[21u] Backport intention of 8322420: [Linux] cgroup v2: Limits in parent nested control groups are not detected

[Jan Kratochvil]

On Sat, 15 Feb 2025 02:05:38 +0800, Severin Gehwolf wrote:
> This is a rather invasive patch set. Is this something that Azul ships
> in the downstream distribution?

No. The customer is waiting since January 2024 how JDK upstream decides.
Azul does not want to fork from upstream too much.


> Surely this only applies to systems that have such a setup (of
> hierarchical cgroups), not cgroup limits in general. Common container
> frameworks (kubernetes) aren't affected AFAIK (I might be wrong,
> though). The risk is a function of such affected systems. Would you
> have any estimation of the affected systems out in the wild? That would
> help assess this.

It can affect any Linux system as systemd is everywhere nowadays and root can:
	# systemctl set-property user.slice MemoryMax=256M


> > As the code is the same in 21u as in 24u and all the backports are clean I do
> > not expect regressions.
> 
> JDK 24 hasn't been officially released yet, so the proposed patches
> haven't seen much real-world usage yet.

OK.


Thanks,
Jan Kratochvil