{"id":7582,"date":"2022-10-18T12:21:22","date_gmt":"2022-10-18T04:21:22","guid":{"rendered":"https:\/\/egonlin.com\/?p=7582"},"modified":"2022-10-22T12:01:23","modified_gmt":"2022-10-22T04:01:23","slug":"07-cgroup%e5%af%b9cpu-%e5%86%85%e5%ad%98-%e7%a3%81%e7%9b%98io%e8%bf%9b%e8%a1%8c%e9%99%90%e5%88%b6","status":"publish","type":"post","link":"https:\/\/egonlin.com\/?p=7582","title":{"rendered":"07 Cgroup\u9650\u5236cpu\/\u5185\u5b58\/\u78c1\u76d8IO"},"content":{"rendered":"<p>\u622a\u6b62\u5230\u76ee\u524d\u4e3a\u6b62\u6211\u4eec\u5df2\u7ecf\u6df1\u5165\u5b66\u4e60\u4e86\u5bb9\u5668\u5f15\u64ce\u7684\u8fdb\u7a0b\u3001\u5185\u5b58\u3001\u5b58\u50a8\u7ba1\u7406\uff0c\u5305\u62ec\u5bf9\u6bcf\u79cd\u8d44\u6e90\u7684\u9650\u5236\u65b9\u6cd5\uff0c\u90a3\u672c\u8282\u4f5c\u4e3a\u4e86\u89e3\uff0c\u6211\u4eec\u5c31\u6765\u4e00\u8d77\u603b\u7ed3\u4e00\u4e0bcgroup\u673a\u5236\uff0c\u67e5\u6f0f\u8865\u7f3a\uff0c\u56e0\u4e3a\u540e\u671f\u6211\u4eec\u4f7f\u7528k8s\uff0c\u66f4\u591a\u7684\u4f1a\u57fa\u4e8ek8s\u6765\u7ba1\u7406\u5bb9\u5668\uff0c\u6240\u4ee5\u672c\u7ae0\u8282\u5185\u5bb9\u4f5c\u4e3a\u4e86\u89e3\u5373\u53ef<\/p>\n<h1>\u4e00\u3001Cgroup\u8d44\u6e90\u914d\u7f6e\u65b9\u6cd5<\/h1>\n<p>Docker\u901a\u8fc7 Cgroup \u6765\u63a7\u5236\u5bb9\u5668\u4f7f\u7528\u7684\u8d44\u6e90\u914d\u989d\uff0c\u5305\u62ec CPU\u3001\u5185\u5b58\u3001\u78c1\u76d8\u4e09\u5927\u65b9\u9762\uff0c \u57fa\u672c\u8986\u76d6\u4e86\u5e38\u89c1\u7684\u8d44\u6e90\u914d\u989d\u548c\u4f7f\u7528\u91cf\u63a7\u5236\u3002<\/p>\n<p>Cgroup\u662fControl Groups\u7684\u7f29\u5199\uff0c\u662fLinux\u5185\u6838\u63d0\u4f9b\u7684\u4e00\u79cd\u53ef\u4ee5\u9650\u5236\u3001\u8bb0\u5f55\u3001\u9694\u79bb\u8fdb\u7a0b\u7ec4\u6240\u4f7f\u7528\u7684\u7269\u7406\u8d44\u6e90\uff08\u5982CPU\u3001\u5185\u5b58\u3001\u78c1\u76d8IO\u7b49\u7b49\uff09\u7684\u673a\u5236\uff0c\u88abLXC\u3001docker\u7b49\u5f88\u591a\u9879\u76ee\u7528\u4e8e\u5b9e\u73b0\u8fdb\u7a0b\u8d44\u6e90\u63a7\u5236\u3002Cgroup\u672c\u8eab\u662f\u63d0\u4f9b\u5c06\u8fdb\u7a0b\u8fdb\u884c\u5206\u7ec4\u5316\u7ba1\u7406\u7684\u529f\u80fd\u548c\u63a5\u53e3\u7684\u57fa\u7840\u7ed3\u6784\uff0cI\/O\u6216\u5185\u5b58\u7684\u5206\u914d\u63a7\u5236\u7b49\u5177\u4f53\u7684\u8d44\u6e90\u7ba1\u7406\u662f\u901a\u8fc7\u8be5\u529f\u80fd\u6765\u5b9e\u73b0\u7684\u3002\u8fd9\u4e9b\u5177\u4f53\u7684\u8d44\u6e90\u7ba1\u7406\u529f\u80fd\u79f0\u4e3aCgroup\u5b50\u7cfb\u7edf\uff0c\u6709\u4ee5\u4e0b\u51e0\u5927\u5b50\u7cfb\u7edf\u5b9e\u73b0\uff1a<\/p>\n<ul>\n<li>blkio\uff1a\u8bbe\u7f6e\u9650\u5236\u6bcf\u4e2a\u5757\u8bbe\u5907\u7684\u8f93\u5165\u8f93\u51fa\u63a7\u5236\u3002\u4f8b\u5982\uff1a\u78c1\u76d8\uff0c\u5149\u76d8\u4ee5\u53causb\u7b49\u5f85\u3002<\/li>\n<li>CPU\uff1a\u4f7f\u7528\u8c03\u5ea6\u7a0b\u5e8f\u4e3acgroup\u4efb\u52a1\u63d0\u4f9bCPU\u8d44\u6e90\u62a5\u544a\u3002<\/li>\n<li>cpuacct\uff1a\u4ea7\u751fcgroup\u4efb\u52a1\u7684CPU\u8d44\u6e90\u62a5\u544a\u3002<\/li>\n<li>cpuset\uff1a\u5982\u679c\u662f\u591a\u6838\u5fc3\u7684CPU\uff0c\u8fd9\u4e2a\u5b50\u7cfb\u7edf\u4f1a\u4e3acgroup\u4efb\u52a1\u5206\u914d\u5355\u72ec\u7684CPU\u548c\u5185\u5b58\u3002<\/li>\n<li>devices\uff1a\u5141\u8bb8\u6216\u62d2\u7eddcgroup\u4efb\u52a1\u5bf9\u8bbe\u5907\u7684\u8bbf\u95ee\u3002<\/li>\n<li>freezer\uff1a\u6682\u505c\u548c\u6062\u590dcgroup\u4efb\u52a1\u3002<\/li>\n<li>memiry\uff1a\u8bbe\u7f6e\u6bcf\u4e2acgroup\u7684\u5185\u5b58\u9650\u5236\u4ee5\u53ca\u4ea7\u751f\u5185\u5b58\u8d44\u6e90\u62a5\u544a\u3002<\/li>\n<li>net_cls\uff1a\u6807\u8bb0\u6bcf\u4e2a\u7f51\u7edc\u4ee5\u4f9bcgroup\u65b9\u4fbf\u4f7f\u7528\u3002<\/li>\n<li>ns\uff1a\u547d\u540d\u7a7a\u95f4\u5b50\u7cfb\u7edf\u3002<\/li>\n<li>perf_event\uff1a\u589e\u52a0\u5bf9\u6bcf\u4e2agroup\u7684\u76d1\u63a7\u8ddf\u8e2a\u7684\u80fd\u529b\uff0c\u53ef\u4ee5\u76d1\u6d4b\u5c5e\u4e8e\u67d0\u4e2a\u7279\u5b9a\u7684group\u7684\u6240\u6709\u7ebf\u7a0b\u4ee5\u53ca\u8fd0\u884c\u5728\u7279\u5b9aCPU\u4e0a\u7684\u7ebf\u7a0b\u3002<br \/>\n\u4e0b\u9762\u5f00\u59cb\u5229\u7528stress\u538b\u529b\u6d4b\u8bd5\u5de5\u5177\u6765\u6d4b\u8bd5CPU\u548c\u5185\u5b58\u9002\u7528\u72b6\u51b5<\/li>\n<\/ul>\n<h1>\u4e8c\u3001\u6784\u5efastress\u955c\u50cf<\/h1>\n<p>\u4f7f\u7528Dockerfile\u6765\u521b\u5efa\u4e00\u4e2a\u57fa\u4e8eCentos\u7684stress\u5de5\u5177\u955c\u50cf\uff0c\u7528\u4e8e\u540e\u7eed\u7684cpu\u4e0e\u5185\u5b58\u9650\u5236\u6d4b\u8bd5<\/p>\n<pre><code>mkdir stress\ncd stress\/\nvi Dockerfile\nFROM centos:7\nMAINTAINER stress\nRUN yum -y install wget\nRUN wget -O \/etc\/yum.repos.d\/epel.repo http:\/\/mirrors.aliyun.com\/repo\/epel-7.repo\nRUN yum -y install stress<\/code><\/pre>\n<p>docker build -t centos:stress .<\/p>\n<h1>\u4e09\u3001CPU Cgroup\u9650\u5236<\/h1>\n<h2>3.1 \u6982\u8ff0<\/h2>\n<p>Docker \u7684\u8d44\u6e90\u9650\u5236\u548c\u9694\u79bb\u5b8c\u5168\u57fa\u4e8e Linux cgroups\u3002\u5bf9 CPU \u8d44\u6e90\u7684\u9650\u5236\u65b9\u5f0f\u4e5f\u548c cgroups \u76f8\u540c\u3002Docker \u63d0\u4f9b\u7684 CPU \u8d44\u6e90\u9650\u5236\u9009\u9879\u53ef\u4ee5\u5728\u591a\u6838\u7cfb\u7edf\u4e0a\u9650\u5236\u5bb9\u5668\u80fd\u5229\u7528\u54ea\u4e9b vCPU\u3002\u800c\u5bf9\u5bb9\u5668\u6700\u591a\u80fd\u4f7f\u7528\u7684 CPU \u65f6\u95f4\u6709\u4e24\u79cd\u9650\u5236\u65b9\u5f0f\uff1a\u4e00\u662f\u6709\u591a\u4e2a CPU \u5bc6\u96c6\u578b\u7684\u5bb9\u5668\u7ade\u4e89 CPU \u65f6\uff0c\u8bbe\u7f6e\u5404\u4e2a\u5bb9\u5668\u80fd\u4f7f\u7528\u7684 CPU \u65f6\u95f4\u76f8\u5bf9\u6bd4\u4f8b\u3002\u4e8c\u662f\u4ee5\u7edd\u5bf9\u7684\u65b9\u5f0f\u8bbe\u7f6e\u5bb9\u5668\u5728\u6bcf\u4e2a\u8c03\u5ea6\u5468\u671f\u5185\u6700\u591a\u80fd\u4f7f\u7528\u7684 CPU \u65f6\u95f4\u3002<\/p>\n<h2>3.2 CPU \u9650\u5236\u76f8\u5173\u53c2\u6570<\/h2>\n<p>docker run\u547d\u4ee4\u548c CPU \u9650\u5236\u76f8\u5173\u7684\u6240\u6709\u9009\u9879\u5982\u4e0b\uff1a<br \/>\n<div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/egonlin.com\/wp-content\/uploads\/2022\/10\/image-1666322095036.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  data-original=\"https:\/\/egonlin.com\/wp-content\/uploads\/2022\/10\/image-1666322095036.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"file\" \/><\/div><\/p>\n<p>\u5176\u4e2d&#8211;cpuset-cpus\u7528\u4e8e\u8bbe\u7f6e\u5bb9\u5668\u53ef\u4ee5\u4f7f\u7528\u7684 vCPU \u6838\u3002<br \/>\n-c,&#8211;cpu-shares\u7528\u4e8e\u8bbe\u7f6e\u591a\u4e2a\u5bb9\u5668\u7ade\u4e89 CPU \u65f6\uff0c\u5404\u4e2a\u5bb9\u5668\u76f8\u5bf9\u80fd\u5206\u914d\u5230\u7684 CPU \u65f6\u95f4\u6bd4\u4f8b\u3002<br \/>\n&#8211;cpu-period\u548c&#8211;cpu-quata\u7528\u4e8e\u7edd\u5bf9\u8bbe\u7f6e\u5bb9\u5668\u80fd\u4f7f\u7528 CPU \u65f6\u95f4\u3002<br \/>\n&#8211;cpuset-mems\u6682\u7528\u4e0d\u4e0a\uff0c\u8fd9\u91cc\u4e0d\u8c08\u3002<\/p>\n<h2>3.3 CPU \u96c6<\/h2>\n<p>\u5bf9\u591a\u6838 CPU \u7684\u670d\u52a1\u5668\uff0cDocker \u8fd8\u53ef\u4ee5\u63a7\u5236\u5bb9\u5668\u8fd0\u884c\u4f7f\u7528\u54ea\u4e9b CPU \u5185\u6838\uff0c\u5373\u4f7f\u7528\u2013cpuset-cpus \u53c2\u6570\u3002<br \/>\n\u8fd9\u5bf9\u5177\u6709\u591a CPU \u7684\u670d\u52a1\u5668\u5c24\u5176\u6709\u7528\uff0c\u53ef\u4ee5\u5bf9\u9700\u8981\u9ad8\u6027\u80fd\u8ba1\u7b97\u7684\u5bb9\u5668\u8fdb\u884c\u6027\u80fd\u6700\u4f18\u7684\u914d\u7f6e\u3002<\/p>\n<pre><code>\u4f8b\u5982\uff1a\u8868\u793a\u5bb9\u5668\u4e2d\u7684\u8fdb\u7a0b\u53ef\u4ee5\u5728 cpu 1 \u548c cpu 3 \u4e0a\u6267\u884c\u3002\n$ docker run -it --cpuset-cpus=&quot;1,3&quot; ubuntu:14.04 \/bin\/bash\n\n\u4f8b\u5982\uff1a\u8868\u793a\u5bb9\u5668\u4e2d\u7684\u8fdb\u7a0b\u53ef\u4ee5\u5728 cpu0\u3001cpu1\u3001cpu2 \u4e0a\u6267\u884c\u3002\n$ docker run -it --cpuset-cpus=&quot;0-2&quot; ubuntu:14.04 \/bin\/bash\n\n\u751f\u6210 \u7684 cgroup \u7684 CPU \u5185\u6838\u914d\u7f6e\u5982\u4e0b\uff1a\ndocker exec -it d6354e971906 bash\n[root@d6354e971906 \/]# cat \/sys\/fs\/cgroup\/cpuset\/cpuset.cpus\n0-1\n\n\/\/\u901a\u8fc7\u4e0b\u9762\u6307\u4ee4\u53ef\u4ee5\u770b\u5230\u5bb9\u5668\u4e2d\u8fdb\u7a0b\u4e0e CPU \u5185\u6838\u7684\u7ed1\u5b9a\u5173\u7cfb\uff0c\u8fbe\u5230\u7ed1\u5b9a CPU \u5185\u6838\u7684\u76ee\u7684\u3002\n\/\/\u5bb9\u5668\u5185\u90e8\u7b2c\u4e00\u4e2a\u8fdb\u7a0b\u53f7pid\u4e3a1\u88ab\u7ed1\u5b9a\u5230\u6307\u5b9aCPU\u4e0a\u8fd0\u884c\n[root@localhost ~]# docker exec d6354e971906 taskset -c -p 1\npid 1&#039;s current affinity list: 0,1<\/code><\/pre>\n<p>\u5728 NUMA \u7cfb\u7edf\u4e0a\uff0c\u6211\u4eec\u53ef\u4ee5\u8bbe\u7f6e\u5bb9\u5668\u53ef\u4ee5\u4f7f\u7528\u7684\u5185\u5b58\u8282\u70b9\u3002<\/p>\n<pre><code>\u4f8b\u5982\uff1a\n1\u3001\u8868\u793a\u5bb9\u5668\u4e2d\u7684\u8fdb\u7a0b\u53ea\u80fd\u4f7f\u7528\u5185\u5b58\u8282\u70b9 1 \u548c 3 \u4e0a\u7684\u5185\u5b58\u3002\n$ docker run -it --cpuset-mems=&quot;1,3&quot; ubuntu:14.04 \/bin\/bash\n\n2\u3001\u8868\u793a\u5bb9\u5668\u4e2d\u7684\u8fdb\u7a0b\u53ea\u80fd\u4f7f\u7528\u5185\u5b58\u8282\u70b9 0\u30011\u30012 \u4e0a\u7684\u5185\u5b58\u3002\n$ docker run -it --cpuset-mems=&quot;0-2&quot; ubuntu:14.04 \/bin\/bash<\/code><\/pre>\n<h2>3.4 CPU \u8d44\u6e90\u7684\u76f8\u5bf9\u9650\u5236<\/h2>\n<p>\u9ed8\u8ba4\u60c5\u51b5\u4e0b\uff0c\u6240\u6709\u7684\u5bb9\u5668\u5f97\u5230\u540c\u7b49\u6bd4\u4f8b\u7684 CPU \u5468\u671f\u3002\u5728\u6709\u591a\u4e2a\u5bb9\u5668\u7ade\u4e89 CPU \u65f6\u6211\u4eec\u53ef\u4ee5\u8bbe\u7f6e\u6bcf\u4e2a\u5bb9\u5668\u80fd\u4f7f\u7528\u7684 CPU \u65f6\u95f4\u6bd4\u4f8b\u3002\u8fd9\u4e2a\u6bd4\u4f8b\u53eb\u4f5c\u5171\u4eab\u6743\u503c\uff0c\u901a\u8fc7-c\u6216&#8211;cpu-shares\u8bbe\u7f6e\u3002Docker \u9ed8\u8ba4\u6bcf\u4e2a\u5bb9\u5668\u7684\u6743\u503c\u4e3a 1024\u3002\u4e0d\u8bbe\u7f6e\u6216\u5c06\u5176\u8bbe\u7f6e\u4e3a 0\uff0c\u90fd\u5c06\u4f7f\u7528\u8fd9\u4e2a\u9ed8\u8ba4\u503c\u3002\u7cfb\u7edf\u4f1a\u6839\u636e\u6bcf\u4e2a\u5bb9\u5668\u7684\u5171\u4eab\u6743\u503c\u548c\u6240\u6709\u5bb9\u5668\u5171\u4eab\u6743\u503c\u548c\u6bd4\u4f8b\u6765\u7ed9\u5bb9\u5668\u5206\u914d CPU \u65f6\u95f4\u3002<\/p>\n<p>\u5047\u8bbe\u6709\u4e09\u4e2a\u6b63\u5728\u8fd0\u884c\u7684\u5bb9\u5668\uff0c\u8fd9\u4e09\u4e2a\u5bb9\u5668\u4e2d\u7684\u4efb\u52a1\u90fd\u662f CPU \u5bc6\u96c6\u578b\u7684\u3002\u7b2c\u4e00\u4e2a\u5bb9\u5668\u7684 cpu \u5171\u4eab\u6743\u503c\u662f 1024\uff0c\u5176\u5b83\u4e24\u4e2a\u5bb9\u5668\u7684 cpu \u5171\u4eab\u6743\u503c\u662f 512\u3002\u7b2c\u4e00\u4e2a\u5bb9\u5668\u5c06\u5f97\u5230 50% \u7684 CPU \u65f6\u95f4\uff0c\u800c\u5176\u5b83\u4e24\u4e2a\u5bb9\u5668\u5c31\u53ea\u80fd\u5404\u5f97\u5230 25% \u7684 CPU \u65f6\u95f4\u4e86\u3002\u5982\u679c\u518d\u6dfb\u52a0\u7b2c\u56db\u4e2a cpu \u5171\u4eab\u503c\u4e3a 1024 \u7684\u5bb9\u5668\uff0c\u6bcf\u4e2a\u5bb9\u5668\u5f97\u5230\u7684 CPU \u65f6\u95f4\u5c06\u91cd\u65b0\u8ba1\u7b97\u3002\u7b2c\u4e00\u4e2a\u5bb9\u5668\u7684CPU \u65f6\u95f4\u53d8\u4e3a 33%\uff0c\u5176\u5b83\u5bb9\u5668\u5206\u5f97\u7684 CPU \u65f6\u95f4\u5206\u522b\u4e3a 16.5%\u300116.5%\u300133%\u3002<\/p>\n<p>\u5fc5\u987b\u6ce8\u610f\u7684\u662f\uff0c\u8fd9\u4e2a\u6bd4\u4f8b\u53ea\u6709\u5728 CPU \u5bc6\u96c6\u578b\u7684\u4efb\u52a1\u6267\u884c\u65f6\u624d\u6709\u7528\u3002\u5728\u56db\u6838\u7684\u7cfb\u7edf\u4e0a\uff0c\u5047\u8bbe\u6709\u56db\u4e2a\u5355\u8fdb\u7a0b\u7684\u5bb9\u5668\uff0c\u5b83\u4eec\u90fd\u80fd\u5404\u81ea\u4f7f\u7528\u4e00\u4e2a\u6838\u7684 100% CPU \u65f6\u95f4\uff0c\u4e0d\u7ba1\u5b83\u4eec\u7684 cpu \u5171\u4eab\u6743\u503c\u662f\u591a\u5c11\u3002<\/p>\n<p>\u5728\u591a\u6838\u7cfb\u7edf\u4e0a\uff0cCPU \u65f6\u95f4\u6743\u503c\u662f\u5728\u6240\u6709 CPU \u6838\u4e0a\u8ba1\u7b97\u7684\u3002\u5373\u4f7f\u67d0\u4e2a\u5bb9\u5668\u7684 CPU \u65f6\u95f4\u9650\u5236\u5c11\u4e8e 100%\uff0c\u5b83\u4e5f\u80fd\u4f7f\u7528\u5404\u4e2a CPU \u6838\u7684 100% \u65f6\u95f4\u3002<\/p>\n<p>\u6848\u4f8b\u5c55\u793a\uff1a<\/p>\n<pre><code>[root@localhost ~]# docker run -itd --cpu-shares 100 centos:stress<\/code><\/pre>\n<ul>\n<li>\u8bf4\u660e\uff1a\u9ed8\u8ba4\u60c5\u51b5\u4e0b\uff0c\u6bcf\u4e2a Docker\u5bb9\u5668\u7684CPU\u4efd\u989d\u90fd\u662f1024\u3002\u5355\u72ec\u4e00\u4e2a\u5bb9\u5668\u7684\u4efd\u989d\u662f\u6ca1\u6709\u610f\u4e49\u7684\u3002\u53ea\u6709\u5728\u540c\u65f6\u8fd0\u884c\u591a\u4e2a\u5bb9\u5668\u65f6\uff0c\u5bb9\u5668\u7684 CPU \u52a0\u6743\u7684\u6548\u679c\u624d\u80fd\u4f53\u73b0\u51fa\u6765\u3002<\/li>\n<li>\u4f8b\u5982\uff0c\u4e24\u4e2a\u5bb9 \u5668 A\u3001B \u7684 CPU \u4efd\u989d\u5206\u522b\u4e3a 1000 \u548c 500\uff0c\u5728CPU\u8fdb\u884c\u65f6\u95f4\u7247\u5206\u914d\u7684\u65f6\u5019\uff0c\u5bb9\u5668A\u6bd4\u5bb9\u5668B\u591a\u4e00\u500d\u7684\u673a\u4f1a\u83b7\u5f97 CPU \u7684\u65f6\u95f4\u7247\u3002\u4f46\u5206\u914d\u7684\u7ed3\u679c\u53d6\u51b3\u4e8e\u5f53\u65f6\u4e3b\u673a\u548c\u5176\u4ed6\u5bb9\u5668\u7684\u8fd0\u884c\u72b6\u6001\uff0c \u5b9e\u9645\u4e0a\u4e5f\u65e0\u6cd5\u4fdd\u8bc1\u5bb9\u5668 A\u4e00\u5b9a\u80fd\u83b7\u5f97CPU\u65f6\u95f4\u7247\u3002\u6bd4\u5982\u5bb9\u5668A\u7684\u8fdb\u7a0b\u4e00\u76f4\u662f\u7a7a\u95f2\u7684\uff0c\u90a3\u4e48\u5bb9\u5668B\u662f\u53ef\u4ee5\u83b7\u53d6\u6bd4\u5bb9\u5668A\u66f4\u591a\u7684CPU\u65f6\u95f4\u7247\u7684\u3002\u6781\u7aef\u60c5\u51b5\u4e0b\uff0c\u4f8b\u5982\u4e3b\u673a\u4e0a\u53ea\u8fd0\u884c\u4e86\u4e00\u4e2a\u5bb9\u5668\uff0c\u5373\u4f7f\u5b83\u7684 CPU \u4efd\u989d\u53ea\u6709 50\uff0c\u5b83\u4e5f\u53ef\u4ee5\u72ec\u5360\u6574\u4e2a\u4e3b\u673a\u7684CPU\u8d44\u6e90\u3002<\/li>\n<li>\n<p>Cgroups \u53ea\u5728\u5bb9\u5668\u5206\u914d\u7684\u8d44\u6e90\u7d27\u7f3a\u65f6\uff0c\u5373\u5728\u9700\u8981\u5bf9\u5bb9\u5668\u4f7f\u7528\u7684\u8d44\u6e90\u8fdb\u884c\u9650\u5236\u65f6\uff0c\u624d\u4f1a\u751f\u6548\u3002\u56e0\u6b64\uff0c\u65e0\u6cd5\u5355\u7eaf\u6839\u636e\u67d0\u4e2a\u5bb9\u5668\u7684CPU\u4efd\u989d\u6765\u786e\u5b9a\u6709\u591a\u5c11CPU\u8d44\u6e90\u5206\u914d\u7ed9\u5b83\uff0c\u8d44\u6e90\u5206\u914d \u7ed3\u679c\u53d6\u51b3\u4e8e\u540c\u65f6\u8fd0\u884c\u7684\u5176\u4ed6\u5bb9\u5668\u7684CPU\u5206\u914d\u548c\u5bb9\u5668\u4e2d\u8fdb\u7a0b\u8fd0\u884c\u60c5\u51b5\u3002\u53ef\u4ee5\u901a\u8fc7 cpu share \u53ef\u4ee5\u8bbe\u7f6e\u5bb9\u5668\u4f7f\u7528 CPU \u7684\u4f18\u5148\u7ea7\uff0c\u6bd4\u5982\u542f\u52a8\u4e86\u4e24\u4e2a\u5bb9\u5668\u53ca\u8fd0\u884c\u67e5\u770b CPU \u4f7f\u7528\u767e\u5206\u6bd4\u3002<\/p>\n<p>\u5bb9\u56681<\/p>\n<pre><code>docker run -itd --name cup512 --cpu-shares 512 centos:stress stress -c 10\n\/\/\u5bb9\u5668\u4ea7\u751f10\u4e2a\u5b50\u51fd\u6570\u8fdb\u7a0b\ndocker exec -it 4636d757144d bash\n\/\/\u4f7f\u7528top\u67e5\u770bcpu\u4f7f\u7528\u60c5\u51b5\ntop\ntop - 06:19:47 up  2:42,  0 users,  load average: 18.19, 9.56, 4.04\nTasks:  13 total,  11 running,   2 sleeping,   0 stopped,   0 zombie\n%Cpu(s):100.0 us,  0.0 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st\nKiB Mem :  3865308 total,  2137660 free,   440260 used,  1287388 buff\/cache\nKiB Swap:  4063228 total,  4063228 free,        0 used.  3165704 avail Mem \nPID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND                         \n11 root      20   0    7312     96      0 R  15.0  0.0   1:40.83 stress                          \n13 root      20   0    7312     96      0 R  14.6  0.0   1:41.17 stress                          \n12 root      20   0    7312     96      0 R  14.0  0.0   1:42.02 stress                          \n15 root      20   0    7312     96      0 R  13.6  0.0   1:42.53 stress                          \n 7 root      20   0    7312     96      0 R  12.3  0.0   1:43.88 stress                          \n 8 root      20   0    7312     96      0 R  12.3  0.0   1:41.67 stress                          \n10 root      20   0    7312     96      0 R  12.3  0.0   1:43.07 stress                          \n 6 root      20   0    7312     96      0 R  12.0  0.0   1:42.93 stress                          \n 9 root      20   0    7312     96      0 R  12.0  0.0   1:42.62 stress                          \n14 root      20   0    7312     96      0 R  12.0  0.0   1:42.16 stress                          \n 1 root      20   0    7312    628    532 S   0.0  0.0   0:00.02 stress                          \n16 root      20   0   11828   1896   1488 S   0.0  0.0   0:00.02 bash                            \n30 root      20   0   56164   1952   1440 R   0.0  0.1   0:00.05 top<\/code><\/pre>\n<p>\u5bb9\u56682<\/p>\n<pre><code>docker run -itd --name cpu1024 --cpu-shares 1024 centos:stress stress -c 10\ndocker exec -it dc493a522dd3 bash\ntop\ntop - 06:19:49 up  2:42,  0 users,  load average: 18.19, 9.56, 4.04\nTasks:  13 total,  11 running,   2 sleeping,   0 stopped,   0 zombie\n%Cpu(s):100.0 us,  0.0 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st\nKiB Mem :  3865308 total,  2137824 free,   440096 used,  1287388 buff\/cache\nKiB Swap:  4063228 total,  4063228 free,        0 used.  3165868 avail Mem \nPID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND                         \n 8 root      20   0    7312     96      0 R  30.6  0.0   0:27.61 stress                          \n15 root      20   0    7312     96      0 R  29.9  0.0   0:28.45 stress                          \n 7 root      20   0    7312     96      0 R  29.6  0.0   0:26.82 stress                          \n14 root      20   0    7312     96      0 R  28.9  0.0   0:27.48 stress                          \n10 root      20   0    7312     96      0 R  27.6  0.0   0:27.69 stress                          \n 9 root      20   0    7312     96      0 R  25.2  0.0   0:27.02 stress                          \n12 root      20   0    7312     96      0 R  25.2  0.0   0:27.00 stress                          \n13 root      20   0    7312     96      0 R  24.6  0.0   0:27.69 stress                          \n11 root      20   0    7312     96      0 R  23.9  0.0   0:27.60 stress                          \n 6 root      20   0    7312     96      0 R  23.3  0.0   0:27.44 stress                          \n29 root      20   0   56164   1948   1440 R   0.3  0.1   0:00.01 top                             \n 1 root      20   0    7312    628    532 S   0.0  0.0   0:00.03 stress                          \n16 root      20   0   11828   1896   1488 S   0.0  0.0   0:00.02 bash<\/code><\/pre>\n<p>\u8fdb\u5165\u5bb9\u5668\u4f7f\u7528top\u5bf9\u6bd4\u4e24\u4e2a\u5bb9\u5668\u7684CPU%\uff0c\u6bd4\u4f8b\u662f1:2<\/p>\n<\/li>\n<\/ul>\n<h2>3.5\u3001CPU\u8d44\u6e90\u7684\u7edd\u5bf9\u9650\u5236<\/h2>\n<p>Linux \u901a\u8fc7 CFS\uff08Completely Fair Scheduler\uff0c\u5b8c\u5168\u516c\u5e73\u8c03\u5ea6\u5668\uff09\u6765\u8c03\u5ea6\u5404\u4e2a\u8fdb\u7a0b\u5bf9 CPU \u7684\u4f7f\u7528\u3002CFS \u9ed8\u8ba4\u7684\u8c03\u5ea6\u5468\u671f\u662f 100ms\u3002<br \/>\n\u5173\u4e8e CFS \u7684\u66f4\u591a\u4fe1\u606f\uff0c\u53c2\u8003<a href=\"https:\/\/www.kernel.org\/doc\/Documentation\/scheduler\/sched-bwc.txt\" title=\"CFS documentation on bandwidth limiting\u3002\">CFS documentation on bandwidth limiting\u3002<\/a><\/p>\n<p>Docker \u63d0\u4f9b\u4e86\u2013cpu-period\u3001\u2013cpu-quota \u4e24\u4e2a\u53c2\u6570\u63a7\u5236\u5bb9\u5668\u53ef\u4ee5\u5206\u914d\u5230\u7684 CPU \u65f6\u949f\u5468\u671f\uff0c\u4e24\u8005\u4e00\u822c\u914d\u5408\u4f7f\u7528\u3002<\/p>\n<ul>\n<li>\n<p>\u2013cpu-period \u8bbe\u7f6e\u5f53\u524d\u5bb9\u5668\u8fdb\u7a0b\u7684\u8c03\u5ea6\u5468\u671f<\/p>\n<\/li>\n<li>\n<p>\u2013cpu-quota \u8bbe\u7f6e\u5728\u6bcf\u4e2a\u5468\u671f\u5185\u5bb9\u5668\u80fd\u4f7f\u7528\u7684 CPU \u65f6\u95f4<\/p>\n<\/li>\n<\/ul>\n<p>CFS \u5468\u671f\u7684\u6709\u6548\u8303\u56f4\u662f 1ms~1s<br \/>\n\u5bf9\u5e94\u7684&#8211;cpu-period\u7684\u6570\u503c\u8303\u56f4\u662f 1000~1000000\u3002<br \/>\n\u800c\u5bb9\u5668\u7684 CPU \u914d\u989d\u5fc5\u987b\u4e0d\u5c0f\u4e8e 1ms\uff0c\u5373&#8211;cpu-quota\u7684\u503c\u5fc5\u987b &gt;= 1000\u3002\u53ef\u4ee5\u770b\u51fa\u8fd9\u4e24\u4e2a\u9009\u9879\u7684\u5355\u4f4d\u90fd\u662f us\u3002<\/p>\n<pre><code>#\u4f8b1\uff1a\n\u5bb9\u5668\u8fdb\u7a0b\u9700\u8981\u6bcf 1 \u79d2\u4f7f\u7528\u5355\u4e2a CPU \u7684 0.2 \u79d2\u65f6\u95f4\uff0c\u53ef\u4ee5\u5c06 cpu-period \u8bbe\u7f6e \u4e3a 1000000\uff08\u5373 1 \u79d2\uff09\uff0ccpu-quota \u8bbe\u7f6e\u4e3a 200000\uff080.2 \u79d2\uff09\u3002\n$ docker run -it --cpu-period=1000000 --cpu-quota=200000 ubuntu:16.04 \/bin\/bash\n\n\u4f8b2\uff1a\n\u5728\u591a\u6838\u60c5\u51b5\u4e0b\uff0c\u5982\u679c\u5141\u8bb8\u5bb9\u5668\u8fdb\u7a0b\u5b8c\u5168\u5360\u7528\u4e24\u4e2a CPU\uff0c\u5219\u53ef\u4ee5\u5c06 cpu-period \u8bbe\u7f6e\u4e3a 100000\uff08\u5373 0.1 \u79d2\uff09\uff0c cpu-quota \u8bbe\u7f6e\u4e3a 200000\uff080.2 \u79d2\uff09\u3002\u5373\u5c06\u5bb9\u5668\u7684 CPU \u914d\u989d\u8bbe\u7f6e\u4e3a CFS \u5468\u671f\u7684\u4e24\u500d\uff0c\u4ee3\u8868\u7ed9\u5bb9\u5668\u5206\u914d\u4e24\u4e2a CPU \uff0c\u8868\u793a\u5bb9\u5668\u53ef\u4ee5\u5728\u6bcf\u4e2a\u5468\u671f\u5185\u4f7f\u7528\u4e24\u4e2a CPU \u7684 100% \u65f6\u95f4\u3002\ndocker run -itd --cpu-period 100000 --cpu-quota 200000 centos:stress\ndocker exec -it 56316e0a2bdc bash\n[root@56316e0a2bdc \/]# cat \/sys\/fs\/cgroup\/cpu\/cpu.cfs_period_us\n100000\n[root@56316e0a2bdc \/]# cat \/sys\/fs\/cgroup\/cpu\/cpu.cfs_quota_us\n200000<\/code><\/pre>\n<p><strong>\u6b63\u786e\u7684\u7406\u89e3\u201c\u7edd\u5bf9\u201d<\/strong><\/p>\n<p>\u4e0e &#8211;cpu-shares \u4e0d\u540c\u7684\u662f,\u4e0a\u8ff0\u914d\u7f6e\u662f\u6307\u5b9a\u4e00\u4e2a\u7edd\u5bf9\u503c\uff0c\u5bb9\u5668\u5bf9 CPU \u8d44\u6e90\u7684\u4f7f\u7528\u7edd\u5bf9\u4e0d\u4f1a\u8d85\u8fc7\u914d\u7f6e\u7684\u503c\u3002<br \/>\n\u4e5f\u5c31\u662f\u8bf4<br \/>\n\u524d\u9762\u6211\u4eec\u7528&#8211;cpu-quota\u8bbe\u7f6e\u5bb9\u5668\u5728\u4e00\u4e2a\u8c03\u5ea6\u5468\u671f\u5185\u80fd\u4f7f\u7528\u7684 CPU \u65f6\u95f4\u65f6\u5b9e\u9645\u4e0a\u8bbe\u7f6e\u7684\u662f\u4e00\u4e2a\u4e0a\u9650\u3002\u5e76\u4e0d\u662f\u8bf4\u5bb9\u5668\u4e00\u5b9a\u4f1a\u4f7f\u7528\u8fd9\u4e48\u957f\u7684 CPU \u65f6\u95f4\u3002\u6bd4\u5982\uff0c\u6211\u4eec\u5148\u542f\u52a8\u4e00\u4e2a\u5bb9\u5668\uff0c\u5c06\u5176\u7ed1\u5b9a\u5230 cpu 1 \u4e0a\u6267\u884c\u3002\u7ed9\u5176&#8211;cpu-quota\u548c&#8211;cpu-period\u90fd\u8bbe\u7f6e\u4e3a 50000\u3002<\/p>\n<pre><code>$ docker run --rm --name test01 --cpu-cpus 1 --cpu-quota=50000 --cpu-period=50000 deadloop:busybox-1.25.1-glibc\n<\/code><\/pre>\n<p>\u8c03\u5ea6\u5468\u671f\u4e3a 50000\uff0c\u5bb9\u5668\u5728\u6bcf\u4e2a\u5468\u671f\u5185\u6700\u591a\u80fd\u4f7f\u7528 50000 cpu \u65f6\u95f4\u3002<br \/>\n\u518d\u7528docker stats test01\u53ef\u4ee5\u89c2\u5bdf\u5230\u8be5\u5bb9\u5668\u5bf9 CPU \u7684\u4f7f\u7528\u7387\u5728100%\u5de6\u53f3\u3002\u7136\u540e\uff0c\u6211\u4eec\u518d\u4ee5\u540c\u6837\u7684\u53c2\u6570\u542f\u52a8\u53e6\u4e00\u4e2a\u5bb9\u5668\u3002<\/p>\n<pre><code>$ docker run --rm --name test02 --cpu-cpus 1 --cpu-quota=50000 --cpu-period=50000 deadloop:busybox-1.25.1-glibc<\/code><\/pre>\n<p>\u518d\u7528docker stats test01 test02\u53ef\u4ee5\u89c2\u5bdf\u5230\u8fd9\u4e24\u4e2a\u5bb9\u5668\uff0c\u6bcf\u4e2a\u5bb9\u5668\u5bf9 cpu \u7684\u4f7f\u7528\u7387\u5728 50% \u5de6\u53f3\u3002\u8bf4\u660e\u5bb9\u5668\u5e76\u6ca1\u6709\u5728\u6bcf\u4e2a\u5468\u671f\u5185\u4f7f\u7528 50000 \u7684 cpu \u65f6\u95f4\u3002<br \/>\n\u4f7f\u7528docker stop test02\u547d\u4ee4\u7ed3\u675f\u7b2c\u4e8c\u4e2a\u5bb9\u5668\uff0c\u518d\u52a0\u4e00\u4e2a\u53c2\u6570-c 2048\u542f\u52a8\u5b83\uff1a<\/p>\n<pre><code>$ docker run --rm --name test02 --cpu-cpus 1 --cpu-quota=50000 --cpu-period=50000 -c 2048 deadloop:busybox-1.25.1-glibc<\/code><\/pre>\n<p>\u518d\u7528docker stats test01\u547d\u4ee4\u53ef\u4ee5\u89c2\u5bdf\u5230\u7b2c\u4e00\u4e2a\u5bb9\u5668\u7684 CPU \u4f7f\u7528\u7387\u5728 33% \u5de6\u53f3\uff0c\u7b2c\u4e8c\u4e2a\u5bb9\u5668\u7684 CPU \u4f7f\u7528\u7387\u5728 66% \u5de6\u53f3\u3002\u56e0\u4e3a\u7b2c\u4e8c\u4e2a\u5bb9\u5668\u7684\u5171\u4eab\u503c&#8211;cpu-shares \u662f 2048\uff0c\u7b2c\u4e00\u4e2a\u5bb9\u5668\u7684\u9ed8\u8ba4\u5171\u4eab\u503c&#8211;cpu-shares \u662f 1024\uff0c\u6240\u4ee5\u7b2c\u4e8c\u4e2a\u5bb9\u5668\u5728\u6bcf\u4e2a\u5468\u671f\u5185\u80fd\u4f7f\u7528\u7684 CPU \u65f6\u95f4\u662f\u7b2c\u4e00\u4e2a\u5bb9\u5668\u7684\u4e24\u500d\u3002<\/p>\n<h2>3.6\u3001CPU \u914d\u989d\u63a7\u5236\u53c2\u6570\u7684\u6df7\u5408\u4f7f\u7528<\/h2>\n<p>\u901a\u8fc7 cpuset-cpus \u53c2\u6570\u6307\u5b9a\u5bb9\u5668 A \u4f7f\u7528 CPU \u5185\u6838 0\uff0c\u5bb9\u5668 B \u53ea\u662f\u7528 CPU \u5185\u6838 1\u3002<br \/>\n\u5728\u4e3b\u673a\u4e0a\u53ea\u6709\u8fd9\u4e24\u4e2a\u5bb9\u5668\u4f7f\u7528\u5bf9\u5e94 CPU \u5185\u6838\u7684\u60c5\u51b5\uff0c\u5b83\u4eec\u5404\u81ea\u5360\u7528\u5168\u90e8\u7684\u5185\u6838\u8d44\u6e90\uff0ccpu-shares \u6ca1\u6709\u660e\u663e\u6548\u679c\u3002<\/p>\n<p>cpuset-cpus\u3001cpuset-mems \u53c2\u6570\u53ea\u5728\u591a\u6838\u3001\u591a\u5185\u5b58\u8282\u70b9\u4e0a\u7684\u670d\u52a1\u5668\u4e0a\u6709\u6548\uff0c\u5e76\u4e14\u5fc5\u987b\u4e0e\u5b9e\u9645\u7684\u7269\u7406\u914d\u7f6e\u5339\u914d\uff0c\u5426\u5219\u4e5f\u65e0\u6cd5\u8fbe\u5230\u8d44\u6e90\u63a7\u5236\u7684\u76ee\u7684\u3002<\/p>\n<p>\u5728\u7cfb\u7edf\u5177\u6709\u591a\u4e2a CPU \u5185\u6838\u7684\u60c5\u51b5\u4e0b\uff0c\u9700\u8981\u901a\u8fc7 cpuset-cpus \u53c2\u6570\u4e3a\u8bbe\u7f6e\u5bb9\u5668 CPU \u5185\u6838\u624d\u80fd\u65b9\u4fbf\u5730\u8fdb\u884c\u6d4b\u8bd5\u3002<\/p>\n<p>\u5bbf\u4e3b\u7cfb\u7edf\u4fee\u6539\u4e3a4\u6838\u5fc3CPU<\/p>\n<pre><code>docker run -tid --name cpu3 --cpuset-cpus 1 --cpu-shares 512 centos:stress stress -c 1\ndocker exec -it 6307edbfaecc bash\ntop<\/code><\/pre>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/egonlin.com\/wp-content\/uploads\/2022\/10\/image-1666066685495.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  data-original=\"https:\/\/egonlin.com\/wp-content\/uploads\/2022\/10\/image-1666066685495.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"file\" \/><\/div><\/p>\n<pre><code>docker run -tid --name cpu4 --cpuset-cpus 3 --cpu-shares 1024 centos:stress stress -c 1\ndocker exec -it 9447a3ba39f4 bash\ntop<\/code><\/pre>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/egonlin.com\/wp-content\/uploads\/2022\/10\/image-1666066716602.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  data-original=\"https:\/\/egonlin.com\/wp-content\/uploads\/2022\/10\/image-1666066716602.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"file\" \/><\/div><br \/>\n\u603b\u7ed3\uff1a\u4e0a\u9762\u7684 centos:stress \u955c\u50cf\u5b89\u88c5\u4e86 stress \u5de5\u5177\uff0c\u7528\u6765\u6d4b\u8bd5 CPU \u548c\u5185\u5b58\u7684\u8d1f\u8f7d\u3002\u901a\u8fc7 \u5728\u4e24\u4e2a\u5bb9\u5668\u4e0a\u5206\u522b\u6267\u884c stress -c 1 \u547d\u4ee4\uff0c\u5c06\u4f1a\u7ed9\u7cfb\u7edf\u4e00\u4e2a\u968f\u673a\u8d1f\u8f7d\uff0c\u4ea7\u751f 1 \u4e2a\u8fdb\u7a0b\u3002\u8fd9 \u4e2a\u8fdb\u7a0b\u90fd\u53cd\u590d\u4e0d\u505c\u7684\u8ba1\u7b97\u7531 rand() \u4ea7\u751f\u968f\u673a\u6570\u7684\u5e73\u65b9\u6839\uff0c\u76f4\u5230\u8d44\u6e90\u8017\u5c3d\u3002 \u89c2\u5bdf\u5230\u5bbf\u4e3b\u673a\u4e0a\u7684 CPU \u4f7f\u7528\u7387\uff0c\u7b2c\u4e09\u4e2a\u5185\u6838\u7684\u4f7f\u7528\u7387\u63a5\u8fd1 100%\uff0c \u5e76\u4e14\u4e00\u6279\u8fdb\u7a0b\u7684 CPU \u4f7f\u7528\u7387\u660e\u663e\u5b58\u5728 2:1 \u7684\u4f7f\u7528\u6bd4\u4f8b\u7684\u5bf9\u6bd4\u3002<\/p>\n<h1>\u56db\u3001memory cgroup\u9650\u5236<\/h1>\n<h2>4.1 \u6982\u8ff0<\/h2>\n<p>Docker \u63d0\u4f9b\u7684\u5185\u5b58\u9650\u5236\u529f\u80fd\u6709\u4ee5\u4e0b\u51e0\u70b9\uff1a<\/p>\n<p>\u5bb9\u5668\u80fd\u4f7f\u7528\u7684\u5185\u5b58\u548c\u4ea4\u6362\u5206\u533a\u5927\u5c0f\u3002<br \/>\n\u5bb9\u5668\u7684\u6838\u5fc3\u5185\u5b58\u5927\u5c0f\u3002<br \/>\n\u5bb9\u5668\u865a\u62df\u5185\u5b58\u7684\u4ea4\u6362\u884c\u4e3a\u3002<br \/>\n\u5bb9\u5668\u5185\u5b58\u7684\u8f6f\u6027\u9650\u5236\u3002<br \/>\n\u662f\u5426\u6740\u6b7b\u5360\u7528\u8fc7\u591a\u5185\u5b58\u7684\u5bb9\u5668\u3002<br \/>\n\u5bb9\u5668\u88ab\u6740\u6b7b\u7684\u4f18\u5148\u7ea7<br \/>\n\u4e00\u822c\u60c5\u51b5\u4e0b\uff0c\u8fbe\u5230\u5185\u5b58\u9650\u5236\u7684\u5bb9\u5668\u8fc7\u6bb5\u65f6\u95f4\u540e\u5c31\u4f1a\u88ab\u7cfb\u7edf\u6740\u6b7b\u3002<\/p>\n<h2>4.2 \u5185\u5b58\u9650\u5236\u76f8\u5173\u7684\u53c2\u6570<\/h2>\n<p>\u6267\u884cdocker run\u547d\u4ee4\u65f6\u80fd\u4f7f\u7528\u7684\u548c\u5185\u5b58\u9650\u5236\u76f8\u5173\u7684\u6240\u6709\u9009\u9879\u5982\u4e0b\u3002<br \/>\n<div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/egonlin.com\/wp-content\/uploads\/2022\/10\/image-1666324593827.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  data-original=\"https:\/\/egonlin.com\/wp-content\/uploads\/2022\/10\/image-1666324593827.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"file\" \/><\/div><\/p>\n<h2>4.3 \u7528\u6237\u5185\u5b58\u9650\u5236<\/h2>\n<p>\u4e0e\u64cd\u4f5c\u7cfb\u7edf\u7c7b\u4f3c\uff0c\u5bb9\u5668\u53ef\u4f7f\u7528\u7684\u5185\u5b58\u5305\u62ec\u4e24\u90e8\u5206\uff1a\u7269\u7406\u5185\u5b58\u548c Swap\u3002<br \/>\nDocker \u901a\u8fc7\u4e0b\u9762\u4e24\u7ec4\u53c2\u6570\u6765\u63a7\u5236\u5bb9\u5668\u5185\u5b58\u7684\u4f7f\u7528\u91cf\u3002<\/p>\n<ul>\n<li>-m \u6216 &#8211;memory\uff1a\u8bbe\u7f6e\u5185\u5b58\u7684\u4f7f\u7528\u9650\u989d\uff0c\u4f8b\u5982 100M\u30011024M\u3002\u9700\u77e5\u8be5\u53c2\u6570\u7684\u6700\u5c0f\u4e3a 4 M<\/li>\n<li>\u2013memory-swap\uff1a\u8bbe\u7f6e \u5185\u5b58+swap \u7684\u603b\u5927\u5c0f\u9650\u5236\uff0c\u6240\u4ee5&#8211;memory-swap\u5fc5\u987b\u6bd4-m,&#8211;memory\u5927\u3002<\/li>\n<\/ul>\n<p>\u4f8b\u5982\uff1a<br \/>\n\u6267\u884c\u5982\u4e0b\u547d\u4ee4\u5141\u8bb8\u8be5\u5bb9\u5668\u603b\u5171\u53ef\u7528\u5185\u5b58\u4e3a300M\uff0c\u5176\u4e2d\u7269\u7406\u5185\u5b58\u6700\u591a\u4f7f\u7528 200M \u7684\u5185\u5b58\u3002swap\u5206\u533a\u6700\u591a 100M\u3002<\/p>\n<pre><code>docker run -it -m 200M --memory-swap=300M progrium\/stress --vm 1 --vm-bytes 280M\n--vm 1\uff1a\u542f\u52a8 1 \u4e2a\u5185\u5b58\u5de5\u4f5c\u7ebf\u7a0b\u3002 \n--vm-bytes 280M\uff1a\u6bcf\u4e2a\u7ebf\u7a0b\u5206\u914d 280M \u5185\u5b58\u3002 \n\u9ed8\u8ba4\u60c5\u51b5\u4e0b\uff0c\u5bb9\u5668\u53ef\u4ee5\u4f7f\u7528\u4e3b\u673a\u4e0a\u7684\u6240\u6709\u7a7a\u95f2\u5185\u5b58\u3002\n\u4e0e CPU \u7684 cgroups \u914d\u7f6e\u7c7b\u4f3c\uff0c Docker \u4f1a\u81ea\u52a8\u4e3a\u5bb9\u5668\u5728\u76ee\u5f55 \/sys\/fs\/cgroup\/memory\/docker\/&lt;\u5bb9\u5668\u7684\u5b8c\u6574\u957f ID&gt;\n\u4e2d\u521b\u5efa\u76f8\u5e94 cgroup \u914d\u7f6e\u6587\u4ef6<\/code><\/pre>\n<p>\u5982\u679c\u8ba9\u5de5\u4f5c\u7ebf\u7a0b\u5206\u914d\u7684\u5185\u5b58\u8d85\u8fc7 300M\uff0c\u5206\u914d\u7684\u5185\u5b58\u8d85\u8fc7\u9650\u989d\uff0cstress \u7ebf\u7a0b\u62a5\u9519\uff0c\u5bb9\u5668\u9000\u51fa\u3002<\/p>\n<pre><code>[root@localhost stress]# docker run -it -m 200M --memory-swap=300M progrium\/stress --vm 1 --vm-bytes 310M\nstress: info: [1] dispatching hogs: 0 cpu, 0 io, 1 vm, 0 hdd\nstress: dbug: [1] using backoff sleep of 3000us\nstress: dbug: [1] --&gt; hogvm worker 1 [7] forked\nstress: dbug: [7] allocating 325058560 bytes ...\nstress: dbug: [7] touching bytes in strides of 4096 bytes ...\nstress: FAIL: [1] (416) &lt;-- worker 7 got signal 9\nstress: WARN: [1] (418) now reaping child worker processes\nstress: FAIL: [1] (422) kill error: No such process\nstress: FAIL: [1] (452) failed run completed in 0s<\/code><\/pre>\n<p>\u8865\u5145:<\/p>\n<pre><code>\u4f60\u53ef\u80fd\u5728\u8fdb\u884c\u5185\u5b58\u9650\u5236\u7684\u5b9e\u9a8c\u65f6\u53d1\u73b0docker run\u547d\u4ee4\u62a5\u9519\uff1aWARNING: Your kernel does not support swap limit capabilities, memory limited without swap.\n\n\u8fd9\u662f\u56e0\u4e3a\u5bbf\u4e3b\u673a\u5185\u6838\u7684\u76f8\u5173\u529f\u80fd\u6ca1\u6709\u6253\u5f00\u3002\u6309\u7167\u4e0b\u9762\u7684\u8bbe\u7f6e\u5c31\u884c\u3002\n\nstep 1\uff1a\u7f16\u8f91\/etc\/default\/grub\u6587\u4ef6\uff0c\u5c06GRUB_CMDLINE_LINUX\u4e00\u884c\u6539\u4e3aGRUB_CMDLINE_LINUX=&quot;cgroup_enable=memory swapaccount=1&quot;\n\nstep 2\uff1a\u66f4\u65b0 GRUB\uff0c\u5373\u6267\u884c$ sudo update-grub\n\nstep 3: \u91cd\u542f\u7cfb\u7edf\u3002<\/code><\/pre>\n<p>\u518d\u6b21\u91cd\u7533\u4e24\u6761\u89c4\u5219\uff1a<\/p>\n<ul>\n<li>-m \u6216 &#8211;memory\uff1a\u8bbe\u7f6e\u5185\u5b58\u7684\u4f7f\u7528\u9650\u989d\uff0c\u4f8b\u5982 100M\u30011024M\u3002\u9700\u77e5\u8be5\u53c2\u6570\u7684\u6700\u5c0f\u4e3a 4 M<\/li>\n<li>\u2013memory-swap\uff1a\u8bbe\u7f6e \u5185\u5b58+swap \u7684\u603b\u5927\u5c0f\u9650\u5236\uff0c\u6240\u4ee5&#8211;memory-swap\u5fc5\u987b\u6bd4-m,&#8211;memory\u5927\u3002<\/li>\n<\/ul>\n<p>\u5728\u8fd9\u4e24\u6761\u89c4\u5219\u4e0b\uff0c\u4e00\u822c\u6709\u56db\u79cd\u8bbe\u7f6e\u65b9\u5f0f\u3002<\/p>\n<ol>\n<li>\n<p>\u4e0d\u8bbe\u7f6e<br \/>\n\u5982\u679c\u4e0d\u8bbe\u7f6e-m,&#8211;memory\u548c&#8211;memory-swap\uff0c\u5bb9\u5668\u9ed8\u8ba4\u53ef\u4ee5\u7528\u5b8c\u5bbf\u820d\u673a\u7684\u6240\u6709\u5185\u5b58\u548c swap \u5206\u533a\u3002\u4e0d\u8fc7\u6ce8\u610f\uff0c\u5982\u679c\u5bb9\u5668\u5360\u7528\u5bbf\u4e3b\u673a\u7684\u6240\u6709\u5185\u5b58\u548c swap \u5206\u533a\u8d85\u8fc7\u4e00\u6bb5\u65f6\u95f4\u540e\uff0c\u4f1a\u88ab\u5bbf\u4e3b\u673a\u7cfb\u7edf\u6740\u6b7b\uff08\u5982\u679c\u6ca1\u6709\u8bbe\u7f6e&#8211;00m-kill-disable=true\u7684\u8bdd\uff09\u3002<\/p>\n<\/li>\n<li>\n<p>\u8bbe\u7f6e-m,&#8211;memory\uff0c\u4e0d\u8bbe\u7f6e&#8211;memory-swap<br \/>\n\u7ed9-m\u6216&#8211;memory\u8bbe\u7f6e\u4e00\u4e2a\u4e0d\u5c0f\u4e8e 4M \u7684\u503c\uff0c\u5047\u8bbe\u4e3a a\uff0c\u4e0d\u8bbe\u7f6e&#8211;memory-swap\uff0c\u6216\u5c06&#8211;memory-swap\u8bbe\u7f6e\u4e3a 0\u3002\u8fd9\u79cd\u60c5\u51b5\u4e0b\uff0c\u5bb9\u5668\u80fd\u4f7f\u7528\u7684\u5185\u5b58\u5927\u5c0f\u4e3a a\uff0c\u80fd\u4f7f\u7528\u7684\u4ea4\u6362\u5206\u533a\u5927\u5c0f\u4e5f\u4e3a a\u3002\u56e0\u4e3a Docker \u9ed8\u8ba4\u5bb9\u5668\u4ea4\u6362\u5206\u533a\u7684\u5927\u5c0f\u548c\u5185\u5b58\u76f8\u540c\u3002<br \/>\n\u5982\u679c\u5728\u5bb9\u5668\u4e2d\u8fd0\u884c\u4e00\u4e2a\u4e00\u76f4\u4e0d\u505c\u7533\u8bf7\u5185\u5b58\u7684\u7a0b\u5e8f\uff0c\u4f60\u4f1a\u89c2\u5bdf\u5230\u8be5\u7a0b\u5e8f\u6700\u7ec8\u80fd\u5360\u7528\u7684\u5185\u5b58\u5927\u5c0f\u4e3a 2a\u3002<br \/>\n\u6bd4\u5982$ docker run -m 1G ubuntu:16.04\uff0c\u8be5\u5bb9\u5668\u80fd\u4f7f\u7528\u7684\u5185\u5b58\u5927\u5c0f\u4e3a 1G\uff0c\u80fd\u4f7f\u7528\u7684 swap \u5206\u533a\u5927\u5c0f\u4e5f\u4e3a 1G\u3002\u5bb9\u5668\u5185\u7684\u8fdb\u7a0b\u80fd\u7533\u8bf7\u5230\u7684\u603b\u5185\u5b58\u5927\u5c0f\u4e3a 2G\u3002<\/p>\n<\/li>\n<li>\n<p>\u8bbe\u7f6e-m,&#8211;memory=a\uff0c&#8211;memory-swap=b\uff0c\u4e14b &gt; a<br \/>\n\u7ed9-m\u8bbe\u7f6e\u4e00\u4e2a\u53c2\u6570 a\uff0c\u7ed9&#8211;memory-swap\u8bbe\u7f6e\u4e00\u4e2a\u53c2\u6570 b\u3002a \u65f6\u5bb9\u5668\u80fd\u4f7f\u7528\u7684\u5185\u5b58\u5927\u5c0f\uff0cb\u662f\u5bb9\u5668\u80fd\u4f7f\u7528\u7684 \u5185\u5b58\u5927\u5c0f + swap \u5206\u533a\u5927\u5c0f\u3002\u6240\u4ee5 b \u5fc5\u987b\u5927\u4e8e a\u3002b -a \u5373\u4e3a\u5bb9\u5668\u80fd\u4f7f\u7528\u7684 swap \u5206\u533a\u5927\u5c0f\u3002<br \/>\n\u6bd4\u5982$ docker run -m 1G &#8211;memory-swap 3G ubuntu:16.04\uff0c\u8be5\u5bb9\u5668\u80fd\u4f7f\u7528\u7684\u5185\u5b58\u5927\u5c0f\u4e3a 1G\uff0c\u80fd\u4f7f\u7528\u7684 swap \u5206\u533a\u5927\u5c0f\u4e3a 2G\u3002\u5bb9\u5668\u5185\u7684\u8fdb\u7a0b\u80fd\u7533\u8bf7\u5230\u7684\u603b\u5185\u5b58\u5927\u5c0f\u4e3a 3G\u3002<\/p>\n<\/li>\n<li>\n<p>\u8bbe\u7f6e-m,&#8211;memory=a\uff0c&#8211;memory-swap=-1<br \/>\n\u7ed9-m\u53c2\u6570\u8bbe\u7f6e\u4e00\u4e2a\u6b63\u5e38\u503c\uff0c\u800c\u7ed9&#8211;memory-swap\u8bbe\u7f6e\u6210 -1\u3002\u8fd9\u79cd\u60c5\u51b5\u8868\u793a\u9650\u5236\u5bb9\u5668\u80fd\u4f7f\u7528\u7684\u5185\u5b58\u5927\u5c0f\u4e3a a\uff0c\u800c\u4e0d\u9650\u5236\u5bb9\u5668\u80fd\u4f7f\u7528\u7684 swap \u5206\u533a\u5927\u5c0f\u3002<br \/>\n\u8fd9\u65f6\u5019\uff0c\u5bb9\u5668\u5185\u8fdb\u7a0b\u80fd\u7533\u8bf7\u5230\u7684\u5185\u5b58\u5927\u5c0f\u4e3a a + \u5bbf\u4e3b\u673a\u7684 swap \u5927\u5c0f\u3002<\/p>\n<\/li>\n<\/ol>\n<h2>4.4 Memory reservation<\/h2>\n<p>\u8fd9\u79cd memory reservation \u673a\u5236\u4e0d\u77e5\u9053\u600e\u4e48\u7ffb\u8bd1\u6bd4\u8f83\u5f62\u8c61\u3002Memory reservation \u662f\u4e00\u79cd\u8f6f\u6027\u9650\u5236\uff0c\u7528\u4e8e\u8282\u5236\u5bb9\u5668\u5185\u5b58\u4f7f\u7528\u3002\u7ed9&#8211;memory-reservation\u8bbe\u7f6e\u4e00\u4e2a\u6bd4-m\u5c0f\u7684\u503c\u540e\uff0c\u867d\u7136\u5bb9\u5668\u6700\u591a\u53ef\u4ee5\u4f7f\u7528-m\u4f7f\u7528\u7684\u5185\u5b58\u5927\u5c0f\uff0c\u4f46\u5728\u5bbf\u4e3b\u673a\u5185\u5b58\u8d44\u6e90\u7d27\u5f20\u65f6\uff0c\u5728\u7cfb\u7edf\u7684\u4e0b\u6b21\u5185\u5b58\u56de\u6536\u65f6\uff0c\u7cfb\u7edf\u4f1a\u56de\u6536\u5bb9\u5668\u7684\u90e8\u5206\u5185\u5b58\u9875\uff0c\u5f3a\u8feb\u5bb9\u5668\u7684\u5185\u5b58\u5360\u7528\u56de\u5230&#8211;memory-reservation\u8bbe\u7f6e\u7684\u503c\u5927\u5c0f\u3002<\/p>\n<p>\u6ca1\u6709\u8bbe\u7f6e\u65f6\uff08\u9ed8\u8ba4\u60c5\u51b5\u4e0b\uff09&#8211;memory-reservation\u7684\u503c\u548c-m\u7684\u9650\u5b9a\u7684\u503c\u76f8\u540c\u3002\u5c06\u5b83\u8bbe\u7f6e\u4e3a 0 \u4f1a\u8bbe\u7f6e\u7684\u6bd4-m\u7684\u53c2\u6570\u5927 \u7b49\u540c\u4e8e\u6ca1\u6709\u8bbe\u7f6e\u3002<\/p>\n<p>Memory reservation \u662f\u4e00\u79cd\u8f6f\u6027\u673a\u5236\uff0c\u5b83\u4e0d\u4fdd\u8bc1\u4efb\u4f55\u65f6\u523b\u5bb9\u5668\u4f7f\u7528\u7684\u5185\u5b58\u4e0d\u4f1a\u8d85\u8fc7&#8211;memory-reservation\u9650\u5b9a\u7684\u503c\uff0c\u5b83\u53ea\u662f\u786e\u4fdd\u5bb9\u5668\u4e0d\u4f1a\u957f\u65f6\u95f4\u5360\u7528\u8d85\u8fc7&#8211;memory-reservation\u9650\u5236\u7684\u5185\u5b58\u5927\u5c0f\u3002<br \/>\n\u4f8b\u5982\uff1a<\/p>\n<pre><code>$ docker run -it -m 500M --memory-reservation 200M ubuntu:16.04 \/bin\/bash<\/code><\/pre>\n<p>\u5982\u679c\u5bb9\u5668\u4f7f\u7528\u4e86\u5927\u4e8e 200M \u4f46\u5c0f\u4e8e 500M \u5185\u5b58\u65f6\uff0c\u4e0b\u6b21\u7cfb\u7edf\u7684\u5185\u5b58\u56de\u6536\u4f1a\u5c1d\u8bd5\u5c06\u5bb9\u5668\u7684\u5185\u5b58\u9501\u7d27\u5230 200M \u4ee5\u4e0b\u3002<\/p>\n<p>\u4f8b\u5982\uff1a<\/p>\n<pre><code>$ docker run -it --memory-reservation 1G ubuntu:16.04 \/bin\/bash<\/code><\/pre>\n<p>\u5bb9\u5668\u53ef\u4ee5\u4f7f\u7528\u5c3d\u53ef\u80fd\u591a\u7684\u5185\u5b58\u3002&#8211;memory-reservation\u786e\u4fdd\u5bb9\u5668\u4e0d\u4f1a\u957f\u65f6\u95f4\u5360\u7528\u592a\u591a\u5185\u5b58\u3002<\/p>\n<h2>4.5 OOM killer<\/h2>\n<p>\u9ed8\u8ba4\u60c5\u51b5\u4e0b\uff0c\u5728\u51fa\u73b0 out-of-memory(OOM) \u9519\u8bef\u65f6\uff0c\u7cfb\u7edf\u4f1a\u6740\u6b7b\u5bb9\u5668\u5185\u7684\u8fdb\u7a0b\u6765\u83b7\u53d6\u66f4\u591a\u7a7a\u95f2\u5185\u5b58\u3002\u8fd9\u4e2a\u6740\u6b7b\u8fdb\u7a0b\u6765\u8282\u7701\u5185\u5b58\u7684\u8fdb\u7a0b\uff0c\u6211\u4eec\u59d1\u4e14\u53eb\u5b83 OOM killer\u3002\u6211\u4eec\u53ef\u4ee5\u901a\u8fc7\u8bbe\u7f6e&#8211;oom-kill-disable\u9009\u9879\u6765\u7981\u6b62 OOM killer \u6740\u6b7b\u5bb9\u5668\u5185\u8fdb\u7a0b\u3002\u4f46\u8bf7\u786e\u4fdd\u53ea\u6709\u5728\u4f7f\u7528\u4e86-m\/&#8211;memory\u9009\u9879\u65f6\u624d\u4f7f\u7528&#8211;oom-kill-disable\u7981\u7528 OOM killer\u3002\u5982\u679c\u6ca1\u6709\u8bbe\u7f6e-m\u9009\u9879\uff0c\u5374\u7981\u7528\u4e86 OOM-killer\uff0c\u53ef\u80fd\u4f1a\u9020\u6210\u51fa\u73b0 out-of-memory \u9519\u8bef\u65f6\uff0c\u7cfb\u7edf\u901a\u8fc7\u6740\u6b7b\u5bbf\u4e3b\u673a\u8fdb\u7a0b\u6216\u83b7\u53d6\u66f4\u6539\u5185\u5b58\u3002<\/p>\n<p>\u4e0b\u9762\u7684\u4f8b\u5b50\u9650\u5236\u4e86\u5bb9\u5668\u7684\u5185\u5b58\u4e3a 100M \u5e76\u7981\u6b62\u4e86 OOM killer\uff1a<\/p>\n<pre><code>$ docker run -it -m 100M --oom-kill-disable ubuntu:16.04 \/bin\/bash<\/code><\/pre>\n<p>\u662f\u6b63\u786e\u7684\u4f7f\u7528\u65b9\u6cd5\u3002<\/p>\n<p>\u800c\u4e0b\u9762\u8fd9\u4e2a\u5bb9\u5668\u6ca1\u8bbe\u7f6e\u5185\u5b58\u9650\u5236\uff0c\u5374\u7981\u7528\u4e86 OOM killer \u662f\u975e\u5e38\u5371\u9669\u7684\uff1a<\/p>\n<pre><code>$ docker run -it --oom-kill-disable ubuntu:16.04 \/bin\/bash\n<\/code><\/pre>\n<p>\u5bb9\u5668\u6ca1\u7528\u5185\u5b58\u9650\u5236\uff0c\u53ef\u80fd\u6216\u5bfc\u81f4\u7cfb\u7edf\u65e0\u5185\u5b58\u53ef\u7528\uff0c\u5e76\u5c1d\u8bd5\u65f6\u6740\u6b7b\u7cfb\u7edf\u8fdb\u7a0b\u6765\u83b7\u53d6\u66f4\u591a\u53ef\u7528\u5185\u5b58\u3002<\/p>\n<p>\u4e00\u822c\u4e00\u4e2a\u5bb9\u5668\u53ea\u6709\u4e00\u4e2a\u8fdb\u7a0b\uff0c\u8fd9\u4e2a\u552f\u4e00\u8fdb\u7a0b\u88ab\u6740\u6b7b\uff0c\u5bb9\u5668\u4e5f\u5c31\u88ab\u6740\u6b7b\u4e86\u3002\u6211\u4eec\u53ef\u4ee5\u901a\u8fc7&#8211;oom-score-adj\u9009\u9879\u6765\u8bbe\u7f6e\u5728\u7cfb\u7edf\u5185\u5b58\u4e0d\u591f\u65f6\uff0c\u5bb9\u5668\u88ab\u6740\u6b7b\u7684\u4f18\u5148\u7ea7\u3002\u8d1f\u503c\u66f4\u6559\u4e0d\u53ef\u80fd\u88ab\u6740\u6b7b\uff0c\u800c\u6b63\u503c\u66f4\u6709\u53ef\u80fd\u88ab\u6740\u6b7b\u3002<\/p>\n<h2>4.6 \u6838\u5fc3\u5185\u5b58<\/h2>\n<p>\u6838\u5fc3\u5185\u5b58\u548c\u7528\u6237\u5185\u5b58\u4e0d\u540c\u7684\u5730\u65b9\u5728\u4e8e\u6838\u5fc3\u5185\u5b58\u4e0d\u80fd\u88ab\u4ea4\u6362\u51fa\u3002\u4e0d\u80fd\u4ea4\u6362\u51fa\u53bb\u7684\u7279\u6027\u4f7f\u5f97\u5bb9\u5668\u53ef\u4ee5\u901a\u8fc7\u6d88\u8017\u592a\u591a\u5185\u5b58\u6765\u5835\u585e\u4e00\u4e9b\u7cfb\u7edf\u670d\u52a1\u3002\u6838\u5fc3\u5185\u5b58\u5305\u62ec\uff1a<\/p>\n<ul>\n<li>stack pages\uff08\u6808\u9875\u9762\uff09<\/li>\n<li>slab pages<\/li>\n<li>socket memory pressure<\/li>\n<li>tcp memory pressure<br \/>\n\u53ef\u4ee5\u901a\u8fc7\u8bbe\u7f6e\u6838\u5fc3\u5185\u5b58\u9650\u5236\u6765\u7ea6\u675f\u8fd9\u4e9b\u5185\u5b58\u3002\u4f8b\u5982\uff0c\u6bcf\u4e2a\u8fdb\u7a0b\u90fd\u8981\u6d88\u8017\u4e00\u4e9b\u6808\u9875\u9762\uff0c\u901a\u8fc7\u9650\u5236\u6838\u5fc3\u5185\u5b58\uff0c\u53ef\u4ee5\u5728\u6838\u5fc3\u5185\u5b58\u4f7f\u7528\u8fc7\u591a\u65f6\u963b\u6b62\u65b0\u8fdb\u7a0b\u88ab\u521b\u5efa\u3002<\/li>\n<\/ul>\n<p>\u6838\u5fc3\u5185\u5b58\u548c\u7528\u6237\u5185\u5b58\u5e76\u4e0d\u662f\u72ec\u7acb\u7684\uff0c\u5fc5\u987b\u5728\u7528\u6237\u5185\u5b58\u9650\u5236\u7684\u4e0a\u4e0b\u6587\u4e2d\u9650\u5236\u6838\u5fc3\u5185\u5b58\u3002<\/p>\n<p>\u5047\u8bbe\u7528\u6237\u5185\u5b58\u7684\u9650\u5236\u503c\u4e3a U\uff0c\u6838\u5fc3\u5185\u5b58\u7684\u9650\u5236\u503c\u4e3a K\u3002\u6709\u4e09\u79cd\u53ef\u80fd\u5730\u9650\u5236\u6838\u5fc3\u5185\u5b58\u7684\u65b9\u5f0f\uff1a<\/p>\n<ul>\n<li>U != 0\uff0c\u4e0d\u9650\u5236\u6838\u5fc3\u5185\u5b58\u3002\u8fd9\u662f\u9ed8\u8ba4\u7684\u6807\u51c6\u8bbe\u7f6e\u65b9\u5f0f<\/li>\n<li>K &lt; U\uff0c\u6838\u5fc3\u5185\u5b58\u65f6\u7528\u6237\u5185\u5b58\u7684\u5b50\u96c6\u3002\u8fd9\u79cd\u8bbe\u7f6e\u5728\u90e8\u7f72\u65f6\uff0c\u6bcf\u4e2a cgroup \u7684\u5185\u5b58\u603b\u91cf\u88ab\u8fc7\u5ea6\u4f7f\u7528\u3002\u8fc7\u5ea6\u4f7f\u7528\u6838\u5fc3\u5185\u5b58\u9650\u5236\u662f\u7edd\u4e0d\u63a8\u8350\u7684\uff0c\u56e0\u4e3a\u7cfb\u7edf\u8fd8\u662f\u4f1a\u7528\u5b8c\u4e0d\u80fd\u56de\u6536\u7684\u5185\u5b58\u3002\u5728\u8fd9\u79cd\u60c5\u51b5\u4e0b\uff0c\u4f60\u53ef\u4ee5\u8bbe\u7f6e K\uff0c\u8fd9\u6837 groups \u7684\u603b\u6570\u5c31\u4e0d\u4f1a\u8d85\u8fc7\u603b\u5185\u5b58\u4e86\u3002\u7136\u540e\uff0c\u6839\u636e\u7cfb\u7edf\u670d\u52a1\u7684\u8d28\u91cf\u81ea\u6709\u5730\u8bbe\u7f6e U\u3002<\/li>\n<li>K &gt; U\uff0c\u56e0\u4e3a\u6838\u5fc3\u5185\u5b58\u7684\u53d8\u5316\u4e5f\u4f1a\u5bfc\u81f4\u7528\u6237\u8ba1\u6570\u5668\u7684\u53d8\u5316\uff0c\u5bb9\u5668\u6838\u5fc3\u5185\u5b58\u548c\u7528\u6237\u5185\u5b58\u90fd\u4f1a\u89e6\u53d1\u56de\u6536\u884c\u4e3a\u3002\u8fd9\u79cd\u914d\u7f6e\u53ef\u4ee5\u8ba9\u7ba1\u7406\u5458\u4ee5\u4e00\u79cd\u7edf\u4e00\u7684\u89c6\u56fe\u770b\u5f85\u5185\u5b58\u3002\u5bf9\u60f3\u8ddf\u8e2a\u6838\u5fc3\u5185\u5b58\u4f7f\u7528\u60c5\u51b5\u7684\u7528\u6237\u4e5f\u662f\u6709\u7528\u7684\u3002<br \/>\n\u4f8b\u5982\uff1a<\/p>\n<pre><code>$ docker run -it -m 500M --kernel-memory 50M ubuntu:16.04 \/bin\/bash<\/code><\/pre>\n<p>\u5bb9\u5668\u4e2d\u7684\u8fdb\u7a0b\u6700\u591a\u80fd\u4f7f\u7528 500M \u5185\u5b58\uff0c\u5728\u8fd9 500M \u4e2d\uff0c\u6700\u591a\u53ea\u6709 50M \u6838\u5fc3\u5185\u5b58\u3002<\/p>\n<pre><code>$ docker run -it --kernel-memory 50M ubuntu:16.04 \/bin\/bash<\/code><\/pre>\n<p>\u6ca1\u7528\u8bbe\u7f6e\u7528\u6237\u5185\u5b58\u9650\u5236\uff0c\u6240\u4ee5\u5bb9\u5668\u4e2d\u7684\u8fdb\u7a0b\u53ef\u4ee5\u4f7f\u7528\u5c3d\u53ef\u80fd\u591a\u7684\u5185\u5b58\uff0c\u4f46\u662f\u6700\u591a\u80fd\u4f7f\u7528 50M \u6838\u5fc3\u5185\u5b58\u3002<\/p>\n<\/li>\n<\/ul>\n<h2>4.7 Swappiness<\/h2>\n<p>\u9ed8\u8ba4\u60c5\u51b5\u4e0b\uff0c\u5bb9\u5668\u7684\u5185\u6838\u53ef\u4ee5\u4ea4\u6362\u51fa\u4e00\u5b9a\u6bd4\u4f8b\u7684\u533f\u540d\u9875\u3002&#8211;memory-swappiness\u5c31\u662f\u7528\u6765\u8bbe\u7f6e\u8fd9\u4e2a\u6bd4\u4f8b\u7684\u3002&#8211;memory-swappiness\u53ef\u4ee5\u8bbe\u7f6e\u4e3a\u4ece 0 \u5230 100\u30020 \u8868\u793a\u5173\u95ed\u533f\u540d\u9875\u9762\u4ea4\u6362\u3002100 \u8868\u793a\u6240\u6709\u7684\u533f\u540d\u9875\u90fd\u53ef\u4ee5\u4ea4\u6362\u3002\u9ed8\u8ba4\u60c5\u51b5\u4e0b\uff0c\u5982\u679c\u4e0d\u9002\u7528&#8211;memory-swappiness\uff0c\u5219\u8be5\u503c\u4ece\u7236\u8fdb\u7a0b\u7ee7\u627f\u800c\u6765\u3002<br \/>\n\u4f8b\u5982\uff1a<\/p>\n<pre><code>$ docker run -it --memory-swappiness=0 ubuntu:16.04 \/bin\/bash<\/code><\/pre>\n<p>\u5c06&#8211;memory-swappiness\u8bbe\u7f6e\u4e3a 0 \u53ef\u4ee5\u4fdd\u6301\u5bb9\u5668\u7684\u5de5\u4f5c\u96c6\uff0c\u907f\u514d\u4ea4\u6362\u4ee3\u7406\u7684\u6027\u80fd\u635f\u5931\u3002<\/p>\n<h1>\u4e94\u3001Block IO\u7684\u9650\u5236<\/h1>\n<p>\u9ed8\u8ba4\u60c5\u51b5\u4e0b\uff0c\u6240\u6709\u5bb9\u5668\u80fd\u5e73\u7b49\u5730\u8bfb\u5199\u78c1\u76d8\uff0c\u53ef\u4ee5\u901a\u8fc7\u8bbe\u7f6e\u2013blkio-weight \u53c2\u6570\u6765\u6539\u53d8 \u5bb9\u5668 block IO \u7684\u4f18\u5148\u7ea7\u3002<\/p>\n<p>\u2013blkio-weight \u4e0e &#8211;cpu-shares \u7c7b\u4f3c\uff0c\u8bbe\u7f6e\u7684\u662f\u76f8\u5bf9\u6743\u91cd\u503c\uff0c\u9ed8\u8ba4\u4e3a 500\u3002<br \/>\n\u5728\u4e0b\u9762 \u7684\u4f8b\u5b50\u4e2d\uff0c\u5bb9\u5668 A \u8bfb\u5199\u78c1\u76d8\u7684\u5e26\u5bbd\u662f\u5bb9\u5668 B \u7684\u4e24\u500d\u3002<\/p>\n<pre><code>[root@localhost stress]# docker run -it --name container_A --blkio-weight 600 centos:stress\n[root@352856c76814 \/]# cat \/sys\/fs\/cgroup\/blkio\/blkio.weight\n600\n[root@localhost stress]# docker run -it --name container_B --blkio-weight 300 centos:stress\n[root@b5b63bc5c29e \/]# cat \/sys\/fs\/cgroup\/blkio\/blkio.weight\n300<\/code><\/pre>\n<h1>\u516d\u3001bps\u548ciops\u7684\u9650\u5236<\/h1>\n<p>bps \u662f byte per second\uff0c\u6bcf\u79d2\u8bfb\u5199\u7684\u6570\u636e\u91cf\u3002<br \/>\niops \u662f io per second\uff0c\u6bcf\u79d2 IO \u7684\u6b21\u6570\u3002<br \/>\n\u53ef\u901a\u8fc7\u4ee5\u4e0b\u53c2\u6570\u63a7\u5236\u5bb9\u5668\u7684 bps \u548c iops\uff1a<\/p>\n<ul>\n<li>\u2013device-read-bps\uff0c\u9650\u5236\u8bfb\u67d0\u4e2a\u8bbe\u5907\u7684 bps\u3002<\/li>\n<li>\u2013device-write-bps\uff0c\u9650\u5236\u5199\u67d0\u4e2a\u8bbe\u5907\u7684 bps\u3002<\/li>\n<li>\u2013device-read-iops\uff0c\u9650\u5236\u8bfb\u67d0\u4e2a\u8bbe\u5907\u7684 iops\u3002<\/li>\n<li>\u2013device-write-iops\uff0c\u9650\u5236\u5199\u67d0\u4e2a\u8bbe\u5907\u7684 iops\u3002<\/li>\n<\/ul>\n<p>\u4e0b\u9762\u7684\u793a\u4f8b\u662f\u9650\u5236\u5bb9\u5668\u5199 \/dev\/sda \u7684\u901f\u7387\u4e3a 5 MB\/s\u3002<\/p>\n<pre><code>[root@localhost stress]# docker run -it --device-write-bps \/dev\/sda:5MB centos:stress\n[root@ff6d27bd15fe \/]# dd if=\/dev\/zero of=test bs=1M count=1024 oflag=direct\n59+0 records in\n59+0 records out\n61865984 bytes (62 MB) copied, 11.8013 s, 5.2 MB\/s<\/code><\/pre>\n<p>\u901a\u8fc7 dd \u547d\u4ee4\u6d4b\u8bd5\u5728\u5bb9\u5668\u4e2d\u5199\u78c1\u76d8\u7684\u901f\u5ea6\u3002\u56e0\u4e3a\u5bb9\u5668\u7684\u6587\u4ef6\u7cfb\u7edf\u662f\u5728 host \/dev\/sda \u4e0a \u7684\uff0c\u5728\u5bb9\u5668\u4e2d\u5199\u6587\u4ef6\u76f8\u5f53\u4e8e\u5bf9 host \/dev\/sda \u8fdb\u884c\u5199\u64cd\u4f5c\u3002\u53e6\u5916\uff0coflag=direct \u6307\u5b9a\u7528 direct IO \u65b9\u5f0f\u5199\u6587\u4ef6\uff0c\u8fd9\u6837 &#8211;device-write-bps \u624d\u80fd\u751f\u6548\u3002<\/p>\n<p>\u7ed3\u679c\u8868\u660e\u9650\u901f 5MB\/s \u5de6\u53f3\u3002\u4f5c\u4e3a\u5bf9\u6bd4\u6d4b\u8bd5\uff0c\u5982\u679c\u4e0d\u9650\u901f\uff0c\u7ed3\u679c\u5982\u4e0b\u3002<\/p>\n<pre><code>[root@localhost stress]# docker run -it centos:stress\n[root@8de026f26c60 \/]# dd if=\/dev\/zero of=test bs=1M count=1024 oflag=direct\n1024+0 records in\n1024+0 records out\n1073741824 bytes (1.1 GB) copied, 1.28213 s, 837 MB\/s<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"<p>\u622a\u6b62\u5230\u76ee\u524d\u4e3a\u6b62\u6211\u4eec\u5df2\u7ecf\u6df1\u5165\u5b66\u4e60\u4e86\u5bb9\u5668\u5f15\u64ce\u7684\u8fdb\u7a0b\u3001\u5185\u5b58\u3001\u5b58\u50a8\u7ba1\u7406\uff0c\u5305\u62ec\u5bf9\u6bcf\u79cd\u8d44\u6e90\u7684\u9650\u5236\u65b9\u6cd5\uff0c\u90a3\u672c\u8282\u4f5c\u4e3a\u4e86\u89e3\uff0c\u6211\u4eec [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[422],"tags":[],"_links":{"self":[{"href":"https:\/\/egonlin.com\/index.php?rest_route=\/wp\/v2\/posts\/7582"}],"collection":[{"href":"https:\/\/egonlin.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/egonlin.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/egonlin.com\/index.php?rest_route=\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/egonlin.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=7582"}],"version-history":[{"count":0,"href":"https:\/\/egonlin.com\/index.php?rest_route=\/wp\/v2\/posts\/7582\/revisions"}],"wp:attachment":[{"href":"https:\/\/egonlin.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=7582"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/egonlin.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=7582"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/egonlin.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=7582"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}