diff options
| author | Andrei Vagin <avagin@google.com> | 2023-11-09 09:33:57 -0800 |
|---|---|---|
| committer | Andrei Vagin <avagin@google.com> | 2023-11-09 18:25:29 +0000 |
| commit | 4832e6fbdb5a92061891cfc413497753642e1134 (patch) | |
| tree | 3540e157bf4fbce55f84b452f1fa49079cc4948a /vm/gvisor | |
| parent | 56230772cba106f46117f03491f01c3cf511ae26 (diff) | |
vm/gvisor: set the fs.nr_open limit
By default, gVisor is set fs.nr_open to the maximum. In this case, large
allocations can be triggered in the Sentry and it can cause OOM-s on the
test node.
Signed-off-by: Andrei Vagin <avagin@google.com>
Diffstat (limited to 'vm/gvisor')
| -rw-r--r-- | vm/gvisor/gvisor.go | 45 |
1 files changed, 24 insertions, 21 deletions
diff --git a/vm/gvisor/gvisor.go b/vm/gvisor/gvisor.go index e5cdefb35..5ca3e0971 100644 --- a/vm/gvisor/gvisor.go +++ b/vm/gvisor/gvisor.go @@ -421,29 +421,32 @@ const configTempl = ` "readonly": true }, "linux": { - "cgroupsPath": "%[3]v", - "resources": { - "cpu": { - "shares": 1024 - }, - "memory": { - "limit": %[4]d, - "reservation": %[4]d, - "disableOOMKiller": false - } - } + "cgroupsPath": "%[3]v", + "resources": { + "cpu": { + "shares": 1024 + }, + "memory": { + "limit": %[4]d, + "reservation": %[4]d, + "disableOOMKiller": false + } + }, + "sysctl": { + "fs.nr_open": "1048576" + } }, "process":{ - "args": ["/init"], - "cwd": "/tmp", - "env": ["SYZ_GVISOR_PROXY=1"], - "capabilities": { - "bounding": [%[2]v], - "effective": [%[2]v], - "inheritable": [%[2]v], - "permitted": [%[2]v], - "ambient": [%[2]v] - } + "args": ["/init"], + "cwd": "/tmp", + "env": ["SYZ_GVISOR_PROXY=1"], + "capabilities": { + "bounding": [%[2]v], + "effective": [%[2]v], + "inheritable": [%[2]v], + "permitted": [%[2]v], + "ambient": [%[2]v] + } } } ` |