Received: by 2002:a05:6a10:1287:0:0:0:0 with SMTP id d7csp4724364pxv; Tue, 27 Jul 2021 14:55:43 -0700 (PDT) X-Google-Smtp-Source: ABdhPJxsm9M4LADUYEc7fDXtrhmJVEdedJcYj/NJBVEnHhWly3Qpx/rlZJsfjvjhVSGBmBkk/lOI X-Received: by 2002:a17:906:b351:: with SMTP id cd17mr5358587ejb.36.1627422942992; Tue, 27 Jul 2021 14:55:42 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1627422942; cv=none; d=google.com; s=arc-20160816; b=XkbCE5TMj52hFOgT6/0U/ojDHdIFBSK8thzsb+lwlUVgseqXuV6+ctGbTo4Mo/r5t4 /cY7vYQhXqvDJxjsqfd2PJpQZyD2h9pIL0sKHkP8EvIF0uLLtKTXXvCrt29BFt/bhic8 sa4fzEfwge2fbn20zEv3AZBH7rX8ELu3y6LNer4GpsVXLrhmo/1StmG8vyZN6wYp1hJt 75oyq2GUrz0/5raCwRwMXDZibgteHO1+EU4Mbr6A66K5/6vZyLhiIADzRnjtrj4BFSgY tb+/jFJ8S6ZKs1BN3yPrH8CvyTZYCLsTtaiPnPKbCwaAG0ALiBVXskrA4sl0wdK7YdAQ gohA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:cc:to:subject:message-id:date:from:in-reply-to :references:mime-version:dkim-signature; bh=LklRqbXMTEN/3IOARnfGCTnT/yEZVFwCJFDMkmvyYVo=; b=0k3mPTIFwlG+4CS74vDA51K/32gV4kY4Z9qt36q8qUGQ9eLUg285pyNy7163Sg1AI6 iMSAnhfTxuVp/Xp9QAzhsEUz/V6mOmQdqg6Zhpars5kJuAlwvVDfJ+f1K5HqmSDOY663 Rki5l5sOrWidwjyi+9XWWkOfswypZ/c/0WTZtrqFjPtnkck6RZPzcl8fivJcszKyq2Cn b58Ul0DSrBbXQ8DyaIbDcMbMIYQyJGrrQ5HcB1abWcZUoktNxS4NMp2nlRuQ/kOIug+w vdIoBFgGVwlhvLfjcFTtuwRNd/5enS2LLf5LEawhduxURl4P4kK2PlrzfGR6Hw44Lt+V Z/hw== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@google.com header.s=20161025 header.b=AbNu22X3; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=google.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id w23si4073826edt.312.2021.07.27.14.55.19; Tue, 27 Jul 2021 14:55:42 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; dkim=pass header.i=@google.com header.s=20161025 header.b=AbNu22X3; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=google.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S232134AbhG0Vv7 (ORCPT + 99 others); Tue, 27 Jul 2021 17:51:59 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:38136 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S231135AbhG0Vv6 (ORCPT ); Tue, 27 Jul 2021 17:51:58 -0400 Received: from mail-lf1-x12a.google.com (mail-lf1-x12a.google.com [IPv6:2a00:1450:4864:20::12a]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id C0348C061757 for ; Tue, 27 Jul 2021 14:51:56 -0700 (PDT) Received: by mail-lf1-x12a.google.com with SMTP id d18so26980lfb.6 for ; Tue, 27 Jul 2021 14:51:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=LklRqbXMTEN/3IOARnfGCTnT/yEZVFwCJFDMkmvyYVo=; b=AbNu22X3Nmx8X2h+2ik7T5v6bU+CsbYIGQapGfDjCY/3r1jS9dwjHMGAsireZtJIzA W6vzg/MECVRzb0M3CzcIvMUeqvE7OFHKjzUu9Vc8EciMK4M22Lalr1SoxpUWAdaS0jas trp6Y9wm5/8rQ99XmOCezferLz9rqJpSR4qHfjYjK/VTc3I7BOoBPi0fzC9EwTD/nYHV 8dAu/luh9QT3BGhD0+VcybrhasaOcPPohqRydoP5y/Vo5wWXp7PD1EhvztG+D5sonifC yAelkaCCnK3W8KrUX9cPBHBrruaxk+BOade7OJ7ssi7N40oIgkFN4GjiGFhdx1Vp7uI1 EVLQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=LklRqbXMTEN/3IOARnfGCTnT/yEZVFwCJFDMkmvyYVo=; b=h0aeczAIVnaOJlGhQGhvcaCjbn9apcNSDsZBE8gc7CQnhv1GS33XD1WZ45NyZHdgMf NNTmOkjr362sTBPJUO7zZ9rHm905lRISTtW/3V2GpTNSqLdmtWPvDAgaCBWfA/rfV1Wt GUuKX6rTIesDrBKTwCl08M1o1bzXROeyvZyGGtwUbpbEgtLFFtKgKfZ4FfZ28as2uQfZ nwx8ITtF6pXQ7IjDxBkR0efAyy/iGt1xAv3r8E2knQqZZoyATgZqTZND8yNbRCZS+VkV eSgpBMCRLKOT28PpRSplLoKBrzt+JEg8U6zBvhtL22/yU0gS4LjPNINIZx8OqYArzyjG igXA== X-Gm-Message-State: AOAM533VtLossuOyVqsCHYjBd4tAz8lfSZdye2zB8u16tP+3BuiGLlw+ tY9b/M5sXh9qDG7sokFaQ4uyHT1VNCGofsNZjk/ugg== X-Received: by 2002:a19:771c:: with SMTP id s28mr17640254lfc.358.1627422714605; Tue, 27 Jul 2021 14:51:54 -0700 (PDT) MIME-Version: 1.0 References: <6f21a0e0-bd36-b6be-1ffa-0dc86c06c470@virtuozzo.com> <5525bcbf-533e-da27-79b7-158686c64e13@virtuozzo.com> In-Reply-To: <5525bcbf-533e-da27-79b7-158686c64e13@virtuozzo.com> From: Shakeel Butt Date: Tue, 27 Jul 2021 14:51:43 -0700 Message-ID: Subject: Re: [PATCH v7 05/10] memcg: enable accounting for new namesapces and struct nsproxy To: Vasily Averin Cc: Andrew Morton , Cgroups , Michal Hocko , Johannes Weiner , Vladimir Davydov , Roman Gushchin , Tejun Heo , Zefan Li , Thomas Gleixner , Christian Brauner , Kirill Tkhai , Serge Hallyn , Andrei Vagin , LKML Content-Type: text/plain; charset="UTF-8" Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Mon, Jul 26, 2021 at 10:33 PM Vasily Averin wrote: > > Container admin can create new namespaces and force kernel to allocate > up to several pages of memory for the namespaces and its associated > structures. > Net and uts namespaces have enabled accounting for such allocations. > It makes sense to account for rest ones to restrict the host's memory > consumption from inside the memcg-limited container. > > Signed-off-by: Vasily Averin > Acked-by: Serge Hallyn > Acked-by: Christian Brauner > Acked-by: Kirill Tkhai Reviewed-by: Shakeel Butt