From 6ee227675a4d0e694ee363055ef0a5ee84208bee Mon Sep 17 00:00:00 2001
From: hagen <hagen@mail.i2p>
Date: Fri, 4 Nov 2016 00:00:00 +0000
Subject: [PATCH] * DaemonLinux.cpp : resource limiting

---
 DaemonLinux.cpp | 34 ++++++++++++++++++++++++++++++++++
 1 file changed, 34 insertions(+)

diff --git a/DaemonLinux.cpp b/DaemonLinux.cpp
index 7d791bf2..392d28a3 100644
--- a/DaemonLinux.cpp
+++ b/DaemonLinux.cpp
@@ -8,6 +8,7 @@
 #include <unistd.h>
 #include <fcntl.h>
 #include <sys/stat.h>
+#include <sys/resource.h>
 
 #include "Config.h"
 #include "FS.h"
@@ -83,6 +84,39 @@ namespace i2p
 #endif
 			}
 
+			// set proc limits
+			struct rlimit limit;
+			uint16_t nfiles; i2p::config::GetOption("limits.openfiles", nfiles);
+			getrlimit(RLIMIT_NOFILE, &limit);
+			if (nfiles == 0) {
+				LogPrint(eLogInfo, "Daemon: using system limit in ", limit.rlim_cur, " max open files");
+			} else if (nfiles <= limit.rlim_max) {
+				limit.rlim_cur = nfiles;
+				if (setrlimit(RLIMIT_NOFILE, &limit) == 0) {
+					LogPrint(eLogInfo, "Daemon: set max number of open files to ",
+						nfiles, " (system limit is ", limit.rlim_max, ")");
+				} else {
+					LogPrint(eLogError, "Daemon: can't set max number of open files: ", strerror(errno));
+				}
+			} else {
+				LogPrint(eLogError, "Daemon: limits.openfiles exceeds system limit: ", limit.rlim_max);
+			}
+			uint32_t cfsize; i2p::config::GetOption("limits.coresize", cfsize);
+      cfsize *= 1024;
+			getrlimit(RLIMIT_CORE, &limit);
+			if (cfsize <= limit.rlim_max) {
+				limit.rlim_cur = cfsize;
+				if (setrlimit(RLIMIT_CORE, &limit) != 0) {
+					LogPrint(eLogError, "Daemon: can't set max size of coredump: ", strerror(errno));
+				} else if (cfsize == 0) {
+					LogPrint(eLogInfo, "Daemon: coredumps disabled");
+				} else {
+					LogPrint(eLogInfo, "Daemon: set max size of core files to ", cfsize / 1024, "Kb");
+				}
+			} else {
+				LogPrint(eLogError, "Daemon: limits.coresize exceeds system limit: ", limit.rlim_max);
+			}
+
 			// Pidfile
 			// this code is c-styled and a bit ugly, but we need fd for locking pidfile
 			std::string pidfile; i2p::config::GetOption("pidfile", pidfile);