Linux Containers

On Tue 2011-10-18 (14:54), Papp Tamas wrote:

> Is it possible to limit the maximum number of processes per container?

I have the same problem. A user has killed the host (and therefore all
containers) with a simple shell command:  :(){ :|:& };:
(Kids, don't try this at home!)


-- 
Ullrich Horlacher              Server- und Arbeitsplatzsysteme
Rechenzentrum                  E-Mail: horlacher@...
Universitaet Stuttgart         Tel:    ++49-711-685-65868
Allmandring 30                 Fax:    ++49-711-682357
70550 Stuttgart (Germany)      WWW:    http://www.rus.uni-stuttgart.de/
REF: <4E9D7704.7000107@...>

On 10/18/2011 02:54 PM, Papp Tamas wrote:
> hi!
>
> Is it possible to limit the maximum number of processes per container?
>

Not yet but it is on the way.

http://lkml.indiana.edu/hypermail/linux/kernel/1109.0/01455.html

Hope the patchset will be merged soon in the kernel.

   -- Daniel

On 03/01/2012 06:49 PM, Ulli Horlacher wrote:
> On Tue 2011-10-18 (14:54), Papp Tamas wrote:
>
>> Is it possible to limit the maximum number of processes per container?
> I have the same problem. A user has killed the host (and therefore all
> containers) with a simple shell command:  :(){ :|:&  };:
> (Kids, don't try this at home!)

It seems that should be solved soon :)

The task counter cgroup should be merged.

Regards
   -- Daniel

On 03/05/2012 05:50 PM, Daniel Lezcano wrote:
> On 03/01/2012 06:49 PM, Ulli Horlacher wrote:
>> On Tue 2011-10-18 (14:54), Papp Tamas wrote:
>>
>>> Is it possible to limit the maximum number of processes per container?
>> I have the same problem. A user has killed the host (and therefore all
>> containers) with a simple shell command:  :(){ :|:&   };:
>> (Kids, don't try this at home!)
> It seems that should be solved soon :)
>
> The task counter cgroup should be merged.
>
>

I'm happy to see this, thank you:)

tamas

On Mon, Mar 05, 2012 at 05:50:10PM +0100, Daniel Lezcano wrote:
> On 03/01/2012 06:49 PM, Ulli Horlacher wrote:
> > On Tue 2011-10-18 (14:54), Papp Tamas wrote:
> >
> >> Is it possible to limit the maximum number of processes per container?
> > I have the same problem. A user has killed the host (and therefore all
> > containers) with a simple shell command:  :(){ :|:&  };:
> > (Kids, don't try this at home!)
> 
> It seems that should be solved soon :)
> 
> The task counter cgroup should be merged.
> 

++



-- 
über den grenzen muß die freiheit wohl wolkenlos sein