[libvirt] Destroying a suspended LXC domain
Michal Privoznik
mprivozn at redhat.com
Fri Feb 14 10:36:51 UTC 2014
On 14.02.2014 11:14, Richard Weinberger wrote:
> Hi!
>
> If we suspend a LXC domain libvirt freezes all tasks in the cgroup using the process freezer.
> Upon destroy libvirt tries to kill all tasks using SIGTERM and later SIGKILL, but as they are frozen
> the tasks are unkillable.
> This seems to confuse libvirt, all tasks remain but libvirt forgets the domain.
>
> Here a small example:
> ---cut---
> lxc-host1:/etc # /opt/libvirt-dev/bin/virsh domstate my3rdcontainer
> paused
>
> lxc-host1:/etc # /opt/libvirt-dev/bin/virsh destroy my3rdcontainer
> error: Failed to destroy domain my3rdcontainer
> error: internal error: Some processes refused to die
>
> lxc-host1:/etc # ps fax
> ...
> 2118 ? Dsl 0:00 /opt/libvirt-dev/lib/libvirt_lxc --name my3rdcontainer --console 19 --security=none --handshake 22 --backgr
> 2128 ? Ds 0:00 \_ /sbin/init
> 2152 ? Ds 0:00 \_ /usr/lib/systemd/systemd-journald
> 2171 ? Ds 0:00 \_ /bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
> 2174 ? Ds 0:00 \_ /usr/lib/systemd/systemd-logind
> 2189 ? Dsl 0:00 \_ /usr/sbin/rsyslogd -n
> 2778 ? Ds 0:00 \_ /usr/sbin/cron -n
> 2782 pts/0 Ds+ 0:00 \_ /sbin/agetty --noclear -s console 115200 38400 9600
> 2786 ? Ds 0:00 \_ /usr/sbin/sshd -D
> ...
> ---cut---
>
> I can think of three options to deal with that.
>
> a) Refuse to destroy a suspended LXC domain
>
> b) Implicitly resume it upon destroy
>
> c) Send a SIGKILL to each task and then thaw all tasks using the process freezer.
> If the task is woken up the it sees immediately the pending SIGKILL and dies.
>
> I'd vote for c) because I want to destroy a LXC domain without resuming it.
> I.e. I want to kill it to avoid any further IO from the already suspended domain.
Yeah, I also vote for c).
>
> What do you think? I'd volunteer for a patch. :)
Awesome.
Michal
More information about the libvir-list
mailing list