x0rg
/
9x0rg.com
1
0
Fork 0
Code Releases Activity

more conservative pid_limit example

This commit is contained in:
Wonderfall 2022-04-02 05:47:33 +02:00
parent 0d4dd39aac
commit 080ce38841
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
content/posts/docker-hardening.md
View File

@ -148,7 +148,7 @@ Use cgroups to restrict access to hardware and system resources. You likely don'
``` ```
mem_limit: 4g mem_limit: 4g
cpus: 4 cpus: 4
pids_limit: 100 pids_limit: 256
``` ```
More runtime options can be found in [the official documentation](https://docs.docker.com/config/containers/resource_constraints/). All of them should have a [Compose spec](https://github.com/compose-spec/compose-spec/blob/master/spec.md) equivalent. More runtime options can be found in [the official documentation](https://docs.docker.com/config/containers/resource_constraints/). All of them should have a [Compose spec](https://github.com/compose-spec/compose-spec/blob/master/spec.md) equivalent.