cgm - Online in the Cloud

PROGRAM:

NAME

cgm - a client script for cgmanager

DESCRIPTION

cgm is a client script to simplify making requests of the cgroup manager. It simply calls
dbus-send to send requests to the running cgmanager or cgproxy.

Usage:

cgm ping

cgm create <controller> <cgroup>

cgm chown <controller> <cgroup> uid gid

cgm chmod <controller> <cgroup> mode

cgm chmodfile <controller> <cgroup> file mode

cgm remove <controller> <cgroup> [0|1]

cgm getpidcgroup <controller> pid

cgm getpidcgroupabs <controller> pid

cgm movepid <controller> <cgroup> pid

cgm movepidabs <controller> <cgroup> pid

cgm getvalue <controller> <cgroup> file

cgm setvalue <controller> <cgroup> file value

cgm gettasks <controller> <cgroup>

cgm gettasksrecursive <controller> <cgroup>

cgm listchildren <controller> <cgroup>

cgm removeonempty <controller> <cgroup>

cgm prune <controller> <cgroup>

cgm listcontrollers

cgm listkeys <controller> <cgroup>

cgm apiversion

Replace '<controller>' with the desired controller, i.e. memory, and '<cgroup>'
with the desired cgroup, i.e. x1. For create, chown, chmod, remove, prune,
remove_on_empty, gettasksrecursive and movepid, <controller> may be "all" or a
comma-separated set of cgroups. Remove by default is recursive, but adding '0' as
the last argument will perforn non-recursive deletion. Adding '1' is supported for
legacy reasons.

To refer to the current cgroup, use ''.

NOTES

In order to protect the host from root in containers, cgmanager locks prevents tasks from
administering cgroups which are not under their own. The exceptions are that root in a
container may escape up to the cgroup of its cgproxy, and root on the host may escape to
the root cgroup.

This means that a user in freezer cgroup /foo cannot list cgroups in /. However, as root
he can use movepidabs to escape to /, then list cgroups in /.

EXAMPLES

To create a new cgroup called foo and move your shell into it, you could do:

sudo cgm create all foo
sudo cgm chown all foo $(id -u) $(id -g)
cgm movepid all foo $$

Then to freeze that cgroup,

cgm setvalue freezer foo freezer.state FROZEN

Use cgm online using onworks.net services