
fn piped_output_has_no_ansi_and_no_log_noise() {
    // An empty config dir keeps the maintainer's own config out of the test.
    let cfg = tempfile::tempdir().unwrap();
    let out = Command::new(env!("CARGO_BIN_EXE_rlm"))
        .arg("profiles")
        .env_remove("RUST_LOG")
        .env("XDG_CONFIG_HOME", cfg.path())
        .stdin(Stdio::null())
        .output()
        .unwrap();
    assert!(
        out.status.success(),
        "{}",
        String::from_utf8_lossy(&out.stderr)
    );
    let stdout = String::from_utf8_lossy(&out.stdout);
    assert!(stdout.contains("Medium"));
    assert!(
        !stdout.contains('\u{1b}') && !out.stderr.contains(&0x1b),
        "no ANSI when piped"
    );
    assert!(
        out.stderr.is_empty(),
        "WARN default: nothing on stderr: {}",
        String::from_utf8_lossy(&out.stderr)
    );
}

#[test]
fn batch_limit_without_tty_or_yes_stops_at_confirmation() {
    // Two processes this test owns; nothing else is ever named.
    let mut a = Command::new("sleep").arg("30").spawn().unwrap();
    let mut b = Command::new("sleep").arg("30").spawn().unwrap();
    let cfg = tempfile::tempdir().unwrap();
    let out = Command::new(env!("CARGO_BIN_EXE_rlm"))
        .args([
            "limit",
            "--all-pids",
            &format!("{},{}", a.id(), b.id()),
            "--memory",
            "1G",
        ])
        .env("XDG_CONFIG_HOME", cfg.path())
        .stdin(Stdio::null())
        .output()
        .unwrap();
    let _ = a.kill();
    let _ = b.kill();
    let _ = a.wait();
    let _ = b.wait();
    assert!(!out.status.success());
    let err = String::from_utf8_lossy(&out.stderr);
    // Hosts without cgroup v2 fail even earlier, at CgroupManager::new; neither path writes anything.
    assert!(err.contains("--yes") || err.contains("cgroups v2"), "{err}");
}