Function NewLinuxDistroLimitSet

pkg/sentry/limits/linux.go:105–120

NewLinuxDistroLimitSet returns a new LimitSet whose values are typical for a booted Linux distro. Many Linux init systems adjust the default Linux limits to values more expected by the rest of the userspace. NewLinuxDistroLimitSet returns a LimitSet with sensible defaults for applications that aren

()

// LimitSet with sensible defaults for applications that aren't starting
// their own init system.
func NewLinuxDistroLimitSet() (*LimitSet, error) {
	ls, err := NewLinuxLimitSet()
	if err != nil {
		return nil, err
	}

	// Adjust ProcessCount to a lower value because GNU bash allocates 16
	// bytes per proc and OOMs if this number is set too high. Value was
	// picked arbitrarily.
	//
	// 1,048,576 ought to be enough for anyone.
	l := ls.Get(ProcessCount)
	l.Cur = 1 << 20
	ls.Set(ProcessCount, l, true /* privileged */)
	return ls, nil
}