port to CGroups

[adrelanos]

Since you mentioned in readme...

Note: CGroups

Linux now supports the CGroups feature, which is a much better method to track
memory and time usage and not limited by the issues listed below. This timeout
script does not use CGroups. While this script continues to work, if
you are on Linux and need a more robust monitoring method you should use something
based on CGroups. For system services, have a look at available systemd
options.
For a simple command-line script to limit memory usage you could for example
use runexec,
which is part of BenchExec.

Could you please this project to be using CGroups or perhaps start a new repository for that?

[adrelanos]

My for now failed attempt using CGroups:
https://forums.whonix.org/t/constrained-system-resources-program-starter-wrapper/10914/4

• No relative limits such as "use maximum 80% of available CPU, RAM, IO" can be easily implemented. Hardcoded limits are not great.
• Difficult to limit IO since <major>:<minor> syntax is required to limit IO.

---

My for now failed attempt using systemd-run:
https://github.com/Whonix/helper-scripts/blob/854bb44ead4f4fd6c273030f316d830f2c510f78/usr/bin/limit-low

• "More heavyweight" solution.
• Corner cases with missing environment variables. Would require the wrapper doing something slightly intrusive such as systemctl --user import-environment.
• Worked for applications started as root but but not for applications started as user. Might require some bug reporting against systemd or elsewhere.