Golang如何实现Docker容器资源限制_Golang Docker容器资源控制实践

package main
<p>import (
"context"
"fmt"
"github.com/docker/docker/api/types"
"github.com/docker/docker/api/types/container"
"github.com/docker/docker/client"
"github.com/docker/docker/errdefs"
)</p><p>func main() {
cli, err := client.NewClientWithOpts(client.FromEnv)
if err != nil {
panic(err)
}
cli.NegotiateAPIVersion(context.Background())</p><pre class="brush:php;toolbar:false;"><pre class="brush:php;toolbar:false;">ctx := context.Background()
imageName := "alpine"

// 拉取镜像
_, err = cli.ImagePull(ctx, imageName, types.ImagePullOptions{})
if err != nil && !errdefs.IsAlreadyExists(err) {
    panic(err)
}

// 设置资源限制
resourceConstraints := container.Resources{
    Memory:   128 * 1024 * 1024,     // 128MB 内存
    MemorySwap: 128 * 1024 * 1024,   // 不允许使用 swap
    NanoCPUs: 500 * 1e6,             // 0.5 个 CPU
}

resp, err := cli.ContainerCreate(ctx,
    &container.Config{
        Image: imageName,
        Cmd:   []string{"sh", "-c", "while true; do echo 'running'; sleep 1; done"},
    },
    &container.HostConfig{
        Resources: resourceConstraints,
    },
    nil,
    nil,
    "",
)
if err != nil {
    panic(err)
}

if err = cli.ContainerStart(ctx, resp.ID, types.ContainerStartOptions{}); err != nil {
    panic(err)
}

fmt.Println("Container started with ID:", resp.ID)

package main
<p>import (
"os/exec"
"github.com/containerd/cgroups"
"github.com/containerd/cgroups/stats/v1"
"os"
"syscall"
)</p><p>func main() {
// 创建 cgroup
group, err := cgroups.New(cgroups.V1, cgroups.StaticPath("/myapp"), &cgroups.Resources{
Memory: &cgroups.Memory{Limit: 67108864}, // 64MB
})
if err != nil {
panic(err)
}
defer group.Delete()</p><pre class="brush:php;toolbar:false;"><pre class="brush:php;toolbar:false;">// 启动进程
cmd := exec.Command("sh", "-c", "while true; do malloc 1000000; done")
cmd.SysProcAttr = &syscall.SysProcAttr{}
if err := cmd.Start(); err != nil {
    panic(err)
}

// 加入 cgroup
if err := group.Add(cgroups.Process{Pid: cmd.Process.Pid}); err != nil {
    panic(err)
}

cmd.Wait()

pod.Spec.Containers[0].Resources = corev1.ResourceRequirements{
    Requests: corev1.ResourceList{
        corev1.ResourceMemory: resource.MustParse("128Mi"),
        corev1.ResourceCPU:    resource.MustParse("250m"),
    },
    Limits: corev1.ResourceList{
        corev1.ResourceMemory: resource.MustParse("256Mi"),
        corev1.ResourceCPU:    resource.MustParse("500m"),
    },
}