open-nomad/client/driver/executor/resource_container_linux.go

package executor

import (
	"os"
	"sync"

	dstructs "github.com/hashicorp/nomad/client/driver/structs"
	cgroupConfig "github.com/opencontainers/runc/libcontainer/configs"
)

// resourceContainerContext is a platform-specific struct for managing a
// resource container.  In the case of Linux, this is used to control Cgroups.
type resourceContainerContext struct {
	groups  *cgroupConfig.Cgroup
	cgPaths map[string]string
	cgLock  sync.Mutex
}

// clientCleanup removes this host's Cgroup from the Nomad Client's context
func clientCleanup(ic *dstructs.IsolationConfig, pid int) error {
	if err := DestroyCgroup(ic.Cgroup, ic.CgroupPaths, pid); err != nil {
		return err
	}
	return nil
}

// cleanup removes this host's Cgroup from within an Executor's context
func (rc *resourceContainerContext) executorCleanup() error {
	rc.cgLock.Lock()
	defer rc.cgLock.Unlock()
	if err := DestroyCgroup(rc.groups, rc.cgPaths, os.Getpid()); err != nil {
		return err
	}
	return nil
}

func (rc *resourceContainerContext) getIsolationConfig() *dstructs.IsolationConfig {
	return &dstructs.IsolationConfig{
		Cgroup:      rc.groups,
		CgroupPaths: rc.cgPaths,
	}
}