1、增加内存限制

roles/app_global/tasks/main.yml

@@ -25,9 +25,12 @@
     name: emqx.service
     state: started
     enabled: yes
+    daemon_reload: yes
+    
 
 - name: "Start app-sketch-global"
   systemd:
     name: app-sketch-global.service
     state: started
     enabled: yes
+    daemon_reload: yes

roles/certstore/files/memory.conf

@@ -0,0 +1,2 @@
+[Service]
+MemoryMax=10G

roles/certstore/tasks/main.yml

@@ -23,6 +23,12 @@
     src: "{{ role_path }}/templates/zlog.conf.j2"
     dest: /opt/tsg/certstore/conf/zlog.conf
 
+- name: "copy memory limit file to certstore.service.d"
+  copy:
+    src: "{{ role_path }}/files/memory.conf"
+    dest: /etc/systemd/system/certstore.service.d/
+    mode: 0644
+
 - name: "start certstore"
   systemd:
     name: certstore.service

roles/mrzcpd/files/memory.conf

@@ -0,0 +1,2 @@
+[Service]
+MemoryMax=100G

roles/mrzcpd/tasks/main.yml

@@ -111,7 +111,7 @@
     dest: /opt/mrzcpd/etc/mrtunnat.conf
   when: 
     - nic_traffic_mirror is not defined
-    -  == 3
+    - tsg_access_type == 3
 
 - name: "update mrtunnat.conf.ATCA_Vlan_Flipping"
   template:
@@ -161,12 +161,18 @@
     daemon_reload: yes
   when: nic_traffic_mirror is defined
 
+- name: "copy memory limit file to tfe.service.d"
+  copy:
+    src: "{{ role_path }}/files/memory.conf"
+    dest: /etc/systemd/system/mrzcpd.service.d/
+    mode: 0644
 
 - name: "mask mrzcpd on server_tun_mode"
   systemd:
     name: mrzcpd
     enabled: no
     masked: yes
+    daemon_reload: yes
   when: 
     - tsg_access_type == 0
 
@@ -175,5 +181,6 @@
     name: mrtunnat
     enabled: no
     masked: yes
+    daemon_reload: yes
   when: 
     - tsg_access_type == 0

roles/proxy_status/tasks/main.yml

@@ -14,7 +14,7 @@
   copy:
     src: "{{ role_path }}/files/proxy-status.service"
     dest: "/usr/lib/systemd/system/"   
-    mode: 0755  
+    mode: 0644
 
 - name: "enable proxy-status"
   systemd:

roles/sapp/files/memory.conf

@@ -0,0 +1,2 @@
+[Service]
+MemoryMax=100G

roles/sapp/tasks/main.yml

@@ -51,7 +51,13 @@
   template:
     src: "{{ role_path }}/templates/sapp.service.j2"
     dest: /usr/lib/systemd/system/sapp.service
-    mode: 0755
+    mode: 0644
+
+- name: "copy memory limit file to sapp.service.d"
+  copy:
+    src: "{{ role_path }}/files/memory.conf"
+    dest: /etc/systemd/system/sapp.service.d/
+    mode: 0644
 
 - name: "enable sapp"
   systemd:

roles/tfe/files/memory.conf

@@ -0,0 +1,2 @@
+[Service]
+MemoryMax=100G

roles/tfe/tasks/main.yml

@@ -8,7 +8,7 @@
   copy:
     src: "{{ role_path }}/files/tfe.service"
     dest: /usr/lib/systemd/system/
-    mode: 0755
+    mode: 0644
  
 - name: "install tfe rpms from localhost"
   yum:
@@ -63,6 +63,12 @@
     src: "{{ role_path }}/templates/require-mrzcpd.conf.j2"
     dest: /etc/systemd/system/tfe.service.d/require-mrzcpd.conf
 
+- name: "copy memory limit file to tfe.service.d"
+  copy:
+    src: "{{ role_path }}/files/memory.conf"
+    dest: /etc/systemd/system/tfe.service.d/
+    mode: 0644
+
 - name: "enable tfe-env"
   systemd:
     name: tfe-env

roles/tsg-diagnose/files/memory.conf

@@ -0,0 +1,2 @@
+[Service]
+MemoryMax=100G

roles/tsg-diagnose/tasks/main.yml

@@ -28,6 +28,12 @@
 - name: "tsg-diagnose init certs"
   shell: /bin/sh /opt/tsg/tsg-diagnose/deploy/init_certs/init_badssl_certs.sh
 
+- name: "copy memory limit file to tsg-diagnose.service.d"
+  copy:
+    src: "{{ role_path }}/files/memory.conf"
+    dest: /etc/systemd/system/tsg-diagnose.service.d/
+    mode: 0644
+
 - name: 'Tsg-diagnose service start'
   systemd:
     name: tsg-diagnose