Fedora Silverblue cgroup limits exceeded (Podman)


I’ve been using podman to compile a large project, and got stopped with an error
[0.013s][warning][os,thread] Failed to start thread - pthread_create failed (EAGAIN) for attributes: stacksize: 1024k, guardsize: 4k, detached.

Upon looking into this issue, I looked at dmesg and observed

[ 231.332272] cgroup: fork rejected by pids controller in /user.slice/user-1000.slice/user@1000.service/user.slice/libpod-7bb344179aa2983359f46d0474542c9d84e5253bbceaa98bd7a7b538bcd2abc1.scope/container

I believe I’m hitting the cgroup pid limit, however due to Silverblue /usr is read only, I can’t simply edit the systemd files and remove the limit.

If anyone can help that would be greatly appreciated

Anyone know if it’s possible to replace systemd service files in /usr?

You should be able to edit the service with (i.e., with service foo):

systemctl edit foo.service

It will create a new file at /etc/systemd/system/foo.service.d/override.conf that will overwrite the default one.

Not sure if this will be useful to change the cgroup’s limit, but I hope it helps.

Thanks Juanje!

Thank you, I ended up solving this by adding --pids-limit=999999

Not sure why but it’s set to 2048 by defualt, with a 16C/32T CPU this isn’t large enough

1 Like