[lxc-users] Processes number limit

Matlink matlink at matlink.fr
Mon Dec 4 13:35:49 UTC 2017


Hello,

Is it possible, within LXD, to limit the number of processes a container
can create, to block any fork bomb attack?

I know it's possible from the host and with cgroup, but is there any
mechanism included in LXD, such as setting a value in the container
configuration?

Thanks,

-- 
Matlink - Sysadmin matlink.fr
Sortez couverts, chiffrez vos mails : https://café-vie-privée.fr/
XMPP/Jabber : matlink at matlink.fr
Clé publique PGP : 0x186BB3CA
Empreinte Off-the-record : 572174BF 6983EA74 91417CA7 705ED899 DE9D05B2


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <http://lists.linuxcontainers.org/pipermail/lxc-users/attachments/20171204/b282f1ec/attachment.sig>


More information about the lxc-users mailing list