From owner-freebsd-current@FreeBSD.ORG Mon Oct 5 19:06:31 2009 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id A10AB1065672 for ; Mon, 5 Oct 2009 19:06:31 +0000 (UTC) (envelope-from tom@tomjudge.com) Received: from tomjudge.vm.bytemark.co.uk (tomjudge.vm.bytemark.co.uk [80.68.91.100]) by mx1.freebsd.org (Postfix) with ESMTP id 627228FC1A for ; Mon, 5 Oct 2009 19:06:31 +0000 (UTC) Received: from localhost (localhost.localdomain [127.0.0.1]) by tomjudge.vm.bytemark.co.uk (Postfix) with ESMTP id B8061489D2; Mon, 5 Oct 2009 20:06:29 +0100 (BST) X-Virus-Scanned: Debian amavisd-new at tomjudge.vm.bytemark.co.uk Received: from tomjudge.vm.bytemark.co.uk ([127.0.0.1]) by localhost (tomjudge.vm.bytemark.co.uk [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MI3wsWWRjc3S; Mon, 5 Oct 2009 20:06:27 +0100 (BST) Received: from rita.nodomain (unknown [192.168.205.6]) by tomjudge.vm.bytemark.co.uk (Postfix) with ESMTP id 89C34489D0; Mon, 5 Oct 2009 20:06:26 +0100 (BST) Message-ID: <4ACA4391.6020607@tomjudge.com> Date: Mon, 05 Oct 2009 19:05:53 +0000 From: Tom Judge User-Agent: Thunderbird 2.0.0.23 (X11/20090822) MIME-Version: 1.0 To: Kostik Belousov References: <4ACA0549.7030404@tomjudge.com> <4ACA2E0F.5010800@elischer.org> <4ACA3146.9090402@tomjudge.com> <20091005190213.GV2259@deviant.kiev.zoral.com.ua> In-Reply-To: <20091005190213.GV2259@deviant.kiev.zoral.com.ua> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: freebsd-current@freebsd.org Subject: Re: Per Jail Memory Limits X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Oct 2009 19:06:31 -0000 Kostik Belousov wrote: > On Mon, Oct 05, 2009 at 05:47:50PM +0000, Tom Judge wrote: > >> I started to port this to 7.1 today: >> >> http://wiki.freebsd.org/JailResourceLimits >> >> >> What are the peoples opinions on this patch? >> > > Since r194766, we have precise accounting for the anonymous memory, > both globally and per-uid. If current jails infrastructure allows to > set per-jail limits (and I suspect that it is), then you should > just match these two facilities. > > The seemingly problematic thing is processes changing their jails. > It can be done similar to how the uid accounting is done currently, > by remembering which jail was charged in corresponding vm map > entry and object. > Did this get MFC'd to stable/7? I have a requirement to implement this for 7.1. Thanks