On 12/04/2017 02:35 PM, Matlink wrote:
Hello, Is it possible, within LXD, to limit the number of processes a container can create, to block any fork bomb attack? I know it's possible from the host and with cgroup, but is there any mechanism included in LXD, such as setting a value in the container configuration?
lxc config set t1 limits.processes 100 This will set it to 100 . cheers, Tamas _______________________________________________ lxc-users mailing list lxc-users@lists.linuxcontainers.org http://lists.linuxcontainers.org/listinfo/lxc-users