Skip to content
This repository has been archived by the owner on Jan 25, 2022. It is now read-only.

Commit

Permalink
remove flock in net.sh linux skeleton
Browse files Browse the repository at this point in the history
- it is no longer needed since we have the '-w' flag for iptables
- the extra locking with timeouts can cause containers to fail to start
concurrently as they all contend for the same lock
- this helps large numbers of containers to be created concurrently
especially on 4.4 kernels
  • Loading branch information
zrob committed Oct 25, 2016
1 parent 3d9e3fb commit 225247d
Showing 1 changed file with 0 additions and 5 deletions.
5 changes: 0 additions & 5 deletions warden/root/linux/skeleton/net.sh
Original file line number Diff line number Diff line change
Expand Up @@ -80,11 +80,6 @@ function setup_nat() {
--jump ${nat_instance_chain}
}

# Lock execution
mkdir -p ../tmp
exec 3> ../tmp/$(basename $0).lock
flock -x -w 10 3

case "${1}" in
"setup")
setup_filter
Expand Down

0 comments on commit 225247d

Please sign in to comment.