xenial (1) cgm.1.gz

NAME

       cgm - a client script for cgmanager

DESCRIPTION

       cgm  is  a client script to simplify making requests of the cgroup manager.  It simply calls dbus-send to
       send requests to the running cgmanager or cgproxy.

       Usage:

       cgm ping

       cgm create <controller> <cgroup>

       cgm chown <controller> <cgroup> uid gid

       cgm chmod <controller> <cgroup> mode

       cgm chmodfile <controller> <cgroup> file mode

       cgm remove <controller> <cgroup> [0|1]

       cgm getpidcgroup <controller> pid

       cgm getpidcgroupabs <controller> pid

       cgm movepid <controller> <cgroup> pid

       cgm movepidabs <controller> <cgroup> pid

       cgm getvalue <controller> <cgroup> file

       cgm setvalue <controller> <cgroup> file value

       cgm gettasks <controller> <cgroup>

       cgm gettasksrecursive <controller> <cgroup>

       cgm listchildren <controller> <cgroup>

       cgm removeonempty <controller> <cgroup>

       cgm prune <controller> <cgroup>

       cgm listcontrollers

       cgm listkeys <controller> <cgroup>

       cgm apiversion

              Replace '<controller>' with the desired controller, i.e.  memory, and '<cgroup>' with the  desired
              cgroup,  i.e. x1.  For create, chown, chmod, remove, prune, remove_on_empty, gettasksrecursive and
              movepid, <controller> may be "all" or a comma-separated set of  cgroups.   Remove  by  default  is
              recursive, but adding '0' as the last argument will perforn non-recursive deletion.  Adding '1' is
              supported for legacy reasons.

              To refer to the current cgroup, use ''.

NOTES

       In order to protect the host from root in containers, cgmanager locks prevents tasks  from  administering
       cgroups  which are not under their own.  The exceptions are that root in a container may escape up to the
       cgroup of its cgproxy, and root on the host may escape to the root cgroup.

       This means that a user in freezer cgroup /foo cannot list cgroups in /.  However,  as  root  he  can  use
       movepidabs to escape to /, then list cgroups in /.

EXAMPLES

       To create a new cgroup called foo and move your shell into it, you could do:

       sudo cgm create all foo
       sudo cgm chown all foo $(id -u) $(id -g)
       cgm movepid all foo $$

       Then to freeze that cgroup,

       cgm setvalue freezer foo freezer.state FROZEN

SEE ALSO

       cgmanager(8)