策略验证安装包增加内存限制(60G)

策略验证默认日志等级修改为FATAl
策略验证修改CI构建安装包名称

.gitlab-ci.yml

@@ -87,11 +87,11 @@ release_build_release:
   only:
     - tags
 
-release_build_release_devel:
+release_build_debug:
   stage: build
   variables:
+    BUILD_TYPE: Debug
     BUILD_TYPE: RelWithDebInfo
-    ENABLE_DEVEL_SWITCH: "ON"
     PACKAGE: 1
     UPLOAD: 1
     SYMBOL_TARGET: verify-policy
@@ -99,7 +99,7 @@ release_build_release_devel:
     PULP3_DIST_NAME: tsg-stable-x86_64.el7
   extends: .build_by_travis
   artifacts:
-    name: "verify-policy-$CI_COMMIT_REF_NAME-release"
+    name: "verify-policy-$CI_COMMIT_REF_NAME-debug"
     paths:
       - build/*.rpm
   only:

cmake/Package.cmake

@@ -31,6 +31,7 @@ install(DIRECTORY ./resource DESTINATION ${CMAKE_INSTALL_PREFIX}/)
 
 install(FILES script/service/verify-policy.service DESTINATION /usr/lib/systemd/system/)
 install(FILES script/tmpfiles/verify_policy.conf DESTINATION /usr/lib/tmpfiles.d/)
+install(FILES script/service/service_override_memsw_limit.conf DESTINATION /usr/lib/systemd/system/verify-policy.service.d/)
 
 # Must uninstall the debug package before install release package
 if(CMAKE_BUILD_TYPE STREQUAL "Debug")

conf/zlog.conf

@@ -1,3 +1,5 @@
+# kill -s SIGHUP "pid"
+
 [global]
 default format = "%d(%c), %V, %F, %U, %m%n"
 [levels]
@@ -6,6 +8,6 @@ INFO=20
 FATAL=30
 [rules]
 *.fatal        "./logs/error.log.%d(%F)";
-*.debug        "./logs/verify_policy.log.%d(%F)"
+!*.debug        "./logs/verify_policy.log.%d(%F)"
 !*.info        "./logs/verify_policy.log.%d(%F)"
 

script/service/service_override_memsw_limit.conf

@@ -0,0 +1,4 @@
+[Service]
+MemoryLimit=60G
+ExecStartPost=/bin/bash -c "echo 60G > /sys/fs/cgroup/memory/system.slice/verify-policy.service/memory.memsw.limit_in_bytes"
+