podman/contrib
Chris Evich 9be2a6f908
Prevent podman varlink socket fight
When enabled, it's desired for the podman-varlink process to startup on
boot or upon socket-activation, whichever happens first.  However,
with `KillMode=none` systemd will never kill any podman-varlink
processes.  This makes it easily possible for multiple podman-varlink
processes to be running, and fight each other to service a single socket.

---
For example:

Prior to this commit, this will result in four podman-varlink processes
being run:

```
systemctl enable io.podman.socket
systemctl enable io.podman.service
systemctl start io.podman.socket
systemctl start io.podman.service
systemctl start io.podman.service
```

Fix this by setting `KillMode=process` and `TimeoutStopSec=30` (default
is 90).  This results in podman-varlink exiting on its own after a minute
of being idle (--timeout=60000).  Alternatively, systemd will manage the
service stop by sending a SIGTERM, then if podman-varlink has not exited
within `TimeoutStopSec`, a SIGKILL will be sent.

Signed-off-by: Chris Evich <cevich@redhat.com>
2019-09-12 11:21:20 -04:00
..
cirrus Cirrus: Fix unnecessary setsebool 2019-09-11 14:03:20 -04:00
gate Bump gate-container up to F30 2019-06-14 10:27:06 -04:00
imgprune Cirrus: Load base-image names indirectly 2019-08-30 09:46:43 -04:00
imgts Cirrus: Reimplement release archive + upload 2019-08-28 11:54:06 -04:00
perftest add --pull flag for podman create&run 2019-08-09 15:21:34 -04:00
podmanimage Merge pull request #3817 from xcffl/master 2019-09-10 19:17:39 +02:00
script Add script to determine dependency sizes 2018-03-23 14:12:14 +00:00
snapcraft Add missing stage-packages in snapcraft.yaml. 2019-08-13 08:57:07 -04:00
spec Bump to v1.5.2-dev 2019-08-15 17:13:21 -04:00
upldrel Cirrus: Reimplement release archive + upload 2019-08-28 11:54:06 -04:00
varlink Prevent podman varlink socket fight 2019-09-12 11:21:20 -04:00
build_rpm.sh Test RPM build and install for regressions 2018-08-28 11:53:09 +00:00