kill all processes in the container with shared/hosted PID Ns before …

…destory Signed-off-by: lifubang <lifubang@acmcoder.com>
opencontainers · Oct 2, 2023 · f5e1a7d · f5e1a7d
1 parent 3ffcce8
commit f5e1a7d
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/libcontainer/state_linux.go b/libcontainer/state_linux.go
@@ -35,6 +35,11 @@ type containerState interface {
 }
 
 func destroy(c *Container) error {
+	if !c.config.Namespaces.IsPrivate(configs.NEWPID) && c.cgroupManager.Exists() {
+		if err := signalAllProcesses(c.cgroupManager, unix.SIGKILL); err != nil {
+			return err
+		}
+	}
 	err := c.cgroupManager.Destroy()
 	if c.intelRdtManager != nil {
 		if ierr := c.intelRdtManager.Destroy(); err == nil {