Hi Hugh and experts, We are trying to enable KSM in a multi-container projects to save some memory. And as the celld project suggests: "To maximize the benefit of KSM, CellD uses a custom system call which adds all memory pages from all processes to the set of pages KSM attempts to merge. " [1]
Our test shows that with the patch[2], applications works stable and more memory are saved, but we are not sure if this patch brings in any more secure risks compared with ksm only. The "uksm"[3] probably works in a similar way, but somehow in our tests seems it save less memory. Do you have any comments? Thank you so much. [1] http://systems.cs.columbia.edu/archive/pub/2012/08/the-design-implementation-and-evaluation-of-cells-a-virtual-smartphone-architecture/ [2] https://cells-source.cs.columbia.edu/#/c/114/1/mm/madvise.c [3] http://kerneldedup.org/en/
