Merge pull request #2168 from AkihiroSuda/ebpf-fix-rlimit

cgroup2: ebpf: increase RLIM_MEMLOCK to avoid BPF_PROG_LOAD error
opencontainers · Nov 16, 2019 · 2186cfa · 2186cfa
2 parents 46def4c + faf1e44
commit 2186cfa
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/libcontainer/cgroups/ebpf/ebpf.go b/libcontainer/cgroups/ebpf/ebpf.go
@@ -16,6 +16,13 @@ func LoadAttachCgroupDeviceFilter(insts asm.Instructions, license string, dirFD
 	nilCloser := func() error {
 		return nil
 	}
+	// Increase `ulimit -l` limit to avoid BPF_PROG_LOAD error (#2167).
+	// This limit is not inherited into the container.
+	memlockLimit := &unix.Rlimit{
+		Cur: unix.RLIM_INFINITY,
+		Max: unix.RLIM_INFINITY,
+	}
+	_ = unix.Setrlimit(unix.RLIMIT_MEMLOCK, memlockLimit)
 	spec := &ebpf.ProgramSpec{
 		Type:         ebpf.CGroupDevice,
 		Instructions: insts,