On 12/18/23 13:24, Haitao Huang wrote:> @Dave and @Michal, Your thoughts? Or could you confirm we should not > do reclaim per cgroup at all? What's the benefit of doing reclaim per cgroup? Is that worth the extra complexity? The key question here is whether we want the SGX VM to be complex and more like the real VM or simple when a cgroup hits its limit. Right? If stopping at patch 5 and having less code is even remotely an option, why not do _that_?