builds: Set PID limit to 2048 for each build

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

diff --git a/src/libpakfire/build.c b/src/libpakfire/build.c
index 0f921da48b27bbb2e747a7730acec0c726beebb2..4723f2f90337b764258ef6f329207b8517830cb9 100644 (file)
--- a/src/libpakfire/build.c
+++ b/src/libpakfire/build.c
@@ -43,6 +43,9 @@
 // We guarantee 2 GiB of memory to every build container
 #define PAKFIRE_BUILD_GUARANTEED_MEMORY                (size_t)2 * 1024 * 1024 * 1024
 
+// We allow only up to 2048 processes/threads for every build container
+#define PAKFIRE_BUILD_PID_LIMIT                                (size_t)2048
+
 struct pakfire_build {
        struct pakfire* pakfire;
        int nrefs;
@@ -822,6 +825,11 @@ static int pakfire_build_setup_cgroup(struct pakfire_build* build) {
        if (r)
                return r;
 
+       // Set PID limit
+       r = pakfire_cgroup_set_pid_limit(build->cgroup, PAKFIRE_BUILD_PID_LIMIT);
+       if (r)
+               return r;
+
        // Done
        return 0;
 }