16
edits
Changes
Indented parameters by another heading level so toc is easier to follow. linked units subheading to the UBC parameter units page
important for security and stability of the whole system. Auxiliary
parameters differ much from primary and secondary parameters in this respect.
The primary functions of auxiliary parameters are the following.
administrators and hide them in “basic” management modes.
== UBC Auxiliary Parameters == === lockedpages ===
Process pages not allowed to be swapped out (pages locked by <code>mlock(2)</code>).
of applications in the given container only.
=== shmpages ===
The total size of shared memory (IPC, shared anonymous mappings and
<code>tmpfs</code> objects).
of applications in the given container only.
=== physpages ===
Total number of RAM pages used by processes in a container.
<code>limit</code> to 'unlimited' ([[LONG_MAX]]).
=== numfile ===
Number of open files.
Note: actually currently adjusting the <code>barrier</code> will change the kernel behaviour on "pre-charging" the numfile resource. If you change one you will most likely not notice any changes in container behaviour at all. This ability was added for researching purposes purely.
=== numflock ===
Number of file locks.
on the real requirements of the applications.
=== numpty ===
Number of pseudo-terminals.
for one container is limited to <code>256</code>.
=== numsiginfo ===
Number of <code>siginfo</code> structures.
the Linux default — <code>1024</code>.
=== dcachesize ===
The total size of <code>dentry</code> and <code>inode</code> structures locked in memory.
of applications in the given container only.
=== numiptent ===
The number of NETFILTER (IP packet filtering) entries.
to create more than 200–300 <code>numiptent</code>.
=== swappages ===
The amount of swap space to show in container.
The value of <code>held</code> shows how much swap space
is currently being used for this container.
== Units ==
For full article, see: [[UBC parameter units]]
