kill all processes in container without private ps ns before destory

Signed-off-by: lifubang <[email protected]>
opencontainers · Oct 2, 2023 · ee898ab · ee898ab
1 parent c30faf4
commit ee898ab
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/libcontainer/state_linux.go b/libcontainer/state_linux.go
@@ -35,6 +35,11 @@ type containerState interface {
 }
 
 func destroy(c *Container) error {
+	if !c.config.Namespaces.IsPrivate(configs.NEWPID) && c.cgroupManager.Exists() {
+		if err := signalAllProcesses(c.cgroupManager, unix.SIGKILL); err != nil {
+			return err
+		}
+	}
 	err := c.cgroupManager.Destroy()
 	if c.intelRdtManager != nil {
 		if ierr := c.intelRdtManager.Destroy(); err == nil {