From: Michael Tremer <michael.tremer@ipfire.org>
Date: Tue, 9 Aug 2022 17:20:56 +0000 (+0000)
Subject: builds: Set PID limit to 2048 for each build
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=de4c8fe6c199106152efa5dea637e53c3af9b294;p=people%2Fstevee%2Fpakfire.git

builds: Set PID limit to 2048 for each build

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/src/libpakfire/build.c b/src/libpakfire/build.c
index 0f921da4..4723f2f9 100644
--- a/src/libpakfire/build.c
+++ b/src/libpakfire/build.c
@@ -43,6 +43,9 @@
 // We guarantee 2 GiB of memory to every build container
 #define PAKFIRE_BUILD_GUARANTEED_MEMORY		(size_t)2 * 1024 * 1024 * 1024
 
+// We allow only up to 2048 processes/threads for every build container
+#define PAKFIRE_BUILD_PID_LIMIT				(size_t)2048
+
 struct pakfire_build {
 	struct pakfire* pakfire;
 	int nrefs;
@@ -822,6 +825,11 @@ static int pakfire_build_setup_cgroup(struct pakfire_build* build) {
 	if (r)
 		return r;
 
+	// Set PID limit
+	r = pakfire_cgroup_set_pid_limit(build->cgroup, PAKFIRE_BUILD_PID_LIMIT);
+	if (r)
+		return r;
+
 	// Done
 	return 0;
 }