System Limits
System limits are best configured in /etc/security/limits.conf.
In the case of codd, we have added two groups, med-mem and high-mem. limits.conf looks like this:
@med-mem - memlock 404800 @med-mem - rss 404800 @med-mem - as 404800 # One day 'unlimited' might work as a value, see Debian bug #122400 @high-mem - memlock 1024000 @high-mem - rss 1024000 @high-mem - as 1024000 # Don't limit root, ever. root - # Default hard limits. * - nproc 150 * - memlock 51200 * - rss 51200 * - as 51200
So, everyone is limited to 150 processes.
- high-mem users get about 1GB of memory.
- med-mem users get around 400MB of memory.
- Everyone else gets about 50MB of memory.