1
cat > /usr/local/bin/set_container_quota.sh << 'EOF'
2
#!/bin/bash
3
# 为 Containerd 容器自动设置存储配额
4
# 用法：set_container_quota.sh <容器ID> <配额大小> [项目ID]
5

6
set -e
7

8
CONTAINER_ID="$1"
9
QUOTA_SIZE="$2"
10
PROJECT_ID="${3:-10001}"  # 默认为 10001
11

12
if [ -z "$CONTAINER_ID" ] || [ -z "$QUOTA_SIZE" ]; then
13
    echo "用法: $0 <容器ID> <配额大小> [项目ID]"
14
    echo "示例: $0 fc14a50da3d327cdf09a0161ddb85a3022e629180a4dc9ec512e10985ef678a6 1g 10001"
15
    exit 1
16
fi
17

18
# 查找容器的 upperdir
19
echo "正在查找容器 $CONTAINER_ID 的 upperdir..."
20
UPPERDIR=$(mount | grep overlay | grep "$CONTAINER_ID" | grep -o "upperdir=[^,]*" | cut -d= -f2)
21

22
if [ -z "$UPPERDIR" ]; then
23
    echo "错误: 找不到容器的 upperdir"
24
    exit 1
25
fi
26

27
echo "找到 upperdir: $UPPERDIR"
28

29
# 设置 project
30
echo "设置项目ID $PROJECT_ID 到目录..."
31
xfs_quota -x -c "project -s -p $UPPERDIR $PROJECT_ID" /var/lib/containerd
32

33
# 启用继承属性
34
echo "启用继承属性..."
35
xfs_io -c "chattr +P" "$UPPERDIR"
36

37
# 设置配额
38
echo "设置配额限制: $QUOTA_SIZE"
39
xfs_quota -x -c "limit -p bhard=${QUOTA_SIZE} $PROJECT_ID" /var/lib/containerd
40

41
# 验证
42
echo -e "\n验证设置:"
43
echo "1. 目录属性:"
44
lsattr -d "$UPPERDIR"
45

46
echo -e "\n2. 配额状态:"
47
xfs_quota -x -c "report -p -h" /var/lib/containerd | grep -A2 -B2 "#$PROJECT_ID"
48

49
echo -e "\n配额设置完成!"
50
EOF
51

52
chmod +x /usr/local/bin/set_container_quota.sh

1
cat > /usr/local/bin/monitor_container_quota.sh << 'EOF'
2
#!/bin/bash
3
# 简单版监控脚本，直接使用人类可读格式
4

5
PROJECT_ID="${1:-10001}"
6
INTERVAL="${2:-5}"
7

8
echo "监控项目 $PROJECT_ID 的配额使用情况 (Ctrl+C 退出)..."
9
echo "时间                已用          软限制      硬限制      状态"
10
echo "----------------------------------------------------------------"
11

12
while true; do
13
    TIMESTAMP=$(date '+%H:%M:%S')
14

15
    # 使用 -h 选项直接获取人类可读格式
16
    QUOTA_INFO=$(xfs_quota -x -c "report -p -h" /var/lib/containerd 2>/dev/null | grep "^#$PROJECT_ID")
17

18
    if [ -n "$QUOTA_INFO" ]; then
19
        # 直接输出人类可读的格式
20
        USED=$(echo "$QUOTA_INFO" | awk '{print $2}')
21
        SOFT=$(echo "$QUOTA_INFO" | awk '{print $3}')
22
        HARD=$(echo "$QUOTA_INFO" | awk '{print $4}')
23
        STATUS=$(echo "$QUOTA_INFO" | awk '{for(i=5;i<=NF;i++) printf $i" "; print ""}')
24

25
        printf "%-8s  %-12s  %-12s  %-12s  %s\n" "$TIMESTAMP" "$USED" "$SOFT" "$HARD" "$STATUS"
26
    else
27
        echo "$TIMESTAMP  未找到项目 $PROJECT_ID 的配额信息"
28
    fi
29

30
    sleep $INTERVAL
31
done
32
EOF
33
chmod +x /usr/local/bin/monitor_container_quota.sh

1
#!/bin/bash
2
# 基础配额测试脚本
3

4
TEST_DIR="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/13/fs"
5
PROJECT_ID=10001
6
QUOTA_LIMIT="1G"
7

8
echo "=== 开始配额测试 ==="
9
echo "测试目录: $TEST_DIR"
10
echo "项目ID: $PROJECT_ID"
11
echo "配额限制: $QUOTA_LIMIT"
12
echo
13

14
# 清理测试文件
15
cleanup() {
16
    echo "清理测试文件..."
17
    rm -f "$TEST_DIR"/test_*.dat 2>/dev/null
18
    xfs_quota -x -c "repquota -p" /var/lib/containerd
19
}
20
trap cleanup EXIT
21

22
# 初始状态
23
echo "1. 初始状态:"
24
xfs_quota -x -c "report -p -h" /var/lib/containerd | grep "#$PROJECT_ID"
25

26
# 测试1: 写入 600MB
27
echo -e "\n2. 写入 600MB 数据..."
28
dd if=/dev/zero of="$TEST_DIR/test1.dat" bs=1M count=600 2>/dev/null
29
echo "写入后状态:"
30
xfs_quota -x -c "report -p -h" /var/lib/containerd | grep "#$PROJECT_ID"
31

32
# 测试2: 尝试写入 500MB（应成功）
33
echo -e "\n3. 尝试写入 500MB 数据..."
34
dd if=/dev/zero of="$TEST_DIR/test2.dat" bs=1M count=500 2>&1 | tail -2
35
if [ $? -eq 0 ]; then
36
    echo "写入成功"
37
else
38
    echo "写入失败（预期内，达到配额限制）"
39
fi
40
echo "当前状态:"
41
xfs_quota -x -c "report -p -h" /var/lib/containerd | grep "#$PROJECT_ID"
42

43
# 测试3: 验证配额硬限制
44
echo -e "\n4. 验证硬限制..."
45
# 计算剩余空间
46
REMAINING=$(( 1024 - 600 ))  # 1G - 600M
47
if [ $REMAINING -gt 0 ]; then
48
    echo "尝试写入剩余 ${REMAINING}MB..."
49
    dd if=/dev/zero of="$TEST_DIR/test3.dat" bs=1M count=$REMAINING 2>&1 | tail -2
50
else
51
    echo "已达到配额限制"
52
fi
53

54
echo -e "\n5. 最终状态:"
55
xfs_quota -x -c "report -p -h" /var/lib/containerd | grep "#$PROJECT_ID"
56

57
echo -e "\n=== 测试完成 ==="

1
# 完整的诊断脚本
2
cat > /usr/local/bin/diagnose_quota.sh << 'EOF'
3
#!/bin/bash
4
echo "=== XFS Project Quota 诊断 ==="
5
echo
6

7
echo "1. 文件系统挂载信息:"
8
mount | grep containerd
9
echo
10

11
echo "2. 配额全局状态:"
12
xfs_quota -x -c "state" /var/lib/containerd
13
echo
14

15
echo "3. 所有项目配额:"
16
xfs_quota -x -c "report -p -h" /var/lib/containerd
17
echo
18

19
echo "4. 检查特定目录:"
20
if [ -n "$1" ]; then
21
    echo "检查目录: $1"
22
    lsattr -d "$1"
23
    echo
24
    xfs_quota -x -c "project -c $1" /var/lib/containerd
25
fi
26
EOF
27
chmod +x /usr/local/bin/diagnose_quota.sh

1
1 block = 512 bytes (默认)
2
1KB = 2 blocks
3
1MB = 2048 blocks
4
1GB = 2097152 blocks

1
/etc/fstab                    # 文件系统挂载配置
2
/etc/projects                # 项目ID映射（可选）
3
/etc/projid                  # 项目名称映射（可选）
4
/etc/containerd/config.toml  # Containerd 配置