mirror of
https://github.com/podman-container-tools/podman.git
synced 2026-08-24 01:07:53 +00:00
3ba69dccf7
Don't use reexec for the rootlessport process, instead make it a separate binary to reduce the memory usage. The problem with reexec is that it will import all packages that podman uses and therefore loads a lot of stuff into the heap. The rootlessport process however only needs the rootlesskit library. The memory usage is a concern since the rootlessport process will spawn two process per container which has ports forwarded. The processes stay until the container dies. On my laptop the current reexec version uses 47800 KB RSS. The new separate binary only uses 4540 KB RSS. This is more than a 90% improvement. The Makefile has been updated to compile the new binary and install it to the libexec directory. Fixes #10790 [NO TESTS NEEDED] Signed-off-by: Paul Holzinger <pholzing@redhat.com>
34 lines
841 B
Go
34 lines
841 B
Go
// +build linux
|
|
|
|
// Package rootlessport provides reexec for RootlessKit-based port forwarder.
|
|
//
|
|
// init() contains reexec.Register() for ReexecKey .
|
|
//
|
|
// The reexec requires Config to be provided via stdin.
|
|
//
|
|
// The reexec writes human-readable error message on stdout on error.
|
|
//
|
|
// Debug log is printed on stderr.
|
|
package rootlessport
|
|
|
|
import (
|
|
"github.com/containers/podman/v3/libpod/network/types"
|
|
)
|
|
|
|
const (
|
|
// BinaryName is the binary name for the parent process.
|
|
BinaryName = "rootlessport"
|
|
)
|
|
|
|
// Config needs to be provided to the process via stdin as a JSON string.
|
|
// stdin needs to be closed after the message has been written.
|
|
type Config struct {
|
|
Mappings []types.OCICNIPortMapping
|
|
NetNSPath string
|
|
ExitFD int
|
|
ReadyFD int
|
|
TmpDir string
|
|
ChildIP string
|
|
ContainerID string
|
|
RootlessCNI bool
|
|
}
|