mirror of
				https://github.com/optim-enterprises-bv/openwrt-ipq.git
				synced 2025-10-30 17:58:28 +00:00 
			
		
		
		
	Config.in: update options for cgroups and namespaces
Signed-off-by: Luka Perkov <luka@openwrt.org> SVN-Revision: 36539
This commit is contained in:
		
							
								
								
									
										393
									
								
								Config.in
									
									
									
									
									
								
							
							
						
						
									
										393
									
								
								Config.in
									
									
									
									
									
								
							| @@ -304,148 +304,281 @@ menu "Global build settings" | |||||||
| 	# CGROUP support symbols | 	# CGROUP support symbols | ||||||
| 	# | 	# | ||||||
|  |  | ||||||
| 	config KERNEL_FREEZER |  | ||||||
| 		bool |  | ||||||
| 		default y if KERNEL_CGROUP_FREEZER |  | ||||||
| 		depends on KERNEL_CGROUPS |  | ||||||
|  |  | ||||||
| 	config KERNEL_CGROUP_FREEZER |  | ||||||
| 		bool |  | ||||||
| 		depends on KERNEL_CGROUPS |  | ||||||
|  |  | ||||||
| 	config KERNEL_CGROUP_DEVICE |  | ||||||
| 		bool |  | ||||||
| 		depends on KERNEL_CGROUPS |  | ||||||
|  |  | ||||||
| 	config KERNEL_CPUSETS |  | ||||||
| 		bool |  | ||||||
| 		default y if KERNEL_CGROUP_CPUACCT |  | ||||||
| 		depends on KERNEL_CGROUPS |  | ||||||
|  |  | ||||||
| 	config KERNEL_PROC_PID_CPUSET |  | ||||||
| 		bool |  | ||||||
| 		default y if KERNEL_CGROUP_CPUACCT |  | ||||||
| 		depends on KERNEL_CGROUPS |  | ||||||
|  |  | ||||||
| 	config KERNEL_CGROUP_CPUACCT |  | ||||||
| 		bool |  | ||||||
| 		depends on KERNEL_CGROUPS |  | ||||||
|  |  | ||||||
| 	config KERNEL_RESOURCE_COUNTERS |  | ||||||
| 		bool |  | ||||||
| 		default y if KERNEL_CGROUP_MEM_RES_CTLR |  | ||||||
| 		depends on KERNEL_CGROUPS |  | ||||||
|  |  | ||||||
| 	config KERNEL_CGROUP_MEM_RES_CTLR |  | ||||||
| 		bool |  | ||||||
| 		depends on KERNEL_CGROUPS |  | ||||||
|  |  | ||||||
| 	config KERNEL_CGROUP_MEM_RES_CTLR_SWAP |  | ||||||
| 		bool |  | ||||||
| 		depends on KERNEL_CGROUPS |  | ||||||
|  |  | ||||||
| 	config KERNEL_CGROUP_MEM_RES_CTLR_SWAP_ENABLED |  | ||||||
| 		bool |  | ||||||
| 		depends on KERNEL_CGROUPS |  | ||||||
|  |  | ||||||
| 	config KERNEL_CGROUP_MEM_RES_CTLR_KMEM |  | ||||||
| 		bool |  | ||||||
| 		depends on KERNEL_CGROUPS |  | ||||||
|  |  | ||||||
| 	config KERNEL_CGROUP_PERF |  | ||||||
| 		bool |  | ||||||
| 		depends on KERNEL_CGROUPS |  | ||||||
|  |  | ||||||
| 	config KERNEL_CFS_BANDWIDTH |  | ||||||
| 		bool |  | ||||||
| 		default y if KERNEL_FAIR_GROUP_SCHED |  | ||||||
| 		depends on KERNEL_CGROUP_SCHED |  | ||||||
|  |  | ||||||
| 	config KERNEL_FAIR_GROUP_SCHED |  | ||||||
| 		bool |  | ||||||
| 		default y if KERNEL_CGROUP_SCHED |  | ||||||
| 		depends on KERNEL_CGROUP_SCHED |  | ||||||
|  |  | ||||||
| 	config KERNEL_RT_GROUP_SCHED |  | ||||||
| 		bool |  | ||||||
| 		default y if KERNEL_CGROUP_SCHED |  | ||||||
| 		depends on KERNEL_CGROUP_SCHED |  | ||||||
|  |  | ||||||
| 	config KERNEL_CGROUP_SCHED |  | ||||||
| 		bool |  | ||||||
| 		depends on KERNEL_CGROUPS |  | ||||||
|  |  | ||||||
| 	config KERNEL_NET_CLS_CGROUP |  | ||||||
| 		bool |  | ||||||
| 		depends on KERNEL_CGROUPS |  | ||||||
|  |  | ||||||
| 	config KERNEL_NETPRIO_CGROUP |  | ||||||
| 		bool |  | ||||||
| 		depends on KERNEL_CGROUPS |  | ||||||
|  |  | ||||||
| 	config KERNEL_BLK_CGROUP |  | ||||||
| 		bool |  | ||||||
| 		depends on KERNEL_CGROUPS |  | ||||||
|  |  | ||||||
| 	config KERNEL_DEBUG_BLK_CGROUP |  | ||||||
| 		bool |  | ||||||
| 		default n if KERNEL_CGROUPS |  | ||||||
| 		depends on KERNEL_CGROUPS |  | ||||||
|  |  | ||||||
| 	config KERNEL_CGROUPS | 	config KERNEL_CGROUPS | ||||||
| 		bool "Enable kernel cgroups" | 		bool "Enable kernel cgroups" | ||||||
| 		default n | 		default n | ||||||
| 		select KERNEL_CGROUP_FREEZER |  | ||||||
| 		select KERNEL_CGROUP_DEVICE | 	if KERNEL_CGROUPS | ||||||
| 		select KERNEL_CGROUP_CPUACCT |  | ||||||
| 		select KERNEL_CGROUP_MEM_RES_CTLR | 		config KERNEL_CGROUP_DEBUG | ||||||
| 		select KERNEL_CGROUP_MEM_RES_CTLR_SWAP | 			bool "Example debug cgroup subsystem" | ||||||
| 		select KERNEL_CGROUP_MEM_RES_CTLR_SWAP_ENABLED | 			default n | ||||||
| 		select KERNEL_CGROUP_MEM_RES_CTLR_KMEM | 			help | ||||||
| 		select KERNEL_CGROUP_PERF | 			  This option enables a simple cgroup subsystem that | ||||||
| 		select KERNEL_CGROUP_SCHED | 			  exports useful debugging information about the cgroups | ||||||
| 		select KERNEL_NET_CLS_CGROUP | 			  framework. | ||||||
| 		select KERNEL_NETPRIO_CGROUP |  | ||||||
| 		select KERNEL_BLK_CGROUP | 		config KERNEL_FREEZER | ||||||
|  | 			bool | ||||||
|  | 			default y if KERNEL_CGROUP_FREEZER | ||||||
|  |  | ||||||
|  | 		config KERNEL_CGROUP_FREEZER | ||||||
|  | 			bool "Freezer cgroup subsystem" | ||||||
|  | 			default n | ||||||
|  | 			help | ||||||
|  | 			  Provides a way to freeze and unfreeze all tasks in a | ||||||
|  | 			  cgroup. | ||||||
|  |  | ||||||
|  | 		config KERNEL_CGROUP_DEVICE | ||||||
|  | 			bool "Device controller for cgroups" | ||||||
|  | 			default y | ||||||
|  | 			help | ||||||
|  | 			  Provides a cgroup implementing whitelists for devices which | ||||||
|  | 			  a process in the cgroup can mknod or open. | ||||||
|  |  | ||||||
|  | 		config KERNEL_CPUSETS | ||||||
|  | 			bool "Cpuset support" | ||||||
|  | 			default n | ||||||
|  | 			help | ||||||
|  | 			  This option will let you create and manage CPUSETs which | ||||||
|  | 			  allow dynamically partitioning a system into sets of CPUs and | ||||||
|  | 			  Memory Nodes and assigning tasks to run only within those sets. | ||||||
|  | 			  This is primarily useful on large SMP or NUMA systems. | ||||||
|  |  | ||||||
|  | 		config KERNEL_PROC_PID_CPUSET | ||||||
|  | 			bool "Include legacy /proc/<pid>/cpuset file" | ||||||
|  | 			default n | ||||||
|  | 			depends on KERNEL_CPUSETS | ||||||
|  |  | ||||||
|  | 		config KERNEL_CGROUP_CPUACCT | ||||||
|  | 			bool "Simple CPU accounting cgroup subsystem" | ||||||
|  | 			default n | ||||||
|  | 			help | ||||||
|  | 			  Provides a simple Resource Controller for monitoring the | ||||||
|  | 			  total CPU consumed by the tasks in a cgroup. | ||||||
|  |  | ||||||
|  | 		config KERNEL_RESOURCE_COUNTERS | ||||||
|  | 			bool "Resource counters" | ||||||
|  | 			default n | ||||||
|  | 			help | ||||||
|  | 			  This option enables controller independent resource accounting | ||||||
|  | 			  infrastructure that works with cgroups. | ||||||
|  |  | ||||||
|  | 		config KERNEL_MM_OWNER | ||||||
|  | 			bool | ||||||
|  | 			default y if KERNEL_MEMCG | ||||||
|  |  | ||||||
|  | 		config KERNEL_MEMCG | ||||||
|  | 			bool "Memory Resource Controller for Control Groups" | ||||||
|  | 			default n | ||||||
|  | 			depends on KERNEL_RESOURCE_COUNTERS | ||||||
|  | 			help | ||||||
|  | 			  Provides a memory resource controller that manages both anonymous | ||||||
|  | 			  memory and page cache. (See Documentation/cgroups/memory.txt) | ||||||
|  |  | ||||||
|  | 			  Note that setting this option increases fixed memory overhead | ||||||
|  | 			  associated with each page of memory in the system. By this, | ||||||
|  | 			  20(40)bytes/PAGE_SIZE on 32(64)bit system will be occupied by memory | ||||||
|  | 			  usage tracking struct at boot. Total amount of this is printed out | ||||||
|  | 			  at boot. | ||||||
|  |  | ||||||
|  | 			  Only enable when you're ok with these trade offs and really | ||||||
|  | 			  sure you need the memory resource controller. Even when you enable | ||||||
|  | 			  this, you can set "cgroup_disable=memory" at your boot option to | ||||||
|  | 			  disable memory resource controller and you can avoid overheads. | ||||||
|  | 			  (and lose benefits of memory resource controller) | ||||||
|  |  | ||||||
|  | 			  This config option also selects MM_OWNER config option, which | ||||||
|  | 			  could in turn add some fork/exit overhead. | ||||||
|  |  | ||||||
|  | 		config KERNEL_MEMCG_SWAP | ||||||
|  | 			bool "Memory Resource Controller Swap Extension" | ||||||
|  | 			default n | ||||||
|  | 			depends on KERNEL_MEMCG | ||||||
|  | 			help | ||||||
|  | 			  Add swap management feature to memory resource controller. When you | ||||||
|  | 			  enable this, you can limit mem+swap usage per cgroup. In other words, | ||||||
|  | 			  when you disable this, memory resource controller has no cares to | ||||||
|  | 			  usage of swap...a process can exhaust all of the swap. This extension | ||||||
|  | 			  is useful when you want to avoid exhaustion swap but this itself | ||||||
|  | 			  adds more overheads and consumes memory for remembering information. | ||||||
|  | 			  Especially if you use 32bit system or small memory system, please | ||||||
|  | 			  be careful about enabling this. When memory resource controller | ||||||
|  | 			  is disabled by boot option, this will be automatically disabled and | ||||||
|  | 			  there will be no overhead from this. Even when you set this config=y, | ||||||
|  | 			  if boot option "swapaccount=0" is set, swap will not be accounted. | ||||||
|  | 			  Now, memory usage of swap_cgroup is 2 bytes per entry. If swap page | ||||||
|  | 			  size is 4096bytes, 512k per 1Gbytes of swap. | ||||||
|  |  | ||||||
|  | 		config KERNEL_MEMCG_SWAP_ENABLED | ||||||
|  | 			bool "Memory Resource Controller Swap Extension enabled by default" | ||||||
|  | 			default n | ||||||
|  | 			depends on KERNEL_MEMCG_SWAP | ||||||
|  | 			help | ||||||
|  | 			  Memory Resource Controller Swap Extension comes with its price in | ||||||
|  | 			  a bigger memory consumption. General purpose distribution kernels | ||||||
|  | 			  which want to enable the feature but keep it disabled by default | ||||||
|  | 			  and let the user enable it by swapaccount boot command line | ||||||
|  | 			  parameter should have this option unselected. | ||||||
|  | 			  For those who want to have the feature enabled by default should | ||||||
|  | 			  select this option (if, for some reason, they need to disable it | ||||||
|  | 			  then swapaccount=0 does the trick). | ||||||
|  |  | ||||||
|  |  | ||||||
|  | 		config KERNEL_MEMCG_KMEM | ||||||
|  | 			bool "Memory Resource Controller Kernel Memory accounting (EXPERIMENTAL)" | ||||||
|  | 			default n | ||||||
|  | 			depends on KERNEL_MEMCG | ||||||
|  | 			help | ||||||
|  | 			  The Kernel Memory extension for Memory Resource Controller can limit | ||||||
|  | 			  the amount of memory used by kernel objects in the system. Those are | ||||||
|  | 			  fundamentally different from the entities handled by the standard | ||||||
|  | 			  Memory Controller, which are page-based, and can be swapped. Users of | ||||||
|  | 			  the kmem extension can use it to guarantee that no group of processes | ||||||
|  | 			  will ever exhaust kernel resources alone. | ||||||
|  |  | ||||||
|  | 		config KERNEL_PERF_EVENTS | ||||||
|  | 			bool | ||||||
|  | 			default y if KERNEL_CGROUP_PERF | ||||||
|  |  | ||||||
|  | 		config KERNEL_CGROUP_PERF | ||||||
|  | 			bool "Enable perf_event per-cpu per-container group (cgroup) monitoring" | ||||||
|  | 			default n | ||||||
|  | 			help | ||||||
|  | 			  This option extends the per-cpu mode to restrict monitoring to | ||||||
|  | 			  threads which belong to the cgroup specified and run on the | ||||||
|  | 			  designated cpu. | ||||||
|  |  | ||||||
|  | 		menuconfig KERNEL_CGROUP_SCHED | ||||||
|  | 			bool "Group CPU scheduler" | ||||||
|  | 			default n | ||||||
|  | 			help | ||||||
|  | 			  This feature lets CPU scheduler recognize task groups and control CPU | ||||||
|  | 			  bandwidth allocation to such task groups. It uses cgroups to group | ||||||
|  | 			  tasks. | ||||||
|  |  | ||||||
|  | 		if KERNEL_CGROUP_SCHED | ||||||
|  |  | ||||||
|  | 			config KERNEL_FAIR_GROUP_SCHED | ||||||
|  | 				bool "Group scheduling for SCHED_OTHER" | ||||||
|  | 				default n | ||||||
|  |  | ||||||
|  | 			config KERNEL_CFS_BANDWIDTH | ||||||
|  | 				bool "CPU bandwidth provisioning for FAIR_GROUP_SCHED" | ||||||
|  | 				default n | ||||||
|  | 				depends on KERNEL_FAIR_GROUP_SCHED | ||||||
|  | 				help | ||||||
|  | 				  This option allows users to define CPU bandwidth rates (limits) for | ||||||
|  | 				  tasks running within the fair group scheduler.  Groups with no limit | ||||||
|  | 				  set are considered to be unconstrained and will run with no | ||||||
|  | 				  restriction. | ||||||
|  | 				  See tip/Documentation/scheduler/sched-bwc.txt for more information. | ||||||
|  |  | ||||||
|  | 			config KERNEL_RT_GROUP_SCHED | ||||||
|  | 				bool "Group scheduling for SCHED_RR/FIFO" | ||||||
|  | 				default n | ||||||
|  | 				help | ||||||
|  | 				  This feature lets you explicitly allocate real CPU bandwidth | ||||||
|  | 				  to task groups. If enabled, it will also make it impossible to | ||||||
|  | 				  schedule realtime tasks for non-root users until you allocate | ||||||
|  | 				  realtime bandwidth for them. | ||||||
|  |  | ||||||
|  | 		endif | ||||||
|  |  | ||||||
|  | 		config KERNEL_BLK_CGROUP | ||||||
|  | 			bool "Block IO controller" | ||||||
|  | 			default y | ||||||
|  | 			help | ||||||
|  | 			  Generic block IO controller cgroup interface. This is the common | ||||||
|  | 			  cgroup interface which should be used by various IO controlling | ||||||
|  | 			  policies. | ||||||
|  |  | ||||||
|  | 			  Currently, CFQ IO scheduler uses it to recognize task groups and | ||||||
|  | 			  control disk bandwidth allocation (proportional time slice allocation) | ||||||
|  | 			  to such task groups. It is also used by bio throttling logic in | ||||||
|  | 			  block layer to implement upper limit in IO rates on a device. | ||||||
|  |  | ||||||
|  | 			  This option only enables generic Block IO controller infrastructure. | ||||||
|  | 			  One needs to also enable actual IO controlling logic/policy. For | ||||||
|  | 			  enabling proportional weight division of disk bandwidth in CFQ, set | ||||||
|  | 			  CONFIG_CFQ_GROUP_IOSCHED=y; for enabling throttling policy, set | ||||||
|  | 			  CONFIG_BLK_DEV_THROTTLING=y. | ||||||
|  |  | ||||||
|  | 		config KERNEL_DEBUG_BLK_CGROUP | ||||||
|  | 			bool "Enable Block IO controller debugging" | ||||||
|  | 			default n | ||||||
|  | 			depends on KERNEL_BLK_CGROUP | ||||||
|  | 			help | ||||||
|  | 			  Enable some debugging help. Currently it exports additional stat | ||||||
|  | 			  files in a cgroup which can be useful for debugging. | ||||||
|  |  | ||||||
|  | 		config KERNEL_NET_CLS_CGROUP | ||||||
|  | 			bool "Control Group Classifier" | ||||||
|  | 			default y | ||||||
|  |  | ||||||
|  | 		config KERNEL_NETPRIO_CGROUP | ||||||
|  | 			bool "Network priority cgroup" | ||||||
|  | 			default y | ||||||
|  |  | ||||||
|  | 	endif | ||||||
|  |  | ||||||
| 	# | 	# | ||||||
| 	# Namespace support symbols | 	# Namespace support symbols | ||||||
| 	# | 	# | ||||||
|  |  | ||||||
| 	config KERNEL_UTS_NS |  | ||||||
| 		bool |  | ||||||
| 		depends on KERNEL_NAMESPACES |  | ||||||
|  |  | ||||||
| 	config KERNEL_IPC_NS |  | ||||||
| 		bool |  | ||||||
| 		depends on KERNEL_NAMESPACES |  | ||||||
|  |  | ||||||
| 	config KERNEL_USER_NS |  | ||||||
| 		bool |  | ||||||
| 		depends on KERNEL_NAMESPACES |  | ||||||
|  |  | ||||||
| 	config KERNEL_PID_NS |  | ||||||
| 		bool |  | ||||||
| 		depends on KERNEL_NAMESPACES |  | ||||||
|  |  | ||||||
| 	config KERNEL_NET_NS |  | ||||||
| 		bool |  | ||||||
| 		depends on KERNEL_NAMESPACES |  | ||||||
|  |  | ||||||
| 	config KERNEL_DEVPTS_MULTIPLE_INSTANCES |  | ||||||
| 		bool |  | ||||||
| 		depends on KERNEL_NAMESPACES |  | ||||||
|  |  | ||||||
| 	config KERNEL_NAMESPACES | 	config KERNEL_NAMESPACES | ||||||
| 		bool "Enable kernel namespaces" | 		bool "Enable kernel namespaces" | ||||||
| 		default n | 		default n | ||||||
| 		select KERNEL_UTS_NS |  | ||||||
| 		select KERNEL_IPC_NS |  | ||||||
| 		select KERNEL_USER_NS |  | ||||||
| 		select KERNEL_PID_NS |  | ||||||
| 		select KERNEL_NET_NS |  | ||||||
| 		select KERNEL_DEVPTS_MULTIPLE_INSTANCES |  | ||||||
|  |  | ||||||
|  | 	if KERNEL_NAMESPACES | ||||||
|  |  | ||||||
|  | 		config KERNEL_UTS_NS | ||||||
|  | 			bool "UTS namespace" | ||||||
|  | 			default y | ||||||
|  | 			help | ||||||
|  | 			  In this namespace tasks see different info provided | ||||||
|  | 			  with the uname() system call | ||||||
|  |  | ||||||
|  | 		config KERNEL_IPC_NS | ||||||
|  | 			bool "IPC namespace" | ||||||
|  | 			default y | ||||||
|  | 			help | ||||||
|  | 			  In this namespace tasks work with IPC ids which correspond to | ||||||
|  | 			  different IPC objects in different namespaces. | ||||||
|  |  | ||||||
|  | 		config KERNEL_USER_NS | ||||||
|  | 			bool "User namespace (EXPERIMENTAL)" | ||||||
|  | 			default y | ||||||
|  | 			help | ||||||
|  | 			  This allows containers, i.e. vservers, to use user namespaces | ||||||
|  | 			  to provide different user info for different servers. | ||||||
|  |  | ||||||
|  | 		config KERNEL_PID_NS | ||||||
|  | 			bool "PID Namespaces" | ||||||
|  | 			default y | ||||||
|  | 			help | ||||||
|  | 			  Support process id namespaces. This allows having multiple | ||||||
|  | 			  processes with the same pid as long as they are in different | ||||||
|  | 			  pid namespaces. This is a building block of containers. | ||||||
|  |  | ||||||
|  | 		config KERNEL_NET_NS | ||||||
|  | 			bool "Network namespace" | ||||||
|  | 			default y | ||||||
|  | 			help | ||||||
|  | 			  Allow user space to create what appear to be multiple instances | ||||||
|  | 			  of the network stack. | ||||||
|  |  | ||||||
|  | 		config KERNEL_DEVPTS_MULTIPLE_INSTANCES | ||||||
|  | 			bool "Support multiple instances of devpts" | ||||||
|  | 			default y | ||||||
|  | 			help | ||||||
|  | 			  Enable support for multiple instances of devpts filesystem. | ||||||
|  | 			  If you want to have isolated PTY namespaces (eg: in containers), | ||||||
|  | 			  say Y here. Otherwise, say N. If enabled, each mount of devpts | ||||||
|  | 			  filesystem with the '-o newinstance' option will create an | ||||||
|  | 			  independent PTY namespace. | ||||||
|  |  | ||||||
|  | 	endif | ||||||
|  |  | ||||||
| 	comment "Package build options" | 	comment "Package build options" | ||||||
|  |  | ||||||
|   | |||||||
		Reference in New Issue
	
	Block a user
	 Luka Perkov
					Luka Perkov