ioi / isolate

Sandbox for securely executing untrusted programs
Other
1.1k stars 161 forks source link

cgroups functionality doesn't work with linux 4.15 #50

Closed tudurom closed 6 years ago

tudurom commented 6 years ago

Hi,

I just upgraded to Linux kernel 4.15 and it looks like isolate is broken because there is no more /sys/fs/cgroup/cpuacct here. I checked the man page and it looks like it has been replaced by cpu. I don't know too much about control groups and how isolate uses them, take this with a grain of salt.

gollux commented 6 years ago

Sorry for the delay. I just checked with Linux 4.17.6 and it seems that cpuacct is still there as a symlink to "cpu,cpuacct". Could it be related to how your distribution sets up the cgroups?

tudurom commented 6 years ago

Time passed, it works for me now. The distro is Arch Linux. Thank you for the clarification!

On Thu, 16 Aug 2018, 13:37 Martin Mareš, notifications@github.com wrote:

Sorry for the delay. I just checked with Linux 4.17.6 and it seems that cpuacct is still there as a symlink to "cpu,cpuacct". Could it be related to how your distribution sets up the cgroups?

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/ioi/isolate/issues/50#issuecomment-413501194, or mute the thread https://github.com/notifications/unsubscribe-auth/AKNZTPlC4IGP__w3Ie4eJ4Tv4GDvJlllks5uRUtxgaJpZM4SzWsx .