src/core/cgroup.h

   1 /* SPDX-License-Identifier: LGPL-2.1+ */
   2 #pragma once
   3
   4 #include <stdbool.h>
   5
   6 #include "cgroup-util.h"
   7 #include "ip-address-access.h"
   8 #include "list.h"
   9 #include "time-util.h"
  10
  11 typedef struct CGroupContext CGroupContext;
  12 typedef struct CGroupDeviceAllow CGroupDeviceAllow;
  13 typedef struct CGroupIODeviceWeight CGroupIODeviceWeight;
  14 typedef struct CGroupIODeviceLimit CGroupIODeviceLimit;
  15 typedef struct CGroupIODeviceLatency CGroupIODeviceLatency;
  16 typedef struct CGroupBlockIODeviceWeight CGroupBlockIODeviceWeight;
  17 typedef struct CGroupBlockIODeviceBandwidth CGroupBlockIODeviceBandwidth;
  18
  19 typedef enum CGroupDevicePolicy {
  20
  21         /* When devices listed, will allow those, plus built-in ones,
  22         if none are listed will allow everything. */
  23         CGROUP_AUTO,
  24
  25         /* Everything forbidden, except built-in ones and listed ones. */
  26         CGROUP_CLOSED,
  27
  28         /* Everythings forbidden, except for the listed devices */
  29         CGROUP_STRICT,
  30
  31         _CGROUP_DEVICE_POLICY_MAX,
  32         _CGROUP_DEVICE_POLICY_INVALID = -1
  33 } CGroupDevicePolicy;
  34
  35 struct CGroupDeviceAllow {
  36         LIST_FIELDS(CGroupDeviceAllow, device_allow);
  37         char *path;
  38         bool r:1;
  39         bool w:1;
  40         bool m:1;
  41 };
  42
  43 struct CGroupIODeviceWeight {
  44         LIST_FIELDS(CGroupIODeviceWeight, device_weights);
  45         char *path;
  46         uint64_t weight;
  47 };
  48
  49 struct CGroupIODeviceLimit {
  50         LIST_FIELDS(CGroupIODeviceLimit, device_limits);
  51         char *path;
  52         uint64_t limits[_CGROUP_IO_LIMIT_TYPE_MAX];
  53 };
  54
  55 struct CGroupIODeviceLatency {
  56         LIST_FIELDS(CGroupIODeviceLatency, device_latencies);
  57         char *path;
  58         usec_t target_usec;
  59 };
  60
  61 struct CGroupBlockIODeviceWeight {
  62         LIST_FIELDS(CGroupBlockIODeviceWeight, device_weights);
  63         char *path;
  64         uint64_t weight;
  65 };
  66
  67 struct CGroupBlockIODeviceBandwidth {
  68         LIST_FIELDS(CGroupBlockIODeviceBandwidth, device_bandwidths);
  69         char *path;
  70         uint64_t rbps;
  71         uint64_t wbps;
  72 };
  73
  74 struct CGroupContext {
  75         bool cpu_accounting;
  76         bool io_accounting;
  77         bool blockio_accounting;
  78         bool memory_accounting;
  79         bool tasks_accounting;
  80         bool ip_accounting;
  81
  82         /* Configures the memory.oom.group attribute (on unified) */
  83         bool memory_oom_group;
  84
  85         bool delegate;
  86         CGroupMask delegate_controllers;
  87         CGroupMask disable_controllers;
  88
  89         /* For unified hierarchy */
  90         uint64_t cpu_weight;
  91         uint64_t startup_cpu_weight;
  92         usec_t cpu_quota_per_sec_usec;
  93         usec_t cpu_quota_period_usec;
  94
  95         uint64_t io_weight;
  96         uint64_t startup_io_weight;
  97         LIST_HEAD(CGroupIODeviceWeight, io_device_weights);
  98         LIST_HEAD(CGroupIODeviceLimit, io_device_limits);
  99         LIST_HEAD(CGroupIODeviceLatency, io_device_latencies);
 100
 101         uint64_t memory_min;
 102         uint64_t memory_low;
 103         uint64_t memory_high;
 104         uint64_t memory_max;
 105         uint64_t memory_swap_max;
 106
 107         LIST_HEAD(IPAddressAccessItem, ip_address_allow);
 108         LIST_HEAD(IPAddressAccessItem, ip_address_deny);
 109
 110         /* For legacy hierarchies */
 111         uint64_t cpu_shares;
 112         uint64_t startup_cpu_shares;
 113
 114         uint64_t blockio_weight;
 115         uint64_t startup_blockio_weight;
 116         LIST_HEAD(CGroupBlockIODeviceWeight, blockio_device_weights);
 117         LIST_HEAD(CGroupBlockIODeviceBandwidth, blockio_device_bandwidths);
 118
 119         uint64_t memory_limit;
 120
 121         CGroupDevicePolicy device_policy;
 122         LIST_HEAD(CGroupDeviceAllow, device_allow);
 123
 124         /* Common */
 125         uint64_t tasks_max;
 126 };
 127
 128 /* Used when querying IP accounting data */
 129 typedef enum CGroupIPAccountingMetric {
 130         CGROUP_IP_INGRESS_BYTES,
 131         CGROUP_IP_INGRESS_PACKETS,
 132         CGROUP_IP_EGRESS_BYTES,
 133         CGROUP_IP_EGRESS_PACKETS,
 134         _CGROUP_IP_ACCOUNTING_METRIC_MAX,
 135         _CGROUP_IP_ACCOUNTING_METRIC_INVALID = -1,
 136 } CGroupIPAccountingMetric;
 137
 138 typedef struct Unit Unit;
 139 typedef struct Manager Manager;
 140
 141 usec_t cgroup_cpu_adjust_period(usec_t period, usec_t quota, usec_t resolution, usec_t max_period);
 142
 143 void cgroup_context_init(CGroupContext *c);
 144 void cgroup_context_done(CGroupContext *c);
 145 void cgroup_context_dump(CGroupContext *c, FILE* f, const char *prefix);
 146
 147 void cgroup_context_free_device_allow(CGroupContext *c, CGroupDeviceAllow *a);
 148 void cgroup_context_free_io_device_weight(CGroupContext *c, CGroupIODeviceWeight *w);
 149 void cgroup_context_free_io_device_limit(CGroupContext *c, CGroupIODeviceLimit *l);
 150 void cgroup_context_free_io_device_latency(CGroupContext *c, CGroupIODeviceLatency *l);
 151 void cgroup_context_free_blockio_device_weight(CGroupContext *c, CGroupBlockIODeviceWeight *w);
 152 void cgroup_context_free_blockio_device_bandwidth(CGroupContext *c, CGroupBlockIODeviceBandwidth *b);
 153
 154 int cgroup_add_device_allow(CGroupContext *c, const char *dev, const char *mode);
 155
 156 CGroupMask unit_get_own_mask(Unit *u);
 157 CGroupMask unit_get_delegate_mask(Unit *u);
 158 CGroupMask unit_get_members_mask(Unit *u);
 159 CGroupMask unit_get_siblings_mask(Unit *u);
 160 CGroupMask unit_get_subtree_mask(Unit *u);
 161 CGroupMask unit_get_disable_mask(Unit *u);
 162 CGroupMask unit_get_ancestor_disable_mask(Unit *u);
 163
 164 CGroupMask unit_get_target_mask(Unit *u);
 165 CGroupMask unit_get_enable_mask(Unit *u);
 166
 167 void unit_invalidate_cgroup_members_masks(Unit *u);
 168
 169 void unit_add_to_cgroup_realize_queue(Unit *u);
 170
 171 const char *unit_get_realized_cgroup_path(Unit *u, CGroupMask mask);
 172 char *unit_default_cgroup_path(const Unit *u);
 173 int unit_set_cgroup_path(Unit *u, const char *path);
 174 int unit_pick_cgroup_path(Unit *u);
 175
 176 int unit_realize_cgroup(Unit *u);
 177 void unit_release_cgroup(Unit *u);
 178 void unit_prune_cgroup(Unit *u);
 179 int unit_watch_cgroup(Unit *u);
 180 int unit_watch_cgroup_memory(Unit *u);
 181
 182 void unit_add_to_cgroup_empty_queue(Unit *u);
 183
 184 int unit_attach_pids_to_cgroup(Unit *u, Set *pids, const char *suffix_path);
 185
 186 int manager_setup_cgroup(Manager *m);
 187 void manager_shutdown_cgroup(Manager *m, bool delete);
 188
 189 unsigned manager_dispatch_cgroup_realize_queue(Manager *m);
 190
 191 Unit *manager_get_unit_by_cgroup(Manager *m, const char *cgroup);
 192 Unit *manager_get_unit_by_pid_cgroup(Manager *m, pid_t pid);
 193 Unit* manager_get_unit_by_pid(Manager *m, pid_t pid);
 194
 195 int unit_search_main_pid(Unit *u, pid_t *ret);
 196 int unit_watch_all_pids(Unit *u);
 197
 198 int unit_synthesize_cgroup_empty_event(Unit *u);
 199
 200 int unit_get_memory_current(Unit *u, uint64_t *ret);
 201 int unit_get_tasks_current(Unit *u, uint64_t *ret);
 202 int unit_get_cpu_usage(Unit *u, nsec_t *ret);
 203 int unit_get_ip_accounting(Unit *u, CGroupIPAccountingMetric metric, uint64_t *ret);
 204
 205 int unit_reset_cpu_accounting(Unit *u);
 206 int unit_reset_ip_accounting(Unit *u);
 207
 208 #define UNIT_CGROUP_BOOL(u, name)                       \
 209         ({                                              \
 210         CGroupContext *cc = unit_get_cgroup_context(u); \
 211         cc ? cc->name : false;                          \
 212         })
 213
 214 bool manager_owns_host_root_cgroup(Manager *m);
 215 bool unit_has_host_root_cgroup(Unit *u);
 216
 217 int manager_notify_cgroup_empty(Manager *m, const char *group);
 218
 219 void unit_invalidate_cgroup(Unit *u, CGroupMask m);
 220 void unit_invalidate_cgroup_bpf(Unit *u);
 221
 222 void manager_invalidate_startup_units(Manager *m);
 223
 224 const char* cgroup_device_policy_to_string(CGroupDevicePolicy i) _const_;
 225 CGroupDevicePolicy cgroup_device_policy_from_string(const char *s) _pure_;
 226
 227 bool unit_cgroup_delegate(Unit *u);