kuasar-io / kuasar

A multi-sandbox container runtime that provides cloud-native, all-scenario multiple sandbox container solutions.
https://kuasar.io
Apache License 2.0
1.27k stars 92 forks source link

[vmm]: support sandbox cgroup management in the host #52

Closed flyflypeng closed 1 year ago

flyflypeng commented 1 year ago

fix: #51

reason:

  1. limit the vm process resource usage in the specified cgroup dir
  2. support pod_overhead conception actually, which limits the non-vcpu type threads of vm process into pod_overhead cgroup dir and set the pod_overhead resources limit in this cgroup dir.