1

We are running a Mesos cluster and just had an issue with one docker container that essentially fork bombed an agent.

Docker has --pids-limit setting that would prevent such issues in the future. https://docs.docker.com/engine/reference/commandline/run/

--pids-limit is a docker run parameter, so it would need to be set for every Marathon application.

Ideally I'd like to set it once somewhere in dockerd / Mesos / Marathon as some default, and let the users override it if they know what they're doing. However, I can't find a nice simple way to add a default flag/parameter for docker run

Any ideas how to best achieve that?

Gytis
  • 21
  • 4

1 Answers1

2

This can be done by adding --pids-limit to Parameters in DockerInfo.

Unfortunately Marathon does not support this change but this could be done by RunSpec Marathon Plugin

janisz
  • 6,292
  • 4
  • 37
  • 70