diff --git a/install.sh b/install.sh index 0e96f16c..d9b5df21 100644 --- a/install.sh +++ b/install.sh @@ -288,6 +288,7 @@ setup_redis_service # for redis container #create_rdnc # generate rdnc key for managing domains panel_customize # customizations docker_compose_up # must be after configure_nginx +docker_cpu_limiting # https://docs.docker.com/engine/security/rootless/#limiting-resources set_premium_features # must be after docker_compose_up configure_modsecurity # download modsec coreruleset or change docker image set_custom_hostname # set hostname if provided @@ -1135,6 +1136,21 @@ install_packages() { } +docker_cpu_limiting() { + # https://docs.docker.com/engine/security/rootless/#limiting-resources + + mkdir -p /etc/systemd/system/user@.service.d + + cat > /etc/systemd/system/user@.service.d/delegate.conf << EOF +[Service] +Delegate=cpu cpuset io memory pids +EOF + + debug_log systemctl daemon-reload + +} + + edit_fstab() { echo "Setting quotas for disk limits of user files" fstab_file="/etc/fstab"