shoenig / nomad-pledge-driver

Nomad task driver capable of blocking unwanted syscall and filesystem access. Based on the pledge utility for Linux by Justine Tunney
Mozilla Public License 2.0
22 stars 2 forks source link

plugin: correctly set memory resource constriants in cgroup #59

Closed shoenig closed 1 year ago

shoenig commented 1 year ago

If memory is set but memory_max is not set in task resources, apply memory (bytes) to the memory.max cgroup interface file.

Otherwise memory is set and memory_max is set, apply memory to the memory.low cgroup file and apply memory_max to the memory.max file.

Fixes #58