See below....
On 2013-06-12 12:06, Jonathan Adams wrote:
On Tuesday I had a Solaris 10 box with a hand-compiled Squid on it that
came up with the message "WARNING! Your cache is running out of
filedescriptors".
on that machine I just ran "projmod -s -K
'process.max-file-descriptor=(basic,4096,deny)' user.root", logged off
and and and then restarted squid using my /etc/init.d script, which
fixed the problem (checked using "prctl -P")
Today I have the same problem on an Illumos box, with Squid running as a
service.
to make matters more interesting the squid on Illumos is running in a zone.
no matter what I try (in global or local zones) changes to the root user
in /etc/project do not change the max file handles for the squid
process, although they do change it for the "root" user.
You can try associating the project with the service (instance), i.e.
in the XML form of the manifest:
====
<exec_method
type='method'
name='start'
exec='/path/to/method start'
timeout_seconds='0' >
<method_context
project='projectname' >
<method_credential
user='someuser' />
</method_context>
</exec_method>
====
Also, the SMF FAQ on the now-defunct hub.opensolaris.org included this
piece of knowledge for command-line configuration of such association:
=====
Specify all required properties directly. In this example, we're trying
to have the smtp:sendmail service start in the sendmail(1M) project.
First, check if the property you're trying to set is already defined for
the service:
# svcprop -p start/project <FMRI>
If this property is set to a value (like :default), do the following
to change the project:
# svccfg -s <fmri> setprop start/project = sendmail
# svcadm refresh sendmail; svcadm restart sendmail
If it isn't set, specify all required properties.
# svccfg -s sendmail setprop start/project = astring: sendmail
# svccfg -s sendmail setprop start/user = astring: root
# svccfg -s sendmail setprop start/group = astring: :default
# svccfg -s sendmail setprop start/working_directory = astring: :default
# svccfg -s sendmail setprop start/resource_pool = astring: :default
# svccfg -s sendmail setprop start/supp_groups = astring: :default
# svccfg -s sendmail setprop start/privileges = astring: :default
# svccfg -s sendmail setprop start/limit_privileges = astring: :default
# svccfg -s sendmail setprop start/use_profile = boolean: false
# svcadm refresh sendmail; svcadm restart sendmail
====
There's a copy of the SMF(5) FAQ here:
http://web.archive.org/web/20130318055639/http://hub.opensolaris.org/bin/view/Community+Group+smf/faq
HTH,
//Jim
-------------------------------------------
illumos-discuss
Archives: https://www.listbox.com/member/archive/182180/=now
RSS Feed: https://www.listbox.com/member/archive/rss/182180/21175430-2e6923be
Modify Your Subscription:
https://www.listbox.com/member/?member_id=21175430&id_secret=21175430-6a77cda4
Powered by Listbox: http://www.listbox.com
