Skip to content

Latest commit

 

History

History
22 lines (18 loc) · 474 Bytes

[offregister] Constraints (RAM, user-access, CPU &etc.).md

File metadata and controls

22 lines (18 loc) · 474 Bytes
Raw

Constraints

Could setup a syntax like OpenEdX's JSON has:

"CODE_JAIL": {
  "limits": {
    "CPU": 1,
    "FSIZE": 1048576,
    "PROXY": 0,
    "REALTIME": 3,
    "VMEM": 536870912
  },
  "python_bin": "/edx/app/edxapp/venvs/edxapp-sandbox/bin/python",
  "user": "sandbox"
}

It being called "CODE_JAIL" implies that it can work in cgroups, with Docker [which uses cgroups and namespaces], in FreeBSD jails, Solaris zones &etc.

Not a bad idea?