From 1016c1e0692da03124766431f40316c12ad05032 Mon Sep 17 00:00:00 2001 From: Christian Brauner Date: Sun, 29 Oct 2017 17:03:57 +0100 Subject: [PATCH] start: close data socket in parent Brings the number of open fds in the monitor process for a standard container without ttys down to 17. Signed-off-by: Christian Brauner --- src/lxc/start.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/src/lxc/start.c b/src/lxc/start.c index d565438af..609ec565b 100644 --- a/src/lxc/start.c +++ b/src/lxc/start.c @@ -1531,6 +1531,11 @@ int __lxc_start(const char *name, struct lxc_handler *handler, ERROR("Failed to spawn container \"%s\".", name); goto out_detach_blockdev; } + /* close parent side of data socket */ + close(handler->data_sock[0]); + handler->data_sock[0] = -1; + close(handler->data_sock[1]); + handler->data_sock[1] = -1; handler->conf->reboot = 0; -- 2.47.2