Views:

To verify that there is a default task limit configured, run the followingcommand:

 $ systemctl status ds_agent | grep Tasks

Command

You should see the limit: 512 as default.

Workaround

To resolve the issue, we can set the limit to infinity and here are the steps:   

  1. Deploy Deep Security Agent WITHOUT security controls
  2. Create a file named `/etc/systemd/system/ds_agent.service.d/override.conf`
  3. Enter the content:
    [Service]
    TasksMax=infinity
    
  4. Apply the setting to Deep Security Agent by running the following commands: 
    			$ systemctl daemon-reload
    			$ systemctl restart ds_agent
    			$ systemctl status ds_agent
  5. Verify the changes have taken effect, run the following
    		$ systemctl status ds_agent | grep Tasks
    		

    Command

We should not observe any process number limitation on Deep Security Agent.

Here is a quick one liner to apply the same settings as above:

echo $'[Service]\nTasksMax=infinity' > /etc/systemd/system/ds_agent.service.d/override.conf && systemctl daemon-reload && systemctl restart ds_agent

We will soon provide the permanent fix in the future agent releases.