From owner-freebsd-current@FreeBSD.ORG Mon Oct 5 19:00:14 2009 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id A6D1B10656C6 for ; Mon, 5 Oct 2009 19:00:14 +0000 (UTC) (envelope-from tom@tomjudge.com) Received: from tomjudge.vm.bytemark.co.uk (tomjudge.vm.bytemark.co.uk [80.68.91.100]) by mx1.freebsd.org (Postfix) with ESMTP id 680D98FC0A for ; Mon, 5 Oct 2009 19:00:14 +0000 (UTC) Received: from localhost (localhost.localdomain [127.0.0.1]) by tomjudge.vm.bytemark.co.uk (Postfix) with ESMTP id 27881489C9; Mon, 5 Oct 2009 20:00:13 +0100 (BST) X-Virus-Scanned: Debian amavisd-new at tomjudge.vm.bytemark.co.uk Received: from tomjudge.vm.bytemark.co.uk ([127.0.0.1]) by localhost (tomjudge.vm.bytemark.co.uk [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vaxSpm1Cn6nD; Mon, 5 Oct 2009 20:00:08 +0100 (BST) Received: from rita.nodomain (unknown [192.168.205.6]) by tomjudge.vm.bytemark.co.uk (Postfix) with ESMTP id A69A4489C7; Mon, 5 Oct 2009 20:00:07 +0100 (BST) Message-ID: <4ACA4216.9060008@tomjudge.com> Date: Mon, 05 Oct 2009 18:59:34 +0000 From: Tom Judge User-Agent: Thunderbird 2.0.0.23 (X11/20090822) MIME-Version: 1.0 To: Adam Vande More References: <4ACA0549.7030404@tomjudge.com> <4ACA2E0F.5010800@elischer.org> <4ACA3146.9090402@tomjudge.com> <6201873e0910051142q58e7563fqc7735261ea9ab3c6@mail.gmail.com> In-Reply-To: <6201873e0910051142q58e7563fqc7735261ea9ab3c6@mail.gmail.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: freebsd-current@freebsd.org Subject: Re: Per Jail Memory Limits X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Oct 2009 19:00:14 -0000 Adam Vande More wrote: > On Mon, Oct 5, 2009 at 12:47 PM, Tom Judge > wrote: > > Julian Elischer wrote: > > Tom Judge wrote: > > Hi, > > Does anyone know of a patch that will add per jail memory > limits so that a jail can't swallow the resources of the > entire box? > > > Thanks > > Tom > _______________________________________________ > freebsd-current@freebsd.org > mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-current > To unsubscribe, send any mail to > "freebsd-current-unsubscribe@freebsd.org > " > > > > not yet.. > > > I started to port this to 7.1 today: > > http://wiki.freebsd.org/JailResourceLimits > > > What are the peoples opinions on this patch? > > > Tom > > > If you're soliciting opinions if this will be used and is needed, I > would love to see this functionality. This is the main reason I've > had to chose XEN over jails. If you need some help testing, let me know. > > -- > Adam Vande More Hi Adam, I have a patch against 7.1 here: http://svn.tomjudge.com/freebsd/patches/jail-resource-limits/jail-limits.patch I will try to bring the patch up to current when I get a chance but I have no real need to do this as we use 7.1 in production. Notes: * CPU limiting is not support is not supported unless you use shecd_4bsd. * I have not tested this on any system yet, just compile tested, I am putting it though its paces right now. Tom