On Mon, Jul 26, 2021 at 10:33 PM Vasily Averin [off-list ref] wrote:

The kernel allocates ~400 bytes of 'strcut mount' for any new mount.

*struct mount*

Creating a new mount namespace clones most of the parent mounts,
and this can be repeated many times. Additionally, each mount allocates
up to PATH_MAX=4096 bytes for mnt->mnt_devname.

It makes sense to account for these allocations to restrict the host's
memory consumption from inside the memcg-limited container.

Signed-off-by: Vasily Averin <redacted>

Reviewed-by: Shakeel Butt <redacted>