nsjail + java/tomcat about nsjail HOT 5 CLOSED

I think you need to play with --rlimit_as, also other --rlimit's will be useful, e.g. --rlimit_fsize will probably need to be increased as well

from nsjail.

If you get to some stable config, feel free to put it in https://github.com/google/nsjail/tree/master/configs

from nsjail.

I've encountered the same problem. I think set rlimit_as to inf works. Use cgroup to restrict memory instead of rlimit. JVM is not happy with rlimit.

from nsjail.

Hm... I think we should set RLIMIT_AS to RLIM64_INFINITY by default. This rlimit is a very imperfect approximation of RAM used (since RLIMIT_RSS doesn't work in Linux), and many tools use small amounts of RAM bug big amounts of VM, e.g. ASAN sanitizers of Scudo Memory Allocator. I'll think about it.

from nsjail.

I've increased the limit to 4GiB for now, but the overall goal is to set it to RLIM64_INFINITY

from nsjail.