Date: Mon, 5 Oct 2009 22:02:13 +0300 From: Kostik Belousov <kostikbel@gmail.com> To: Tom Judge <tom@tomjudge.com> Cc: freebsd-current@freebsd.org, Julian Elischer <julian@elischer.org> Subject: Re: Per Jail Memory Limits Message-ID: <20091005190213.GV2259@deviant.kiev.zoral.com.ua> In-Reply-To: <4ACA3146.9090402@tomjudge.com> References: <4ACA0549.7030404@tomjudge.com> <4ACA2E0F.5010800@elischer.org> <4ACA3146.9090402@tomjudge.com>
next in thread | previous in thread | raw e-mail | index | archive | help
--r+TdwuXy+OXS8TUs Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, Oct 05, 2009 at 05:47:50PM +0000, Tom Judge wrote: > Julian Elischer wrote: > >Tom Judge wrote: > >>Hi, > >> > >>Does anyone know of a patch that will add per jail memory limits so=20 > >>that a jail can't swallow the resources of the entire box? > >> > >> > >>Thanks > >> > >>Tom > >>_______________________________________________ > >>freebsd-current@freebsd.org mailing list > >>http://lists.freebsd.org/mailman/listinfo/freebsd-current > >>To unsubscribe, send any mail to=20 > >>"freebsd-current-unsubscribe@freebsd.org" > > > > > >not yet.. > > >=20 > I started to port this to 7.1 today: >=20 > http://wiki.freebsd.org/JailResourceLimits >=20 >=20 > What are the peoples opinions on this patch? Since r194766, we have precise accounting for the anonymous memory, both globally and per-uid. If current jails infrastructure allows to set per-jail limits (and I suspect that it is), then you should just match these two facilities. The seemingly problematic thing is processes changing their jails. It can be done similar to how the uid accounting is done currently, by remembering which jail was charged in corresponding vm map entry and object. --r+TdwuXy+OXS8TUs Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (FreeBSD) iEYEARECAAYFAkrKQrQACgkQC3+MBN1Mb4jzcwCeP/t+PM0oHHSpULzh8sAJxJ51 9PYAmwenDGcBWDinZcZ2nU2v8kRtKsZ2 =kyp7 -----END PGP SIGNATURE----- --r+TdwuXy+OXS8TUs--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20091005190213.GV2259>