[lxc-devel] process number limit

2013-05-12 Thread Robert Gierzinger
Hi, I was playing around with lxc for some time now. I used (all amd64 based) Ubuntu 12.04 with the shipped kernel 3.2.0 and the backported 3.5.0 and the lxc 0.7.5. However, I also tried a vanilla 3.9.2 kernel with the lxc-daily 0.9.0; So far this stuff is quite cool, but I have some considerati

Re: [lxc-devel] process number limit

2013-05-20 Thread Robert Gierzinger
Hi, >> Is there anything planned to restrict exhaustive process generation in a >> guest or any other means to defend against fork bombs? > In recent kernels (such as 3.9.x) you have > `memory.kmem.limit_in_bytes` which could be use for that purpose. > see > https://git.kernel.org/cgit/linux/kerne