dank
183a6d5442
A Plex section scan walked 50k files at ~850 r/s and nothing bounded it. `IOWeight=` in a quadlet looks like the fix and does nothing: systemd delegates `cpu memory pids` to user@.service and NOT io, and it drops a resource line it cannot honour without a word — the container boots healthy and its cgroup has no io.weight file at all. Same family as RequiresMountsFor= (inert in the user manager) and ConditionPathIsMountPoint= (fail-dead). Place the two system drop-ins that make the controller reachable (user.slice IOAccounting=yes puts io in user.slice/cgroup.subtree_control, measured immediately; user@1000.service DelegateControllers gains io and lands at the next reboot, because restarting the user manager would kill every rootless container on the host), then ask for the share: IOWeight=10 on jellyfin and plex. 10 is a convention, not a measured optimum — proportional share, only bites under contention, only requirement is far below the default 100. ensure_user_io_delegate places both from git and prints NOTE: io is not delegated … inert until the next reboot, so the quadlet line never reads as live config. Verified on the host: subtree_control flipped to `cpu io memory pids`, the drop-in is attached and parsed (systemctl cat), and the podman 5.7 generator emits IOWeight=10 for both units (bare key; UnitConfigItem= not needed). Two limits recorded instead of hidden: a container's weight covers its whole cgroup (scan and playback share it), and the comparison happens inside user.slice, so it cannot push a rootless unit below a root unit such as frank-archon — that pairing is user.slice's own weight, a separate call. Docs: Quadlet Lifecycle 4b (the three-command read of the chain), Pi-hole (all rootless containers share one 10.0.2.100, so one chatty container throttles DNS for the host — 8 events today), E2E Suite gotcha 7 (the gate depends on the runner's resolver: 21 reds on a lost wired link, 37/37 minutes later). Seam: an in-repo IOWeight= may only exist when both drop-ins exist AND the deployer places them. ./tests/run.sh: 789 ok, exit 0.
37 lines
1.5 KiB
INI
37 lines
1.5 KiB
INI
[Unit]
|
|
Description=Plex Media Server (quadlet, rootless fleet identity)
|
|
After=network-online.target
|
|
Wants=network-online.target
|
|
|
|
[Container]
|
|
Image=lscr.io/linuxserver/plex:1.43.5.11079-b3b13e506-ls330@sha256:01a53d9c7adcbb3701fbb0a4230c0a37c85453759b6b05a67356c3c7a09de08d
|
|
ContainerName=plex
|
|
Network=dankserver_appnet:alias=plex
|
|
Environment=PUID=0
|
|
Environment=PGID=0
|
|
Environment=TZ=America/Los_Angeles
|
|
Volume=/var/lib/plexmediaserver:/config
|
|
# The container path stays /mnt/entropy on purpose: every path Plex recorded in
|
|
# its own database is written against it, so swapping the HOST source of this bind
|
|
# to the overlay view re-points Plex at the sidecars without touching its DB.
|
|
# Read-only: Plex consumes the NFO files Jellyfin writes and writes no metadata.
|
|
Volume=/var/lib/media-meta/view:/mnt/entropy:ro
|
|
PublishPort=32400:32400
|
|
|
|
[Service]
|
|
# Refuse to start until the bind source is a real mount: Plex blind is how paths
|
|
# get marked missing in its own database. Both the view and the array under it
|
|
# must answer — scripts/wait-for-mount.sh names the 2026-10-31 incident.
|
|
ExecStartPre=/home/dank/serverAppConfigs/scripts/wait-for-mount.sh /var/lib/media-meta/view /mnt/entropy
|
|
Restart=always
|
|
RestartSec=5
|
|
|
|
# See the jellyfin unit for the reasoning: a section scan gets a LOW weight
|
|
# (default 100) so a walk of 50k files loses the array to playback and to every
|
|
# other container under this user. Inert until user@1000.service holds the io
|
|
# controller ([[Quadlet Lifecycle]]).
|
|
IOWeight=10
|
|
|
|
[Install]
|
|
WantedBy=default.target
|