hakoniwa 1.6.0

Process isolation for Linux using namespaces, resource limits, cgroups, landlock and seccomp.
Documentation
1
2
3
4
5
6
7
8
9
use super::{error::*, sys};
use crate::Container;

pub(crate) fn setrlimit(container: &Container) -> Result<()> {
    for (k, v) in &container.rlimits {
        sys::setrlimit(k.to_resource(), v.0, v.1)?;
    }
    Ok(())
}