Dmitrii Kuvaiskii
Dmitrii Kuvaiskii
Jenkins, test this please
Jenkins, test this please
The fact that Gramine just uses some built-in default is definitely a bug. However, I'm not sure that Gramine must get the limits from the untrusted environment. I think a...
> Whether limits are inherited between in-Gramine processes. The limits are inherited between in-Gramine processes, notice the `attribute_migratable` keyword: https://github.com/gramineproject/gramine/blob/a60dcf78e9b5d9c4f1d315c63dd087592668b8e3/libos/src/sys/libos_getrlimit.c#L37 Also, I don't think this was an original question. >...
> By the time the app's main() function is reached and a new limit may be set, the app may have already cloned/forked a bunch of processes/threads which will still...
For other rlimits, see these issues: - https://github.com/gramineproject/gramine/issues/1714 - https://github.com/gramineproject/gramine/issues/1712 We should also move `sys.stack.size` and `sys.brk_size` (and maybe other manifest options) under this rlimits syntax.
FYI: Actually, I don't know how to reproduce this problem. `docker run --cpuset-cpus=0 ...` or `docker run --cpus=1 ...` invocations do not result in Gramine failures on my machines. I...
There was no follow up on this issue for several months, I'm closing this.
Jenkins, test this please (just for sanity)
@anjalirai-intel Have you tried the perf optimizations for EDMM? In particular, PR https://github.com/gramineproject/gramine/pull/1513