Cap number of open files to 1024 in each container

This avoids problems with libkqueue allocating many gigabytes of data based on the maximum number of open files, which can default to > 1B in containerd. mheily/libkqueue#153 containerd/containerd#7566
zeek · Jun 26, 2024 · ec654ff · ec654ff
1 parent 216efb9
commit ec654ff
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/Docker/setups/default/docker-compose.yml b/Docker/setups/default/docker-compose.yml
@@ -14,12 +14,16 @@ x-zeek-agent: &ZEEK_AGENT
   command: /usr/local/zeek/bin/zeek -j site/testing/agent.zeek
   ports:
     - "9999"
+  ulimits:
+    nofile: 1024
 
 x-zeek-controller: &ZEEK_CONTROLLER
   command: /usr/local/zeek/bin/zeek -j site/testing/controller.zeek
   ports:
     - "2149"
     - "2150"
+  ulimits:
+    nofile: 1024
 
 services:
   controller:

diff --git a/Docker/setups/singlehost/docker-compose.yml b/Docker/setups/singlehost/docker-compose.yml
@@ -3,6 +3,8 @@ version: "3"
 # docker-compose requires the x- prefix for unrelated YAML nodes
 x-zeek-template: &ZEEK_BASE
   image: zeektest:latest
+  ulimits:
+    nofile: 1024
 
 x-zeek-controller: &ZEEK_CONTROLLER
   command: /usr/local/zeek/bin/zeek -j "site/testing/${ZEEK_ENTRYPOINT:-controller-and-agent.zeek}"