Ubuntu /etc/security/limits.conf 不生效问题

青旅半醒 2022-01-15 16:35 218阅读 0赞

# [Ubuntu /etc/security/limits.conf 不生效问题][Ubuntu _etc_security_limits.conf] #

# 一、问题描述 #

修改 /etc/security/limits.conf ，重启之后不生效

内容如下：

* soft nofile 2048576
    * hard nofile 2048576
    root soft nofile 2048576
    root hard nofile 2048576
    * soft nproc 80480
    * hard nproc 80960
    root soft nproc 80480
    root hard nproc 80960

# 二、解决问题 #

根据网上资料的说法有几种

## 1. 修改 /etc/ssh/sshd\_config ##

开启这2项

UsePAM yes
    UseLogin yes

## 2. 以下几个文件 ##

/etc/pam.d/login
    /etc/pam.d/su
    /etc/pam.d/sshd

确保开启了pam\_limits.so

session    required   pam_limits.so

## 3. 重启系统 ##

注意：修改了/etc/security/limits.conf ，必须要重启，才能生效。

**以上几个，都测试了一下，open files没有生效！max user processes倒是生效了**

root@ubuntu:~# ulimit -a
    core file size          (blocks, -c) 0
    data seg size           (kbytes, -d) unlimited
    scheduling priority             (-e) 0
    file size               (blocks, -f) unlimited
    pending signals                 (-i) 7832
    max locked memory       (kbytes, -l) 64
    max memory size         (kbytes, -m) unlimited
    open files                      (-n) 1024
    pipe size            (512 bytes, -p) 8
    POSIX message queues     (bytes, -q) 819200
    real-time priority              (-r) 0
    stack size              (kbytes, -s) 8192
    cpu time               (seconds, -t) unlimited
    max user processes              (-u) 80480
    virtual memory          (kbytes, -v) unlimited
    file locks                      (-x) unlimited

最后终于找到原因了，是因为 soft nofile 设置的值过大，导致还原为默认值 1024

重新修改 /etc/security/limits.conf

* soft nofile 1000000
    * hard nofile 1000000
    root soft nofile 1000000
    root hard nofile 1000000
    * soft nproc 80480
    * hard nproc 80960
    root soft nproc 80480
    root hard nproc 80960

再次重启，效果如下：

root@ubuntu:~# ulimit -a
    core file size          (blocks, -c) 0
    data seg size           (kbytes, -d) unlimited
    scheduling priority             (-e) 0
    file size               (blocks, -f) unlimited
    pending signals                 (-i) 31392
    max locked memory       (kbytes, -l) 64
    max memory size         (kbytes, -m) unlimited
    open files                      (-n) 1000000
    pipe size            (512 bytes, -p) 8
    POSIX message queues     (bytes, -q) 819200
    real-time priority              (-r) 0
    stack size              (kbytes, -s) 8192
    cpu time               (seconds, -t) unlimited
    max user processes              (-u) 80480
    virtual memory          (kbytes, -v) unlimited
    file locks                      (-x) unlimited

本文参考链接：

[https://blog.51cto.com/jonyisme/1919075][https_blog.51cto.com_jonyisme_1919075]

posted @ 2019-06-12 12:02 [肖祥][Link 1] 阅读( ...) 评论( ...) [编辑][Link 2] 收藏

[Ubuntu _etc_security_limits.conf]: https://www.cnblogs.com/xiao987334176/p/11008812.html
[https_blog.51cto.com_jonyisme_1919075]: https://blog.51cto.com/jonyisme/1919075
[Link 1]: https://www.cnblogs.com/xiao987334176/
[Link 2]: https://i.cnblogs.com/EditPosts.aspx?postid=11008812