philipp/nixpkgs
1
0
Fork 0
Code Issues Pull requests Projects Releases Activity
nixpkgs/modules
History
Eelco Dolstra 7579933824 * Don't mount /dev/cgroup with the "ns" subsystem. If it's mounted, 
then every unshare(CLONE_NEWNS) system call causes a new entry to be
  created in /dev/cgroup/<pid>, which is not removed automatically.
  This can cause subsequent calls to unshare() to fail if the PID has
  wrapped around.  Worse, a large number of entries in /dev/cgroup
  causes a very substantial system slowdown: doing 10,000
  fork()/unshare(CLONE_NEWNS)/exit() calls took 21s without the "ns"
  subsystem, but 2m43s with it, and the system slows down permanently
  until the entries in /dev/cgroup are removed (going to a load of > 6
  on my laptop).

  This is particularly important for Nix because its chroot feature
  uses unshare(CLONE_NEWNS).  (http://yellowgrass.org/issue/Nix/219)

svn path=/nixos/trunk/; revision=27216
2011-05-11 09:33:24 +00:00
..
config Adding 'ethers' on nsswitch. 2011-04-20 20:59:07 +00:00
hardware intel wifi 6000 firmware 2011-02-10 17:36:56 +00:00
installer * Revert to GRUB 1 as the default. The switch to GRUB 2 seems to 2011-05-10 10:35:20 +00:00
misc * Add an option ‘deployment.adhoc.destroyVMCommand’. 2011-05-10 13:12:35 +00:00
profiles * Don't add nixos-gui to the installation CD (for now) because 1) 2011-04-27 13:54:23 +00:00
programs * Install ~/.bashrc as a regular file rather than as a symlink. 2011-04-05 11:24:36 +00:00
security * Remove a debug statement. 2011-04-19 13:23:45 +00:00
services Fixing the samba daemons. "smbd -i", as we were using, handles *one request* and exit. 2011-05-04 12:34:26 +00:00
system * Don't mount /dev/cgroup with the "ns" subsystem. If it's mounted, 2011-05-11 09:33:24 +00:00
tasks * Get rid of a cyclic symlink to the default theme. 2011-04-06 11:58:13 +00:00
testing * "stage1panic" -> "stage1panic=1" to get rid of a harmless warning. 2011-04-08 14:42:35 +00:00
virtualisation * /var/lib/nova/networks should be readable by the `nobody' user, 2011-04-07 12:47:20 +00:00
module-list.nix * Move ircd-hybrid stuff from the services tree to the nixos tree. 2011-04-27 16:27:05 +00:00
rename.nix * Make `services.sshd.enable' an alias rather than an obsolete option. 2010-12-14 11:48:07 +00:00