On 12/04/2017 02:35 PM, Matlink wrote:
Hello,

Is it possible, within LXD, to limit the number of processes a container
can create, to block any fork bomb attack?

I know it's possible from the host and with cgroup, but is there any
mechanism included in LXD, such as setting a value in the container
configuration?


lxc config set t1 limits.processes 100

This will set it to 100 .

cheers,
Tamas
_______________________________________________
lxc-users mailing list
lxc-users@lists.linuxcontainers.org
http://lists.linuxcontainers.org/listinfo/lxc-users

Reply via email to