On 12/04/2017 02:35 PM, Matlink wrote:
Hello,
Is it possible, within LXD, to limit the number of processes a container
can create, to block any fork bomb attack?
I know it's possible from the host and with cgroup, but is there any
mechanism included in LXD, such as setting a value in the
Well, I'm answering myself: lxc config set limits.processes 100
Le 04/12/2017 à 14:35, Matlink a écrit :
> Hello,
>
> Is it possible, within LXD, to limit the number of processes a container
> can create, to block any fork bomb attack?
>
> I know it's possible from the host and with cgroup, but
Hello,
Is it possible, within LXD, to limit the number of processes a container
can create, to block any fork bomb attack?
I know it's possible from the host and with cgroup, but is there any
mechanism included in LXD, such as setting a value in the container
configuration?
Thanks,
--
Matlink