問題文
A team wants to stop one container from consuming all of a host's memory. Which kernel facility addresses that?
選択肢
- Namespaces, because giving the container its own view of the system also means that the amount of each resource visible inside that view is fixed at the moment the view is created and cannot afterwards grow beyond it.
- The hypervisor, because memory limits are a property of virtual machines, so a host that runs nothing but containers has no way to cap anything.
- The container image, since the image records how much memory to use, and a container started from it could then never be given a different ceiling.
- Control groups, which account for and cap the resources that a group of processes may use.