We only have 1 thread, that runs the whole bot, dev bot, and a website, with infrastructure for those. So a single user could easily block the whole production server, so not only jshell would go down, but the tj-bot and website.
With, cgroups, you can limit per container, so that doesn't work for us, because we would have many containers.
So we can use slices, to set a global limit on resources: https://unix.stackexchange.com/questions/537645/how-to-limit-docker-total-resources
We only have 1 thread, that runs the whole bot, dev bot, and a website, with infrastructure for those. So a single user could easily block the whole production server, so not only jshell would go down, but the tj-bot and website.
With, cgroups, you can limit per container, so that doesn't work for us, because we would have many containers.
So we can use slices, to set a global limit on resources: https://unix.stackexchange.com/questions/537645/how-to-limit-docker-total-resources