docker - 资源限制

本文介绍了如何限制Docker进程及用户资源,包括系统内核优化、用户资源限制的具体方法,以及针对Docker容器的资源限制设定,以实现更有效的资源管理。

摘要生成于 C知道 ,由 DeepSeek-R1 满血版支持, 前往体验 >

#参考资源限制方法两种

资源限制针对 docker daemon  ( 不针对 contrainer )
资源限制针对 docker contrainer  (针对 contrainer 及 contrainer 下所有的进程 )

##针对进程, 用户资源限制

针对系统内核进行优化:

/etc/sysctl.conf
fs.file-max=3836960

#针对用户资源限制

 /etc/security/limits.d/25-nofile.conf
root            soft  nofile  196605
root            hard  nofile  196605
*               soft  nofile  196605
*               hard  nofile  196605

效果如下

[root@docker-ovs01 ~]# ulimit -n
196605
[root@docker-ovs01 ~]# ps
PID TTY          TIME CMD
2864 pts/0    00:00:00 bash
[root@docker-ovs01 ~]# cat /proc/2864/limits
Limit                 Soft Limit           Hard Limit           Units
Max open files            196605               196605           files

#docker 进程资源限制

/usr/lib/systemd/system/docker.service
[Service]
LimitMEMLOCK=1288490188800
LimitST
PS C:\Users\34537\dify\docker> docker compose up -d [+] Running 12/12 ✔ Network docker_default Created 0.1s ✔ Network docker_ssrf_proxy_network Created 0.0s ✔ Container docker-weaviate-1 Started 1.3s ✔ Container docker-sandbox-1 Started 1.5s ✔ Container docker-db-1 Healthy 4.0s ✔ Container docker-redis-1 Started 1.4s ✔ Container docker-ssrf_proxy-1 Started 1.5s ✔ Container docker-web-1 Started 1.5s ✔ Container docker-api-1 Started 4.7s ✔ Container docker-worker-1 Started 4.6s ✔ Container docker-plugin_daemon-1 Started 4.4s ✔ Container docker-nginx-1 Started 4.9s PS C:\Users\34537\dify\docker> docker compose ps NAME IMAGE COMMAND SERVICE CREATED STATUS PORTS docker-api-1 langgenius/dify-api:1.5.1 "/bin/bash /entrypoi…" api 14 seconds ago Up 9 seconds 5001/tcp docker-db-1 postgres:15-alpine "docker-entrypoint.s…" db 14 seconds ago Up 12 seconds (healthy) 5432/tcp docker-nginx-1 nginx:latest "sh -c 'cp /docker-e…" nginx 14 seconds ago Up 4 seconds 0.0.0.0:80->80/tcp, 0.0.0.0:443->443/tcp docker-plugin_daemon-1 langgenius/dify-plugin-daemon:0.1.3-local "/bin/bash -c /app/e…" plugin_daemon 14 seconds ago Up 9 seconds 0.0.0.0:5003->5003/tcp docker-redis-1 redis:6-alpine "docker-entrypoint.s…" redis 14 seconds ago Up 13 seconds (health: starting) 6379/tcp docker-sandbox-1 langgenius/dify-sandbox:0.2.12 "/main" sandbox 14 seconds ago Up 13 seconds (health: starting) docker-ssrf_proxy-1 ubuntu/squid:latest "sh -c 'cp /docker-e…" ssrf_proxy 14 seconds ago Up 12 seconds 3128/tcp docker-weaviate-1 semitechnologies/weaviate:1.19.0 "/bin/weaviate --hos…" weaviate 14 seconds ago Up 13 seconds docker-web-1 langgenius/dify-web:1.5.1 "/bin/sh ./entrypoin…" web 14 seconds ago Restarting (0) 3 seconds ago docker-worker-1 langgenius/dify-api:1.5.1 "/bin/bash /entrypoi…" worker 14 seconds ago Up 9 seconds 5001/tcp PS C:\Users\34537\dify\docker> docker compose ps NAME IMAGE COMMAND SERVICE CREATED STATUS PORTS docker-api-1 langgenius/dify-api:1.5.1 "/bin/bash /entrypoi…" api 2 minutes ago Up 2 minutes 5001/tcp docker-db-1 postgres:15-alpine "docker-entrypoint.s…" db 2 minutes ago Up 2 minutes (healthy) 5432/tcp docker-nginx-1 nginx:latest "sh -c 'cp /docker-e…" nginx 2 minutes ago Restarting (1) 10 seconds ago docker-plugin_daemon-1 langgenius/dify-plugin-daemon:0.1.3-local "/bin/bash -c /app/e…" plugin_daemon 2 minutes ago Up 2 minutes 0.0.0.0:5003->5003/tcp docker-redis-1 redis:6-alpine "docker-entrypoint.s…" redis 2 minutes ago Up 2 minutes (healthy) 6379/tcp docker-sandbox-1 langgenius/dify-sandbox:0.2.12 "/main" sandbox 2 minutes ago Up 2 minutes (unhealthy) docker-ssrf_proxy-1 ubuntu/squid:latest "sh -c 'cp /docker-e…" ssrf_proxy 2 minutes ago Up 2 minutes 3128/tcp docker-weaviate-1 semitechnologies/weaviate:1.19.0 "/bin/weaviate --hos…" weaviate 2 minutes ago Up 2 minutes docker-web-1 langgenius/dify-web:1.5.1 "/bin/sh ./entrypoin…" web 2 minutes ago Restarting (0) 56 seconds ago docker-worker-1 langgenius/dify-api:1.5.1 "/bin/bash /entrypoi…" worker 2 minutes ago Up 2 minutes 5001/tcp PS C:\Users\34537\dify\docker> docker logs docker-web-1 PS C:\Users\34537\dify\docker> docker logs --tail 100 docker-web-1 PS C:\Users\34537\dify\docker> docker logs --previous docker-web-1 unknown flag: --previous See 'docker logs --help'. 其中docker-web-1一直在Restarting,并且关于web日志一直没反应,该怎么办(说中文)
最新发布
07-09
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包

打赏作者

Terry_Tsang

你的鼓励将是我创作的最大动力

¥1 ¥2 ¥4 ¥6 ¥10 ¥20
扫码支付:¥1
获取中
扫码支付

您的余额不足,请更换扫码支付或充值

打赏作者

实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值