From 50a00943a4494c7a7f8f90dfe0e7cd2f12db7c76 Mon Sep 17 00:00:00 2001 From: Peter Hunt Date: Fri, 5 Apr 2019 11:07:55 -0400 Subject: [PATCH] Increase default max pid limit Users were surprised by the suddenly low pid limit on their pods. Change the default to something higher, such as the theoretical maximum number of pids on a 32 bit system. Signed-off-by: Peter Hunt --- daemon/config_unix.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/daemon/config_unix.go b/daemon/config_unix.go index 64c920d0e2db9..2ffc1a818dc82 100644 --- a/daemon/config_unix.go +++ b/daemon/config_unix.go @@ -93,7 +93,7 @@ func (config *Config) InstallFlags(flags *pflag.FlagSet) { flags.StringVar(&config.InitPath, "init-path", "", "Path to the docker-init binary") flags.Int64Var(&config.CPURealtimePeriod, "cpu-rt-period", 0, "Limit the CPU real-time period in microseconds") flags.Int64Var(&config.CPURealtimeRuntime, "cpu-rt-runtime", 0, "Limit the CPU real-time runtime in microseconds") - flags.Int64Var(&config.PidsLimit, "default-pids-limit", 4096, "Limit the number of processes each container is restricted to") + flags.Int64Var(&config.PidsLimit, "default-pids-limit", 32768, "Limit the number of processes each container is restricted to") flags.StringVar(&config.SeccompProfile, "seccomp-profile", "", "Path to seccomp profile") flags.BoolVar(&config.SigCheck, "signature-verification", true, "Check image's signatures on pull") flags.BoolVar(&config.EnableSecrets, "enable-secrets", true, "Enable Secrets")