What is equivalent podman run --memory 2G in podman-sysmted.unit?

[akihiro]

I try run elasticsearch on podman by quadlet.

[Container]
Image=docker.elastic.co/elasticsearch/elasticsearch:8.11.1
Network=host
Volume=/srv/elasticsearch/data:/usr/share/elasticsearch/data:rw
Volume=/srv/elasticsearch/elasticsearch.yml:/usr/share/elasticsearch/config/elasticsearch.yml:ro
Memory=1g
Ulimit=lock=-1:-1
Ulimit=nofile=65535:65535
Ulimit=nproc=4096:4096
Environment=node.name=es0
Environment=cluster.name=docker-cluster
Environment=cluster.initial_master_nodes=es0,es1,es2
Environment=discovery.seed_hosts=es0,es1,es2
Environment=bootstrap.memory_lock=true
Environment=xpack.security.enabled=false
Environment=ingest.geoip.downloader.enabled=false

but Memory parameter in contaienr file is not accepted.

Dec 07 18:57:23 es0 quadlet-generator[69077]: converting "elasticsearch.container": unsupported key 'Memory' in group 'Container' in /etc/containers/systemd/elasticsearch.container

Missing memory option in https://docs.podman.io/en/v4.8.1/markdown/podman-systemd.unit.5.html

[rhatdan]

Can you put the Memory flag under the [Service] section instead of Container. Systemd constraints apply the the service as well as the Container section. When it comes to Cgroups it is probably better to set it at the systemd level rather then at the container level

[akihiro]

Thank you, I did it!.

I use sysmted configuraton MemoryMax= and TasksMax= in systemd manual

[Service]
MemoryMax=2.5G
LimitMEMLOCK=0
LimitNOFILE=65535
TasksMax=4096

[Container]
Image=docker.elastic.co/elasticsearch/elasticsearch:8.11.1
Network=host
Volume=/srv/elasticsearch/data:/usr/share/elasticsearch/data:rw
Volume=/srv/elasticsearch/elasticsearch.yml:/usr/share/elasticsearch/config/elasticsearch.yml:ro
Environment=node.name=es0
Environment=cluster.name=docker-cluster
Environment=cluster.initial_master_nodes=es0,es1,es2
Environment=discovery.seed_hosts=es0,es1,es2
Environment=bootstrap.memory_lock=true
Environment=xpack.security.enabled=false
Environment=ingest.geoip.downloader.enabled=false