| Forkbomb in container [message #49412] | 
			Mon, 29 April 2013 10:02  | 
		 
		
			
				
				
				
					
						  
						bastoune
						 Messages: 2 Registered: April 2013 
						
					 | 
					Junior Member  | 
					 | 
		 
		 
	 | 
 
	
		Hi everybody, 
 
i'm trying to make hardening on containers to make users unable to damage the host node. I just tried a forkbomb in a container using python  
 
import os 
while True: 
    os.fork() 
 
Running htop on my host node, I see that CPU usage is 100% on all cores, even if i setted params like cpuunit, cpus, cpulimit in configuration file. 
 
How can I struggle against this ? 
 
All my containers are precreated debian templates   
 
Thx a lot 
		
		
		
 |  
	| 
		
	 | 
 
 
 |