aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorTom Smeding <tom@tomsmeding.com>2022-06-14 19:11:55 +0200
committerTom Smeding <tom@tomsmeding.com>2022-06-14 19:11:55 +0200
commit181bdd640a5a605ed43cc14b295a6536541e428e (patch)
treee2e33e647d922d7b2635e8ed5b1ad919a60d1f65
parent253b56ec950701ba98a70da94bd987d378d90f34 (diff)
Set memory limit to 500MiB
-rwxr-xr-xbwrap-files/start.sh6
1 files changed, 2 insertions, 4 deletions
diff --git a/bwrap-files/start.sh b/bwrap-files/start.sh
index 859145c..03bf77e 100755
--- a/bwrap-files/start.sh
+++ b/bwrap-files/start.sh
@@ -37,9 +37,7 @@ ulimit -c 0
# Limit on the number of processes
ulimit -u 10000
-# Limit memory to 600 MiB. Note that the compiled program gets a 500 MiB memory
-# limit via the GHC RTS, so this limit is 1. to constrain GHC itself (including
-# any TH code), and 2. as a second-layer defense.
-ulimit -d $(( 600 * 1024 ))
+# Limit memory to 500 MiB.
+ulimit -d $(( 500 * 1024 ))
exec bwrap "${args[@]}" 4<"${filesdir}/entry.sh"