View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0007209 | Taler | deployment and operations | public | 2022-03-27 19:57 | 2022-11-04 19:53 |
| Reporter | ms-mantis | Assigned To | sebasjm | Resolution deadline | |
| Implementer | Reviewer | ||||
| Release signed by | Deployed by | ||||
| Verifier | Communicator | ||||
| Data protection authority notification required | No | ||||
| CSIRT notification required | No | ||||
| Estimated effort (hours) | Actual effort (hours) | 0 | |||
| Fast-track | No | ||||
| Work package | none | ||||
| Priority | normal | Severity | minor | Reproducibility | have not tried |
| Status | closed | Resolution | fixed | ||
| Target Version | 0.9 | Fixed in Version | 0.9 | ||
| Summary | 0007209: Consider using SystemD 'slice' for taler-local. | ||||
| Description | Please document the advantages of this solution before proceeding with the implementation. | ||||
| Tags | No tags attached. | ||||
| To use the slice feature of systemd we need a .slice definition (or more than one) based on the service resource usage and limits. We may have one global taler.service definition which limits the CPU, memory and IO but the correct approach will be to take some time an check any of the systemd options and generate a reference implementation for the services. This configuration heavly depends on the destination hardware and deployment strategy but maybe we can create a reference implementation with some general rules for example: *-secmod should not be using network, greater CPU priority for exchange than merchant-backend https://www.freedesktop.org/software/systemd/man/systemd.resource-control.html# https://www.freedesktop.org/software/systemd/man/systemd.slice.html For the case of 'taler-local': * .slice files need to be created * the body of the function `unit_file_content` (line 1054) should add the reference to the `.slice` * `unit_file_content` should receive the name of the slice for the service Slice example: file: taler-exchange.slice content: [Unit] Description=Slice for taler exchange Before=slices.target [Slice] CPUAccounting=true CPUShares=1000 CPUWeight=1000 file: taler-secmod.slice content: [Unit] Description=Slice for taler secmod rsa,edd Before=slices.target [Slice] IPAccounting=true IPAddressDeny=any Then the services need to reference the slice config file: taler-local-exchange-httpd.service content: [Unit] Description=Taler Exchange HTTP daemon [Service] ExecStart=/bin/taler-exchange-httpd Slice=taler-exchange.slice file: taler-local-exchange-secmod-rsa.service content: [Unit] Description=Taler Exchange RSA security module [Service] ExecStart=/bin/taler-exchange-secmod-rsa Slice=taler-secmod.slice | |
| do we need more info? | |
| Fixed in acb9cfec..93b45e62 | |
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2022-03-27 19:57 | ms-mantis | New Issue | |
| 2022-04-12 19:01 | Christian Grothoff | Assigned To | => sebasjm |
| 2022-04-12 19:01 | Christian Grothoff | Status | new => assigned |
| 2022-04-13 16:30 | sebasjm | Note Added: 0018869 | |
| 2022-04-26 02:11 | sebasjm | Status | assigned => feedback |
| 2022-04-26 02:11 | sebasjm | Note Added: 0018895 | |
| 2022-07-17 15:03 | Christian Grothoff | Note Added: 0018958 | |
| 2022-07-17 15:03 | Christian Grothoff | Status | feedback => informing |
| 2022-07-17 15:03 | Christian Grothoff | Resolution | open => fixed |
| 2022-07-17 15:03 | Christian Grothoff | Fixed in Version | => 0.9 |
| 2022-07-17 15:03 | Christian Grothoff | Target Version | => 0.9 |
| 2022-11-04 19:53 | Christian Grothoff | Status | informing => closed |