Limit the amount of processes about play-with-docker

[xetorthio]

That's a good idea. Where exactly we should set the ulimit?

On Sun, Oct 9, 2016, 10:37 Alex Ellis [email protected] wrote:

Just an idea - maybe limit the amount of processes?

/ # ulimit -p
524288

Could maybe do make a mess if someone fork bomb'd 5x524288 processes?

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub
#2, or mute the thread
https://github.com/notifications/unsubscribe-auth/AAIhp3nH9H8mp5k1L30pgfyCGWdHW17Jks5qyKetgaJpZM4KR8fh
.

[alexellis]

There's some data here:

https://devlearnings.wordpress.com/2014/08/22/limiting-fork-bomb-in-docker/

I think under the hood it's going to use a cgroup.

You may also want to lock down memory etc.

[alexellis]

PR - #4

Repro:

#!/bin/sh
lol(){
let "i=0"

while true
do
    let "i=i+1"

    echo "looping... $i"
    sleep 2 &
done
}

lol