diff options
| author |  Joe Banks <[email protected]> | 2020-11-19 21:31:08 +0000 |
|---|---|---|
| committer |  GitHub <[email protected]> | 2020-11-19 21:31:08 +0000 |
| commit | b3513dfbaef6e20d7d92f34285913f974bc81f32 (patch) | |
| tree | 9c25a6b8416bbb4078f4e96bfa463f8fcd315d37 | |
| parent | Add privileged securityContext to deployment (diff) | |
Set maximum file size to 10Mb through rlimit_fsize
This will set the maximum size of a created file to be 10Mb, a fairly generous amount.
The reason for this is that when a huge stdout is buffered it does not get affected by the memory protections of nsjail and is sent to the host container, which has potential to cause an OOM.
Diffstat (limited to '')
| -rw-r--r-- | config/snekbox.cfg | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/config/snekbox.cfg b/config/snekbox.cfg index 27caf27..5b47459 100644 --- a/config/snekbox.cfg +++ b/config/snekbox.cfg @@ -18,6 +18,7 @@ envar: "NUMEXPR_NUM_THREADS=1" keep_caps: false rlimit_as: 700 +rlimit_fsize: 10 clone_newnet: true clone_newuser: true |