kill all processes in container with shared PID Ns before destory

Signed-off-by: lifubang <lifubang@acmcoder.com>
opencontainers · Oct 2, 2023 · e17f88c · e17f88c
1 parent ccfd894
commit e17f88c
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/libcontainer/state_linux.go b/libcontainer/state_linux.go
@@ -35,6 +35,11 @@ type containerState interface {
 }
 
 func destroy(c *Container) error {
+	if !c.config.Namespaces.IsPrivate(configs.NEWPID) && c.cgroupManager.Exists() {
+		if err := signalAllProcesses(c.cgroupManager, unix.SIGKILL); err != nil {
+			return err
+		}
+	}
 	err := c.cgroupManager.Destroy()
 	if c.intelRdtManager != nil {
 		if ierr := c.intelRdtManager.Destroy(); err == nil {