Processes scope and visibility - Revision history

Kir: fix using template:warning

2013-05-29T20:41:19Z

fix using template:warning

2013-03-05T00:32:24Z

added warning that pid_ns_hide_child is not compatible with checkpoint

2013-02-22T15:50:51Z

vzprocps-perl

2011-12-17T04:15:54Z

‎Hide container processes from host completely

2011-12-17T04:13:48Z

document kernel.pid_ns_hide_child=1

2011-07-01T16:17:47Z

‎"Poor man's vzps in bash"

2008-03-11T12:24:27Z

VE -> container

2008-03-11T12:23:27Z

VE -> container, CT

2008-03-11T11:44:52Z

Robot: Automated text replacement (-VE0 +CT0)

2008-03-11T09:43:25Z

Robot: Automated text replacement (-VEID +CTID)

@@ Line 29: / Line 29: @@
 After this ps or htop or top will not show other container processes.
-{{Warn|If you use checkpointing and/or live migration, note they are not compatible with this feature and will stop working.}}
+{{Warning|If you use checkpointing and/or live migration, note they are not compatible with this feature and will stop working.}}
 === "Poor man's vzps in bash" ===

@@ Line 27: / Line 27: @@
 </pre>
-After this ps or htop or top do not show anymore other container processes.
+After this ps or htop or top will not show other container processes.
 === "Poor man's vzps in bash" ===

@@ Line 80: / Line 80: @@
 Take <code>vzprocps</code> tools from http://download.openvz.org/contrib/utils/.
 These are usual <code>ps</code> and <code>top</code> utilities (named <code>vztop</code> and <code>vzps</code> to not conflict with the standard ones) with an <code>-E</code> option added. You can use <code>-E <i>CTID</i></code> option to limit the output to the selected CTID (use 0 for the host system), or just <code>-E</code> without an argument to just add CTID column to output.
 == See also ==

@@ Line 17: / Line 17: @@
 It is possible to hide other CT's processes from [[CT0]]. For this just enable kernel.pid_ns_hide_child sysctl parameter:
 sysctl -w 'kernel.pid_ns_hide_child=1'
 and restart all containers. To make setting permanent put into /etc/sysctl.conf following line:
 kernel.pid_ns_hide_child=1
 After this ps or htop or top do not show anymore other container processes.
 === "Poor man's vzps in bash" ===

@@ Line 6: / Line 6: @@
 From [[CT0]] one can see all the processes running on the system; that
 includes all the processes of all [[container]]s and the processes of the
-[[host system]] itself. Sometimes you just want to see the processes from the
+[[host system]] itself. Sometimes you just want to see the processes from the host system only. Sometimes you just want to see the processes from a
 particular container.
@@ Line 13: / Line 12: @@
 == Solutions ==
 === "Poor man's vzps in bash" ===

@@ Line 47: / Line 47: @@
          exit 0
 fi
 </pre>

@@ Line 1: / Line 1: @@
-This [[:Category:HOWTO|HOWTO]] shows how OpenVZ [[hardware node]] administrator can see a processes belonging to the host system only, or to a particular [[VE]].
+This [[:Category:HOWTO|HOWTO]] shows how OpenVZ [[hardware node]]
 == Problem ==
-From [[CT0]] one can see all the processes running on the system; that includes all the processes of all [[VE]]s and the processes of the [[host system]] itself. Sometimes you just want to see the processes from the host system only. Sometimes you just want to see the processes from a particular VE.
+From [[CT0]] one can see all the processes running on the system; that
 There are many ways to achieve it.

@@ Line 17: / Line 17: @@
 # Usage: ./ovzps CTID [ps flags ...]
-function find_ve_pids(){
+function find_container_pids(){
         local pid
-        local myveid=$1
+        local myctid=$1
-        local vepids=
+        local ctpids=
         for pid in $ALLPIDS; do
                 [ -f /proc/$pid/status ] || continue
-                veid=`grep envID /proc/$pid/status | awk -F: '{print $2}'`
+                ctid=`grep envID /proc/$pid/status | awk -F: '{print $2}'`
-                if [ ${veid} = ${myveid} ]; then
+                if [ ${ctid} = ${myctid} ]; then
-                        vepids="$vepids $pid"
+                        ctpids="$ctpids $pid"
                 fi
         done
-        echo "$vepids"
+        echo "$ctpids"
+}
 ALLPIDS=`ps -A -o pid --no-headers`
-VEPIDS=`find_ve_pids $1`
+CTPIDS=`find_container_pids $1`
 shift
-if [ -n "${VEPIDS}" ]; then
+if [ -n "${CTPIDS}" ]; then
-         ps $* -p $VEPIDS
+         ps $* -p $CTPIDS
 else
          exit 0

@@ Line 15: / Line 15: @@
 <pre>
 #!/bin/bash
-# Usage: ./ovzps VEID [ps flags ...]
+# Usage: ./ovzps CTID [ps flags ...]
 function find_ve_pids(){
@@ Line 45: / Line 45: @@
 === Use vzprocps tools ===
 Take <code>vzprocps</code> tools from http://download.openvz.org/contrib/utils/.
-These are usual <code>ps</code> and <code>top</code> utilities (named <code>vztop</code> and <code>vzps</code> to not conflict with the standard ones) with an <code>-E</code> option added. You can use <code>-E <i>VEID</i></code> option to limit the output to the selected VEID (use 0 for the host system), or just <code>-E</code> without an argument to just add VEID column to output.
+These are usual <code>ps</code> and <code>top</code> utilities (named <code>vztop</code> and <code>vzps</code> to not conflict with the standard ones) with an <code>-E</code> option added. You can use <code>-E <i>CTID</i></code> option to limit the output to the selected CTID (use 0 for the host system), or just <code>-E</code> without an argument to just add CTID column to output.
 == See also ==