From mboxrd@z Thu Jan 1 00:00:00 1970 From: Christian Brauner Subject: Re: [PATCH v4 07/16] memcg: enable accounting for new namesapces and struct nsproxy Date: Fri, 7 May 2021 17:03:12 +0200 Message-ID: <20210507150312.pb4wnxyfw3nwl4yi@wittgenstein> References: <8664122a-99d3-7199-869a-781b21b7e712@virtuozzo.com> Mime-Version: 1.0 Return-path: Content-Disposition: inline In-Reply-To: List-ID: Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: Vasily Averin Cc: cgroups-u79uwXL29TY76Z2rM5mHXA@public.gmane.org, Michal Hocko , Shakeel Butt , Johannes Weiner , Vladimir Davydov , Roman Gushchin , Alexander Viro , Tejun Heo , Andrew Morton , Zefan Li , Thomas Gleixner , Kirill Tkhai , Serge Hallyn , Andrei Vagin , linux-kernel-u79uwXL29TY76Z2rM5mHXA@public.gmane.org On Wed, Apr 28, 2021 at 09:52:43AM +0300, Vasily Averin wrote: > Container admin can create new namespaces and force kernel to allocate > up to several pages of memory for the namespaces and its associated > structures. > Net and uts namespaces have enabled accounting for such allocations. > It makes sense to account for rest ones to restrict the host's memory > consumption from inside the memcg-limited container. > > Signed-off-by: Vasily Averin > --- Serge's ack reminded me of this. Looks good if the mm folks are fine with this too, Acked-by: Christian Brauner