Thankyou, that worked a charm ... I'll add that to my documents on setting up squid (along with the tip of setting setuid on pinger) :)
On 12 June 2013 11:51, Jim Klimov <[email protected]> wrote: > See below.... > > > On 2013-06-12 12:06, Jonathan Adams wrote: > >> On Tuesday I had a Solaris 10 box with a hand-compiled Squid on it that >> came up with the message "WARNING! Your cache is running out of >> filedescriptors". >> >> on that machine I just ran "projmod -s -K >> 'process.max-file-descriptor=(**basic,4096,deny)' user.root", logged off >> and and and then restarted squid using my /etc/init.d script, which >> fixed the problem (checked using "prctl -P") >> >> Today I have the same problem on an Illumos box, with Squid running as a >> service. >> >> to make matters more interesting the squid on Illumos is running in a >> zone. >> >> no matter what I try (in global or local zones) changes to the root user >> in /etc/project do not change the max file handles for the squid >> process, although they do change it for the "root" user. >> > > You can try associating the project with the service (instance), i.e. > in the XML form of the manifest: > > ==== > <exec_method > type='method' > name='start' > exec='/path/to/method start' > timeout_seconds='0' > > <method_context > project='projectname' > > <method_credential > user='someuser' /> > </method_context> > </exec_method> > ==== > > Also, the SMF FAQ on the now-defunct hub.opensolaris.org included this > piece of knowledge for command-line configuration of such association: > > ===== > > Specify all required properties directly. In this example, we're trying to > have the smtp:sendmail service start in the sendmail(1M) project. > > First, check if the property you're trying to set is already defined for > the service: > # svcprop -p start/project <FMRI> > > If this property is set to a value (like :default), do the following to > change the project: > # svccfg -s <fmri> setprop start/project = sendmail > # svcadm refresh sendmail; svcadm restart sendmail > > If it isn't set, specify all required properties. > # svccfg -s sendmail setprop start/project = astring: sendmail > # svccfg -s sendmail setprop start/user = astring: root > # svccfg -s sendmail setprop start/group = astring: :default > # svccfg -s sendmail setprop start/working_directory = astring: :default > # svccfg -s sendmail setprop start/resource_pool = astring: :default > # svccfg -s sendmail setprop start/supp_groups = astring: :default > # svccfg -s sendmail setprop start/privileges = astring: :default > # svccfg -s sendmail setprop start/limit_privileges = astring: :default > # svccfg -s sendmail setprop start/use_profile = boolean: false > # svcadm refresh sendmail; svcadm restart sendmail > > ==== > > There's a copy of the SMF(5) FAQ here: > http://web.archive.org/web/**20130318055639/http://hub.** > opensolaris.org/bin/view/**Community+Group+smf/faq<http://web.archive.org/web/20130318055639/http://hub.opensolaris.org/bin/view/Community+Group+smf/faq> > > HTH, > //Jim > ------------------------------------------- illumos-discuss Archives: https://www.listbox.com/member/archive/182180/=now RSS Feed: https://www.listbox.com/member/archive/rss/182180/21175430-2e6923be Modify Your Subscription: https://www.listbox.com/member/?member_id=21175430&id_secret=21175430-6a77cda4 Powered by Listbox: http://www.listbox.com
