On 22/04/14 21:05, Richard Davies wrote:

Dwight Engen wrote:

quoted

Richard Davies wrote:

quoted

Vladimir Davydov wrote:

quoted

In short, kmem limiting for memory cgroups is currently broken. Do
not use it. We are working on making it usable though.

...

quoted

quoted

What is the best mechanism available today, until kmem limits mature?

RLIMIT_NPROC exists but is per-user, not per-container.

Perhaps there is an up-to-date task counter patchset or similar?

I updated Frederic's task counter patches and included Max Kellermann's
fork limiter here:

http://thread.gmane.org/gmane.linux.kernel.containers/27212

I can send you a more recent patchset (against 3.13.10) if you would
find it useful.

Yes please, I would be interested in that. Ideally even against 3.14.1 if
you have that too.

Any chance for a 3.15 rebase, since the changes from cgroup_fork() makes
the operation no longer trivial.

Cheers,
Alin.