Runtime: improve resource limiting API #48
Description
This issue is to improve the resource limiting API by removing the process helper CLI or using another library to limit host resources.
An "external" process may not be needed and hopefully can find a way around this.
Tasks:
- test if limiting behavior can be accomplished in same process
- create new issue to try limiting using cgroups instead of rlimits (see containerd/cgroups)
Related Background
The prlimit/setrlimit mechanism being used will apply limits on the process if the user is not root and these limits will be for that user. Will need to manually test this implementation, this is possibly sufficient for now but using separate non-root users for each process is needed next.
prlimit --nproc a.k.a. RLIMIT_NPROC a.k.a. ulimit -u is the maximum number of processes¹ for the user as a whole. If you already have 20 processes running, and you set the limit to 20, you can't create any new process. What matters is how many processes are running as your user, it doesn't matter who their parent is or what their limit setting is.
[source]
See notes in this issue for more details: #42 (comment)
Originally posted by @camerondurham in #38 (comment)