9b0fc1fc7c
For the sake of consistency the "systemd" prefix was added to the without-privatedevices.conf file. A new configuration file has been added which will further isolate our services using a named cgroup; this is similar to what we already do in our openstack services. By further isolating the service from the system we get quite a bit more control and accountability. Change-Id: I5707ef318341259b086a5f1d49656fd0d1c7f269 Signed-off-by: Kevin Carter <kevin.carter@rackspace.com>
12 lines
350 B
Django/Jinja
12 lines
350 B
Django/Jinja
# {{ ansible_managed }}
|
|
|
|
[Service]
|
|
# This creates a specific slice to operate from. The accounting options give us
|
|
# the ability to see resource usage through the `systemd-cgtop` command and
|
|
# further isolate this service from the host machine.
|
|
Slice=galera.slice
|
|
CPUAccounting=true
|
|
BlockIOAccounting=true
|
|
MemoryAccounting=false
|
|
TasksAccounting=true
|