@tetech said: I would say changing the firewall and killing network access to the container was a dumb error! But easily fixed.
Not to be a picky jerk, but, really, testing a firewall seems like a smart idea! I always try a little testing to make sure my firewall seems to be doing what I think it's supposed to be doing. So I think this was a super excellent mistake to make! 🤩
Yeah, the basic principle is to share the free resource fairly but give users flexibility on how/where to allocate it.
Another thing in the "idea bank" is to allow users to choose their balloon memory. So you can over-allocate beyond your 128MB, and the OOM killer will penalize you more based on how much/how long you've been above the allocation. This becomes more like accounting for actual resource usage rather than provisioned resources.
Comments
Not to be a picky jerk, but, really, testing a firewall seems like a smart idea! I always try a little testing to make sure my firewall seems to be doing what I think it's supposed to be doing. So I think this was a super excellent mistake to make! 🤩
Thanks to @tetech for letting me help test! 💖
I kinda like the pool idea doh.
Free NAT KVM | Free NAT LXC
Yeah, the basic principle is to share the free resource fairly but give users flexibility on how/where to allocate it.
Another thing in the "idea bank" is to allow users to choose their balloon memory. So you can over-allocate beyond your 128MB, and the OOM killer will penalize you more based on how much/how long you've been above the allocation. This becomes more like accounting for actual resource usage rather than provisioned resources.