rcapd(1m) [opensolaris man page]
rcapd(1M) System Administration Commands rcapd(1M) NAME
rcapd - resource cap enforcement daemon SYNOPSIS
rcapd [-d] DESCRIPTION
The rcapd daemon enforces resource caps on collections of processes. Per-project and per-zone physical memory caps are supported. For information about projects, see project(4). For zones information, see zones(5) When the resident set size (RSS) of a collection of processes exceeds its cap, rcapd takes action and reduces the RSS of the collection. The virtual memory system divides physical memory into segments known as pages. To read data from a file into memory, the virtual memory system reads in individual pages. To reduce resource consumption, the daemon can page out, or relocate, infrequently used pages to an area outside of physical memory. In the project file, caps are defined for projects that have positive values for the following project attribute: rcap.max-rss The total amount of physical memory, in bytes, that is available to the project's member processes See project(4) for a description of project attributes. For a system with one or more zones, you can dynamically set the rcap.max-rss value for a zone with rcapadm(1M). To set a persistent cap on memory usage within a zone, you use zonecfg(1M). You configure rcapd through the use of rcapadm(1M). The daemon can be monitored with rcapstat(1). Configuration changes are incorporated into rcapd by sending it SIGHUP (see kill(1)), or according to the configuration interval (see rcapadm(1M)). OPTIONS
The following option is supported: -d Enable debug mode. Messages are displayed on the invoking user's terminal. EXAMPLES
Example 1 Setting Resident Set Size Cap Attribute The following line in the /etc/project database sets an RSS cap of 1073741824 bytes for a project named foo. foo:100::foo,root::rcap.max-rss=10737418240 EXIT STATUS
The following exit values are returned: 0 Successful completion. 1 An error occurred. 2 Invalid command-line options were specified. FILES
/etc/project Project database. ATTRIBUTES
See attributes(5) for descriptions of the following attributes: +-----------------------------+-----------------------------+ | ATTRIBUTE TYPE | ATTRIBUTE VALUE | +-----------------------------+-----------------------------+ |Availability |SUNWrcapu | +-----------------------------+-----------------------------+ |Interface Stability |Evolving | +-----------------------------+-----------------------------+ SEE ALSO
rcapstat(1), svcs(1), rcapadm(1M), zonecfg(1M), svcadm(1M), project(4), attributes(5), smf(5), zones(5) "Physical Memory Control Using the Resource Capping Daemon" in System Administration Guide: Solaris Containers-Resource Management, and Solaris Zones NOTES
If killed with SIGKILL, rcapd can leave processes in a stopped state. Use SIGTERM to cause rcapd to terminate properly. A collection's RSS can exceed its cap for some time before the cap is enforced, even if sufficient pageable memory is available. This period of time can be reduced by shortening the RSS sampling interval with rcapadm. The rcapd service is managed by the service management facility, smf(5), under the service identifier: svc:/system/rcap:default Administrative actions on this service, such as enabling, disabling, or requesting restart, can be performed using svcadm(1M). The ser- vice's status can be queried using the svcs(1) command. SunOS 5.11 19 Dec 2006 rcapd(1M)
Check Out this Related Man Page
projadd(1M) System Administration Commands projadd(1M) NAME
projadd - administer a new project on the system SYNOPSIS
projadd [-n] [-f filename] [-p projid [-o]] [-c comment] [-U user [,user...] ] [-G group [,group...] ] [ [-K name [=value [,value...]...]]] project DESCRIPTION
projadd adds a new project entry to the /etc/project file. If the files backend is being used for the project database, the new project is available for use immediately upon the completion of the projadd command. OPTIONS
The following options are supported: -c comment Add a project comment. Comments are stored in the project's entry in the /etc/project file. Generally, comments contain a short description of the project and are used as the field for the project's full name. Specify comment as a text string. comment cannot contain a colon (:) or <NEWLINE>. -f filename Specify the project file to modify. If no filename is specified, the system project file, /etc/project, is modified. -G group[,group...] Specify a group list for the project. -K name[=value[,value...] Specify an attribute list for the project. Multiple -K options can be specified to set values on multiple keys, such as: -K key1=value1 -K "key2=(value2a),(value2b)" Resource control attributes use parentheses to specify values for a key. Because many user shells interpret parentheses as special characters, it is best to enclose an argument to -K that contains parentheses with double quotes, as shown above and in EXAMPLES, below. See resource_controls(5) for a description of the resource controls you can specify for a project. -n Syntax check. Check the format of the existing system project file and modifications only. The contents of the existing project file, such as user names, group names, and resources that are specified in the project attributes are not checked. -o This option allows the project ID specified by the -p option to be non-unique within the project file. -p projid Set the project ID of the new project. Specify projid as a non-negative decimal integer below UID_MAX as defined in limits.h. projid defaults to the next available unique number above the highest number currently assigned. For example, if projids 100, 105, and 200 are assigned, the next default projid is 201. projids between 0-99 are reserved by SunOS. -U user[,user...] Specify a user list for the project. OPERANDS
The following operands are supported: project The name of the project to create. The project operand is a string consisting of characters from the set of alphabetic characters, numeric characters, underline (_), and hyphen (-). The period ('.') is reserved for projects with special mean- ing to the operating system. The first character of the project name must be a letter. An error message is displayed if these restrictions are not met. EXAMPLES
Example 1: Adding a Project The following command creates the project salesaudit and sets the resource controls specified as arguments to the -K option. projadd -p 111 -G sales,finance -c "Auditing Project" -K "rcap.max-rss=10GB" -K "process.max-file-size=(priv,50MB,deny)" -K "task.max-lwps=(priv,100,deny)" salesaudit This command would produce the following entry in /etc/project: salesaudit:111:Auditing Project::sales,finance: process.max-file-size=(priv,52428800,deny); rcap.max-rss=10737418240;task.max-lwps=(priv,100,deny) Note that the preceding would appear as one line in /etc/project. Comparing the projadd command and resulting output in /etc/project, note the effect of the scaling factor in the resource cap (rcap.max- rss=10GB) and the resource control (process.max-file-size=(priv,50MB,deny)). Modifiers, such as B, KB, and MB, and scaling factors are specified in resource_controls(5). EXIT STATUS
The following exit values are returned: 0 Successful completion. 2 The command syntax was invalid. A usage message for projadd is displayed. 3 An invalid argument was provided to an option. 4 The projid given with the -p option is already in use. 5 The project files contain an error. See project(4). 6 The project to be added, group, user, or resource does not exist. 9 The project is already in use. 10 Cannot update the /etc/project file. FILES
/etc/project System project file ATTRIBUTES
See attributes(5) for descriptions of the following attributes: +------------------------------+----------------------------+ | ATTRIBUTE TYPE | ATTRIBUTE VALUE | +------------------------------+----------------------------+ |Availability | SUNWesu | +------------------------------+----------------------------+ |Interface Stability | See below. | +------------------------------+----------------------------+ Invocation is evolving. Human readable output is unstable. SEE ALSO
projects(1), groupadd(1M), groupdel(1M), groupmod(1M), grpck(1M), projdel(1M), projmod(1M), useradd(1M), userdel(1M), usermod(1M), project(4), attributes(5), resource_controls(5) NOTES
In case of an error, projadd prints an error message and exits with a non-zero status. projadd adds a project definition only on the local system. If a network name service such as NIS or LDAP is being used to supplement the local /etc/project file with additional entries, projadd cannot change information supplied by the network name service. SunOS 5.10 30 Sep 2004 projadd(1M)