From owner-freebsd-questions@freebsd.org Fri Aug 19 21:18:26 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id C1FBEBC067B for ; Fri, 19 Aug 2016 21:18:26 +0000 (UTC) (envelope-from markmoellering@psyberation.com) Received: from mail-oi0-x22a.google.com (mail-oi0-x22a.google.com [IPv6:2607:f8b0:4003:c06::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 81A181845 for ; Fri, 19 Aug 2016 21:18:26 +0000 (UTC) (envelope-from markmoellering@psyberation.com) Received: by mail-oi0-x22a.google.com with SMTP id c15so80633108oig.0 for ; Fri, 19 Aug 2016 14:18:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=psyberation-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:cc; bh=Y/O/00KeHeMYYdkhEsI+20iJ/v0qzsv+WbCRM9c+HS4=; b=yr7561brzN4NzQnGzVGnTz0SCIX6R/NLKmw4uDVUF6XT7zMTUus7uOpUdE9VSyIop6 /cJ0UEmV1GorpkWqq8kh2iZ+ml+0nwM8An6OqOIMDPwZj12nDE0TyNQdsMSqLfbSIuKr 2D13mz8MzVG73bpNTZ9/WGIHhbu5Stel3l3lpwCVlC49JFgfMQTRfMHbowQLI0Eqq1ha Kppfm3wzG8qkOF/TjIxEGKvrjRrrMl43htvN6cZbDTvdkonRqTyiLsMJxYrnbQsgn+vl pQTKcZyIossnidSFqqJvFM7VmSUYs0y/FYCS3KDtUg/8W7tmA7QKFXprdjb8P94BHfe/ xPkQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:cc; bh=Y/O/00KeHeMYYdkhEsI+20iJ/v0qzsv+WbCRM9c+HS4=; b=ez6LwYI11HH2bOR8ezPgzNKSuKt5J8JQVgwq/OiGcwjuq0ERYuuh5ySeur0flwd0F4 b9BKKyEn5iykN5h35Auaer/9TlYVcLjdKETKQsY/pRaSHpqThmET0NZkwL0Y/bVOqDSD WE7NmhXmwOKkC1FlaotM/dwTy3/xeoW8YSUnxwU5JcVZMuG1fbVBri+D4A/RbKsgZFYh WoihiuCdrxa809lbMZquJHrnhXYSBRpaE6FwvpxnPLzBmSJ+sGSy3VsFnCaw+t4ilH9v JOy5ab0Y+MiWDLqmmloza5mEVfdp4fYrx1JjeBhWG2xNyw3xoPBA4/r8sh7HGec7j1os NSWg== X-Gm-Message-State: AEkoouux1KixREwr+TZ/BWdk7UjmwWMyH5cmonsmZHyO897t52NP3Izn3VTUwL+Nw9a6EeIAb08mTJhuSCT1fQ== X-Received: by 10.157.21.26 with SMTP id u26mr5779022otf.100.1471641505622; Fri, 19 Aug 2016 14:18:25 -0700 (PDT) MIME-Version: 1.0 Received: by 10.182.226.195 with HTTP; Fri, 19 Aug 2016 14:18:25 -0700 (PDT) In-Reply-To: <20160819213454.7aafe1353a90f986dd1539b1@sohara.org> References: <20160819104058.1c60a63fb832fbdc1524207c@sohara.org> <20160819101657.GB2560@hephaistos.local> <20160819114429.756b3d25f9335417a0c673c3@sohara.org> <5dcc797b-5aac-cac1-b120-b4ff91f360dd@tysdomain.com> <20160819213454.7aafe1353a90f986dd1539b1@sohara.org> From: Mark Moellering Date: Fri, 19 Aug 2016 17:18:25 -0400 Message-ID: Subject: Re: How do I limit I/O usage for a user/process? A user broke my system Cc: freebsd-questions@freebsd.org Content-Type: text/plain; charset=UTF-8 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Aug 2016 21:18:26 -0000 On Fri, Aug 19, 2016 at 4:34 PM, Steve O'Hara-Smith wrote: > On Fri, 19 Aug 2016 16:28:29 -0400 > Mark Moellering wrote: > >> Depending on the nature of the box, one possibility (albeit a slightly >> more complex one), is using a jail. If basic user accounts are in a >> jail, the jail can run out of memory and start file swapping without >> affecting the kernel or other server functions. Again, this depends >> on your set-up, etc > > A VM can do this but not a jail. > > -- > Steve O'Hara-Smith > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org" At the risk of flogging a dead horse; I thought you could in a jail but it turns out you cannot, however, you can use rctl to set limits on a jail. I find jails pretty amazing but, as I said in my original post, this is a much more complicated solution... Mark