mirror of
https://github.com/docker/docker-bench-security.git
synced 2025-01-19 00:32:34 +01:00
100b63dac5
It is the best practise that only disable the OOM killer on containers where
you have also set the `-m/--memory` option.
If the `-m/--memeory` flag is not set, this can result in the host running
out of memory and require killing the host's system processes to free memory.
Examples:
The following example limits the memory to 100M and disables the OOM
killer for this container:
$ docker run -ti -m 100M --oom-kill-disable ubuntu:14.04 /bin/bash
The following example, illustrates a dangerous way to use the flag:
$ docker run -ti --oom-kill-disable ubuntu:14.04 /bin/bash
The container has unlimited memory which can cause the host to run out
memory and require killing system processes to free memory.
Signed-off-by: Hu Keping <hukeping@huawei.com>
|
||
|---|---|---|
| .. | ||
| 1_host_configuration.sh | ||
| 2_docker_daemon_configuration.sh | ||
| 3_docker_daemon_configuration_files.sh | ||
| 4_container_images.sh | ||
| 5_container_runtime.sh | ||
| 6_docker_security_operations.sh | ||