Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Usage limits to prevent abuse #35

Open
4 tasks
remram44 opened this issue Apr 15, 2021 · 0 comments
Open
4 tasks

Usage limits to prevent abuse #35

remram44 opened this issue Apr 15, 2021 · 0 comments
Labels
C-builder Component: Building Docker images C-runner Component: Running the Docker images T-enhancement Type: En enhancement to existing code, or a new feature

Comments

@remram44
Copy link
Member

remram44 commented Apr 15, 2021 •
edited
Loading

Originally opened 2017-05-19 14:44 EDT by @remram44

  • Set CPU/RAM usage limits
    • This can be done via Kubernetes, setting limit to DinD container in runner pod
    • Or via the Dind daemon, having the runner set a limit
  • Set runtime limit
    • Have the runner spawn a thread that kills the container after a while
  • Set disk space limit
    • Docker doesn't seem to support this?
  • Careful of GZIP bombs
    • The builder could check the unpacked size
@remram44 remram44 added T-enhancement Type: En enhancement to existing code, or a new feature C-runner Component: Running the Docker images C-builder Component: Building Docker images labels Apr 15, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
C-builder Component: Building Docker images C-runner Component: Running the Docker images T-enhancement Type: En enhancement to existing code, or a new feature
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@remram44