To verify that there is a default task limit configured, run the followingcommand:
$ systemctl status ds_agent | grep Tasks
You should see the limit: 512 as default.
Workaround
To resolve the issue, we can set the limit to infinity and here are the steps:
- Deploy Deep Security Agent WITHOUT security controls
- Create a file named `/etc/systemd/system/ds_agent.service.d/override.conf`
- Enter the content:
[Service] TasksMax=infinity
- Apply the setting to Deep Security Agent by running the following commands:
$ systemctl daemon-reload $ systemctl restart ds_agent $ systemctl status ds_agent
- Verify the changes have taken effect, run the following
$ systemctl status ds_agent | grep Tasks
We should not observe any process number limitation on Deep Security Agent.
Here is a quick one liner to apply the same settings as above:
echo $'[Service]\nTasksMax=infinity' > /etc/systemd/system/ds_agent.service.d/override.conf && systemctl daemon-reload && systemctl restart ds_agent
We will soon provide the permanent fix in the future agent releases.