From 38c287b8c43bb346110b35346d408a23c88c2890 Mon Sep 17 00:00:00 2001 From: Michael Kerrisk Date: Wed, 19 Feb 2020 21:38:34 +0100 Subject: [PATCH] cgroups.7: Update list of cgroups v2 controllers Update the list of cgroups v2 controllers (several controllers were missing). Signed-off-by: Michael Kerrisk --- man7/cgroups.7 | 27 +++++++++++++++++++++++++++ 1 file changed, 27 insertions(+) diff --git a/man7/cgroups.7 b/man7/cgroups.7 index d3bd4c3d7..eabfb71cb 100644 --- a/man7/cgroups.7 +++ b/man7/cgroups.7 @@ -654,12 +654,22 @@ and .I cpuacct controllers. .TP +.IR cpuset " (since Linux 5.0)" +This is the successor of the version 1 +.I cpuset +controller. +.TP .IR freezer " (since Linux 5.2)" .\" commit 76f969e8948d82e78e1bc4beb6b9465908e74873 This is the successor of the version 1 .I freezer controller. .TP +.IR hugetlb " (since Linux 5.6)" +This is the successor of the version 1 +.I hugetlb +controller. +.TP .IR io " (since Linux 4.5)" This is the successor of the version 1 .I blkio @@ -684,6 +694,23 @@ controller. This is the same as the version 1 .I rdma controller. +.PP +There is no direct equivalent of the +.I net_cls +and +.I net_prio +controllers from cgroups version 1. +Instead, support has been added to +.BR iptables (8) +to allow eBPF filters that hook on cgroup v2 pathnames to make decisions +about network traffic on a per-cgroup basis. +.PP +The v2 +.I devices +controller provides no interface files; +instead, device control is gated by attaching an eBPF +.RB ( BPF_CGROUP_DEVICE ) +program to a v2 cgroup. .\" .SS Cgroups v2 subtree control Each cgroup in the v2 hierarchy contains the following two files: