Kailun Qin
Kailun Qin
Burstable CFS controller is introduced in Linux 5.14. This helps with parallel workloads that might be bursty. They can get throttled even when their average utilization is under quota. And...
This patch introduces Landlock Linux Security Module (LSM) support in runc, which was landed in Linux kernel 5.13. This allows unprivileged processes to create safe security sandboxes that can securely...
Linux kernel 5.13 adds support for Landlock Linux Security Module (LSM). This allows unprivileged processes to create safe security sandboxes that can securely restrict the ambient rights (e.g. global filesystem...
Linux kernel 5.14 adds the support for Core Scheduling. This allows setting and copying core scheduling 'task cookies' between the container process and the threads (PID), processes (TGID), and process...
Linux 5.14 adds the support for [Core Scheduling](https://lore.kernel.org/lkml/[email protected]/). Core scheduling support allows userspace to define groups of tasks that can share a core. These groups can be specified either for...
Burstable CFS controller is introduced in Linux 5.14. This helps with parallel workloads that might be bursty. They can get throttled even when their average utilization is under quota. And...
The previous non-rsvd max/limit_in_bytes does not account for reserved huge page memory, making it possible for a process to reserve all the huge page memory, without being able to allocate...
The systemd cgroup path convention currently implemented in runtimes like `runc/crun` should be added to the spec. For more information, please kindly refer to e.g. runc systemd cgroup driver doc:...
Currently, with `runc` we have a special cmdline flag `--no-new-keyring` for `runc run` that enables/disables the creation of a new kernel keyring. The main reason we have the option is...
Burstable CFS controller is landed in Linux 5.14 [1], though the documentation is still WIP [2]. This helps with parallel workloads that might be bursty. They can get throttled even...