On Wed, Apr 28, 2021 at 09:52:43AM +0300, Vasily Averin wrote: > Container admin can create new namespaces and force kernel to allocate > up to several pages of memory for the namespaces and its associated > structures. > Net and uts namespaces have enabled accounting for such allocations. > It makes sense to account for rest ones to restrict the host's memory > consumption from inside the memcg-limited container. > > Signed-off-by: Vasily Averin <vvs@xxxxxxxxxxxxx> > --- Serge's ack reminded me of this. Looks good if the mm folks are fine with this too, Acked-by: Christian Brauner <christian.brauner@xxxxxxxxxx>
