You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This issue is to improve the resource limiting API by removing the process helper CLI or using another library to limit host resources.
An "external" process may not be needed and hopefully can find a way around this.
Tasks:
test if limiting behavior can be accomplished in same process
create new issue to try limiting using cgroups instead of rlimits (see containerd/cgroups)
Related Background
The prlimit/setrlimit mechanism being used will apply limits on the process if the user is not root and these limits will be for that user. Will need to manually test this implementation, this is possibly sufficient for now but using separate non-root users for each process is needed next.
prlimit --nproc a.k.a. RLIMIT_NPROC a.k.a. ulimit -u is the maximum number of processes¹ for the user as a whole. If you already have 20 processes running, and you set the limit to 20, you can't create any new process. What matters is how many processes are running as your user, it doesn't matter who their parent is or what their limit setting is.
[source]
See notes in this issue for more details: #42 (comment)
This issue is to improve the resource limiting API by removing the
process
helper CLI or using another library to limit host resources.An "external" process may not be needed and hopefully can find a way around this.
Tasks:
Related Background
The
prlimit
/setrlimit
mechanism being used will apply limits on the process if the user is not root and these limits will be for that user. Will need to manually test this implementation, this is possibly sufficient for now but using separate non-root users for each process is needed next.See notes in this issue for more details: #42 (comment)
Originally posted by @camerondurham in #38 (comment)
The text was updated successfully, but these errors were encountered: