clean cached rlimit nofile in go runtime

Signed-off-by: ls-ggg <335814617@qq.com>
opencontainers · Mar 29, 2024 · 63ebcf7 · 63ebcf7
1 parent a1acca9
commit 63ebcf7
Show file tree

Hide file tree

Showing 3 changed files with 20 additions and 0 deletions.
diff --git a/libcontainer/setns_init_linux.go b/libcontainer/setns_init_linux.go
@@ -49,6 +49,11 @@ func (l *linuxSetnsInit) Init() error {
 			}
 		}
 	}
+
+	if err := utils.CleanRlimitNoFileCache(); err != nil {
+		return err
+	}
+
 	if l.config.CreateConsole {
 		if err := setupConsole(l.consoleSocket, l.config, false); err != nil {
 			return err

diff --git a/libcontainer/standard_init_linux.go b/libcontainer/standard_init_linux.go
@@ -77,6 +77,10 @@ func (l *linuxStandardInit) Init() error {
 		}
 	}
 
+	if err := utils.CleanRlimitNoFileCache(); err != nil {
+		return err
+	}
+
 	if err := setupNetwork(l.config); err != nil {
 		return err
 	}

diff --git a/libcontainer/utils/utils.go b/libcontainer/utils/utils.go
@@ -7,6 +7,7 @@ import (
 	"os"
 	"path/filepath"
 	"strings"
+	"syscall"
 	"unsafe"
 
 	"golang.org/x/sys/unix"
@@ -129,3 +130,13 @@ func Annotations(labels []string) (bundle string, userAnnotations map[string]str
 	}
 	return
 }
+
+// Clean the cache of RLIMIT_NOFILE in go runtime
+// https://github.com/golang/go/commit/f5eef58e4381259cbd84b3f2074c79607fb5c821#diff-ec665e9789f8cf5cd1828ad7fa9f0ff4ebc1f5b5dd0fc82a296da5c07da7ece6
+func CleanRlimitNoFileCache() error {
+	rlimit := syscall.Rlimit{}
+	if err := syscall.Getrlimit(syscall.RLIMIT_NOFILE, &rlimit); err != nil {
+		return err
+	}
+	return syscall.Setrlimit(syscall.RLIMIT_NOFILE, &rlimit)
+}