Container Basics On Linux (Namespaces/Cgroups)

Isolating System Resources with Cgroup V2 Controllers

🧩 The Challenge

A runaway process can consume all available system memory or CPU cycles, impacting the performance of other critical applications on the same host.

💡 The Fix

Create a dedicated cgroup v2 control group to enforce hard limits on resource utilization for a specific process or shell session.

sudo mkdir /sys/fs/cgroup/limit_demo
echo "100000000" | sudo tee /sys/fs/cgroup/limit_demo/memory.max
echo $BASHPID | sudo tee /sys/fs/cgroup/limit_demo/cgroup.procs

⚙️ Why It Works

The cgroup v2 controller interface allows administrators to dynamically restrict kernel-level resource allocation by writing constraints directly into the pseudo-filesystem. By attaching a process ID to the cgroup.procs file, the kernel immediately applies the defined memory and scheduling policies to that process tree.

🚀 Pro-Tip: Use the systemd-run command with the –p property to create temporary cgroups for ephemeral tasks without manual directory management.

Linux Tips & Tricks | © ngelinux.com | 7/9/2026