123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100 |
- /*
- Copyright 2016 The Kubernetes Authors.
- Licensed under the Apache License, Version 2.0 (the "License");
- you may not use this file except in compliance with the License.
- You may obtain a copy of the License at
- http://www.apache.org/licenses/LICENSE-2.0
- Unless required by applicable law or agreed to in writing, software
- distributed under the License is distributed on an "AS IS" BASIS,
- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- See the License for the specific language governing permissions and
- limitations under the License.
- */
- package system
- import (
- "bufio"
- "os"
- "strings"
- "github.com/pkg/errors"
- )
- var _ Validator = &CgroupsValidator{}
- // CgroupsValidator validates cgroup configuration.
- type CgroupsValidator struct {
- Reporter Reporter
- }
- // Name is part of the system.Validator interface.
- func (c *CgroupsValidator) Name() string {
- return "cgroups"
- }
- const (
- cgroupsConfigPrefix = "CGROUPS_"
- )
- // Validate is part of the system.Validator interface.
- func (c *CgroupsValidator) Validate(spec SysSpec) (error, error) {
- subsystems, err := c.getCgroupSubsystems()
- if err != nil {
- return nil, errors.Wrap(err, "failed to get cgroup subsystems")
- }
- return nil, c.validateCgroupSubsystems(spec.Cgroups, subsystems)
- }
- func (c *CgroupsValidator) validateCgroupSubsystems(cgroupSpec, subsystems []string) error {
- missing := []string{}
- for _, cgroup := range cgroupSpec {
- found := false
- for _, subsystem := range subsystems {
- if cgroup == subsystem {
- found = true
- break
- }
- }
- item := cgroupsConfigPrefix + strings.ToUpper(cgroup)
- if found {
- c.Reporter.Report(item, "enabled", good)
- } else {
- c.Reporter.Report(item, "missing", bad)
- missing = append(missing, cgroup)
- }
- }
- if len(missing) > 0 {
- return errors.Errorf("missing cgroups: %s", strings.Join(missing, " "))
- }
- return nil
- }
- func (c *CgroupsValidator) getCgroupSubsystems() ([]string, error) {
- f, err := os.Open("/proc/cgroups")
- if err != nil {
- return nil, err
- }
- defer f.Close()
- subsystems := []string{}
- s := bufio.NewScanner(f)
- for s.Scan() {
- if err := s.Err(); err != nil {
- return nil, err
- }
- text := s.Text()
- if text[0] != '#' {
- parts := strings.Fields(text)
- if len(parts) >= 4 && parts[3] != "0" {
- subsystems = append(subsystems, parts[0])
- }
- }
- }
- return subsystems, nil
- }
|