openstack/tripleo-ansible
Code Issues Proposed changes
d46e7d92c9
tripleo-ansible/tripleo_ansible/roles
History
Michele Baldessari d46e7d92c9 Support default pid limits in containers.conf 
Starting With podman 2.X the default pids-limits has been halved from
4096 to 2048:
$ rpm -q podman && podman run --rm -it --net=host --name 'pids' edecd409281d sh -c 'cat /sys/fs/cgroup/pids/pids.max'
podman-2.2.1-3.module+el8.3.1+9392+c5f6d096.x86_64
2048

With podman-1.6.4 the global default pid-limits was hardcoded to 4096
and we had no way to tweak it.

With podman 2.X it is possible to override this in
/etc/containers/containers.conf with the pids_limit setting inside
[containers] in the /etc/containers/containers.conf ini-file:
$ cat /etc/containers/containers.conf
[containers]
pids_limit=6666

$ podman run --rm -it --net=host --name 'pids' edecd409281d sh -c 'cat /sys/fs/cgroup/pids/pids.max'
6666

By adding this we keep the older 4096 default so we do not regress and
at the same time we allow an operator to override this globally.

Related-Bug: #1915122

Change-Id: Id5d5fb9d20c0295763c78171190b9eda13508617
(cherry picked from commit 6b827c199b)
2021-02-11 05:48:56 +00:00
..
aide Use the UBI8 image for testing 2020-09-23 08:56:23 -05:00
backup_and_restore Opens ports to NFS server's firewalld 2021-01-25 11:50:17 +00:00
login_defs Use the UBI8 image for testing 2020-09-23 08:56:23 -05:00
octavia_common Add support for Octavia amphora log offloading 2020-06-03 19:09:09 +00:00
octavia_controller_check Increase validity period of Octavia CA and certificates 2020-06-11 08:12:37 +02:00
octavia_controller_config Scan existing controllers on update to pick up existing certs/private keys 2020-05-26 15:21:09 +02:00
octavia_controller_post_config Add support for Octavia amphora log offloading 2020-06-03 19:09:09 +00:00
octavia_overcloud_config Hide CA passphrase in Octavia tasks 2020-07-30 10:30:24 +02:00
octavia_undercloud Octavia: handle empty amphora image search result 2020-04-23 10:23:52 -02:30
test_deps Use the UBI8 image for testing 2020-09-23 08:56:23 -05:00
test_package_action Use the UBI8 image for testing 2020-09-23 08:56:23 -05:00
tripleo_bootstrap Stop NetworkManager from updating resolv.conf 2020-12-04 03:13:02 +00:00
tripleo_cellv2 Use the UBI8 image for testing 2020-09-23 08:56:23 -05:00
tripleo_ceph_common Use the UBI8 image for testing 2020-09-23 08:56:23 -05:00
tripleo_ceph_run_ansible Use the UBI8 image for testing 2020-09-23 08:56:23 -05:00
tripleo_ceph_uuid Use the UBI8 image for testing 2020-09-23 08:56:23 -05:00
tripleo_ceph_work_dir Add ceph_client default options to ceph.conf 2020-10-13 16:22:02 +02:00
tripleo_clients_install Add test_deps_setup_tripleo var 2021-01-29 17:29:51 +05:30
tripleo_config Use the UBI8 image for testing 2020-09-23 08:56:23 -05:00
tripleo_container_image_build Use the UBI8 image for testing 2020-09-23 08:56:23 -05:00
tripleo_container_image_prepare Use the UBI8 image for testing 2020-09-23 08:56:23 -05:00
tripleo_container_manage Instruct systemd to accept 137 and 143 exit code 2020-10-06 17:20:01 +02:00
tripleo_container_rm Replace podman commands by module 2020-05-11 13:05:38 +00:00
tripleo_container_stop Replace podman commands by module 2020-05-11 13:05:38 +00:00
tripleo_container_tag Convert docker molecule usage to podman 2020-04-30 09:55:18 -05:00
tripleo_create_admin Add test_deps_setup_tripleo var 2021-01-29 17:29:51 +05:30
tripleo_derived_parameters Use the UBI8 image for testing 2020-09-23 08:56:23 -05:00
tripleo_firewall Allow tripleo_firewall to work in check mode 2020-09-29 16:41:45 +00:00
tripleo_ha_wrapper Add test_deps_setup_tripleo var 2021-01-29 17:29:51 +05:30
tripleo_hieradata Add OVN chassis macs to hieradata 2020-09-29 19:30:58 +02:00
tripleo_hosts_entries Use the UBI8 image for testing 2020-09-23 08:56:23 -05:00
tripleo_image_serve Handle containers with no namespace 2021-02-09 18:40:06 +00:00
tripleo_kernel [kernel] Updating facts before disabling NICs 2020-12-24 04:37:55 +00:00
tripleo_keystone_resources Add no_log to os_user async status 2020-09-15 10:38:31 -06:00
tripleo_lvmfilter Run LVM filter tasks when enabled, regardless of allow/deny list size 2020-12-17 09:11:45 +00:00
tripleo_module_load Switch from handlers to tasks 2020-07-24 13:07:25 -06:00
tripleo_multipathd Add tripleo_multipathd role 2020-10-19 07:59:52 -07:00
tripleo_network_config Merge "networks_lower group_var replace role_networks_lower" into stable/victoria 2020-12-21 11:24:01 +00:00
tripleo_nodes_validation Use the UBI8 image for testing 2020-09-23 08:56:23 -05:00
tripleo_nova_image_cache Use the UBI8 image for testing 2020-09-23 08:56:23 -05:00
tripleo_nvdimm Add test_deps_setup_tripleo var 2021-01-29 17:29:51 +05:30
tripleo_ovs_dpdk Don't set capabilities in priviledge mode 2021-01-27 18:30:15 +05:30
tripleo_packages Remove pcs/pacemaker package installation from upgrade tasks 2021-01-29 06:04:46 +00:00
tripleo_persist Use the UBI8 image for testing 2020-09-23 08:56:23 -05:00
tripleo_podman Support default pid limits in containers.conf 2021-02-11 05:48:56 +00:00
tripleo_provision_mcelog Add missing doc & zuul job for tripleo_provision_mcelog 2020-05-22 16:17:29 -04:00
tripleo_ptp Don't set capabilities in priviledge mode 2021-01-27 18:30:15 +05:30
tripleo_puppet_cache Don't set capabilities in priviledge mode 2021-01-27 18:30:15 +05:30
tripleo_redhat_enforce Don't set capabilities in priviledge mode 2021-01-27 18:30:15 +05:30
tripleo_securetty Use the UBI8 image for testing 2020-09-23 08:56:23 -05:00
tripleo_ssh_known_hosts Add test_deps_setup_tripleo var 2021-01-29 17:29:51 +05:30
tripleo_sshd Add test_deps_setup_tripleo var 2021-01-29 17:29:51 +05:30
tripleo_systemd_wrapper Don't set capabilities in priviledge mode 2021-01-27 18:30:15 +05:30
tripleo_timezone Don't set capabilities in priviledge mode 2021-01-27 18:30:15 +05:30
tripleo_transfer Don't set capabilities in priviledge mode 2021-01-27 18:30:15 +05:30
tripleo_upgrade_hiera Don't set capabilities in priviledge mode 2021-01-27 18:30:15 +05:30
tripleo_validations_package Add test_deps_setup_tripleo var 2021-01-29 17:29:51 +05:30
tuned Ensure tuned_custom_profile is used for tuned role 2020-12-17 13:58:00 +00:00