From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 10FFA15852A for ; Sat, 24 Aug 2024 00:42:14 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id AFD7AE2A40; Sat, 24 Aug 2024 00:42:07 +0000 (UTC) Received: from mail-yb1-xb34.google.com (mail-yb1-xb34.google.com [IPv6:2607:f8b0:4864:20::b34]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 70384E2A3B for ; Sat, 24 Aug 2024 00:42:07 +0000 (UTC) Received: by mail-yb1-xb34.google.com with SMTP id 3f1490d57ef6-e13d5cbc067so2587364276.2 for ; Fri, 23 Aug 2024 17:42:07 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1724460126; x=1725064926; darn=lists.gentoo.org; h=content-transfer-encoding:in-reply-to:mime-version:user-agent:date :message-id:autocrypt:from:references:to:subject:from:to:cc:subject :date:message-id:reply-to; bh=h/HICE/+u5YRM7Fgqi5yoD+yZbv2l36yeKwyvkcRJMY=; b=W9M+q9vRgzPTOkbj8CJcfYJmRcrhG3Ogz79taYcMCb5eBGgiHJ5+eESt33mL9lSliV oWY7lfAB3RmDKgPal4tBuBBFHwsN7QD3vJIaazuMH2W1OyhVGtLk3VzvUQGdJ4oxx4Fa jxLj8wnLpDpf4O5hZ28hGmpyAxRiq2bHFUYL3UeFJ4X/k6vyotWDf/QCFyHV5DPEbTFd AoMZjB6EsQnslJmQqJHbC8wh3lyadOFK0vYY0J7Qnd3CR4vcgygzOo9fYngpBAWtDkrX 3en4WsGXThiRkZlQa+eng94sengUgny8vgL8DOlTDoUMP/Mpi//etmlkf7r0bLiWzNqu 4Y8w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1724460126; x=1725064926; h=content-transfer-encoding:in-reply-to:mime-version:user-agent:date :message-id:autocrypt:from:references:to:subject:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=h/HICE/+u5YRM7Fgqi5yoD+yZbv2l36yeKwyvkcRJMY=; b=Dm+WhRRt7cgQ+zKCg9dYB2aQZzSa/KT0ixKn1tN1QamBmrAq49N/msPvZV//o5hjuP Z/IzPjV5b32R/48cRW81trmHwAl943adebu98DjSxZOM3rqV58K14DfVB1PI/pM+n6iz Uv58dZSJk2+WfvlNPKL56coxhOJ9KgKk+StYDfsHzp+MBt60rGoXhnDhRCheeRnJ/dhd qPV27mafcLZaxOOvQkrr/W9lxATLFMmrUASxQNtbyeNczk6dhwDcbbADF7iV6zbBaQ6P /A4/RehH5Ad8Y7DlE2PIozyCA/pLV9xaVkxGFW/F7OiEc5b3kTiv7onAAsowqZaxaIMT 1JBw== X-Gm-Message-State: AOJu0Yw5dbDOP4ERNO8vGJOlQfA6Mf+JdnhpkAGKghOIt0vjhhLDq6j7 y/uH3no+A/pSgFslfHtW/0pMNoP7u+FFieAReN6iLm4CUtgvBDyD X-Google-Smtp-Source: AGHT+IEhrnOjySBZy+AHYSwuDlCBGESOtvJgeKauk2A0YKDxT65Grk+uxmcKE/jYwk+ibVQoMsuuDw== X-Received: by 2002:a05:6902:1b09:b0:e0b:43a0:3ce with SMTP id 3f1490d57ef6-e17a868b00dmr4271555276.57.1724460126335; Fri, 23 Aug 2024 17:42:06 -0700 (PDT) Received: from [10.8.8.2] ([138.199.2.131]) by smtp.gmail.com with ESMTPSA id 3f1490d57ef6-e178e67e660sm894536276.54.2024.08.23.17.42.05 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Fri, 23 Aug 2024 17:42:06 -0700 (PDT) Subject: Re: [gentoo-user] Firefox, Seamonkey to if I can, and memory limits. To: gentoo-user@lists.gentoo.org References: From: Dale Autocrypt: addr=rdalek1967@gmail.com; prefer-encrypt=mutual; keydata= mQINBGFSciYBEADcEGMyJBSuavKO/XKUVvgkxck7Nl8Iuu8N2lcnRji/rSKg5c1Acix1ll9i oW8JBCHwvn0+Xy60BvEsqcup3YSHw5STl/bR1ePEehtnYrg8FdjdS91+B805RfnKMm69rFVI wLSBHQrSG1yxHd8CloWoEdhmVtP24buajbh114bgXd9ahtpZrCVMrWdWYUg2mEXguGV5uNAh Rf8SWxDNc79w24JxsV34a8niMUYMjzWr0rafIbzk732X38vGjVMLo/2mMpkbp9mPp++LHoY+ 0Pet8zxxdXPJSCd475kza1AD+hhSyBZXB9yknYWgyY3cZe1rGmooJSi2KX4QxO7npwLThcO1 be6KKRkd35+Fi/a1BzVOHsZMiK/gcwxEFoMd27gir4ehaeHJfFXl+65w4hj0EsOZSxrJrm2C R50g5By2czSKP1bADEygFNpIJj51AR+wM88NImG2RPtlT2maYBzazvF05g65cdHXGp1C7W5P wwwKU2DgABB2t7N7z5A69LnryBRw4zUYDRRYLTYlBlYgg+xILm2c0OrBdxJgLJa7JE50Eo25 d3PFwt9J0gYvqy6sPFLl9So0sDg9zm0hKQtXOP5kgropUFGrNoJI+mjwF4rYLRBVzZwNAvlO OhEvHubBo3mEllv4x+FeptwXZxlk7gUsdqI8AxnFB8K9wi6FVQARAQABtBtEYWxlIDxyZGFs ZWsxOTY3QGdtYWlsLmNvbT6JAk4EEwEIADgCGyMFCwkIBwIGFQoJCAsCBBYCAwECHgECF4AW IQQSG1h01ruv/WNXc3Q3RqOgiQH1GwUCYVJy8gAKCRA3RqOgiQH1G+waEACeTZCt77jnRAmQ AV7otKuZekDWiLi3Eig8tj5ZJiCNSYA/hIxzmexRP0GMqjitcXK1iGwWcvMzzvIq30GAjIfB 4BR38cnXbtBa6fNewiT7QaZe/Hn6yBRldXNQypzbHy+/o27bUEy+oX4rE7etUgEHQAjuw7xz XFWg4tH1/KJvsOVY5upnWc5LdxYhsuQ3dQD4b22GsK0pOBDfb9PiirYM8eGKvrVuq4E/c75z lDDFhINl18lNZ9D0ZFL3IkTjHsAAqFH9uhnnEB8CWdHbBewPEfRaOhBUYWZ3Q8uTkmDgZT8q D9jlvLEdw7Nh2ApdxoepnI/4D+ql2Gr4DtH7SEPydr5gcf1Qr/2bXRb1hAYnIVcbncs/Bm3Z bkRKPVWMfE3Fusa+p5hMzixk0YysMaTHlc7mYRYAEZGnPMXnmcCbetwARU7A0yz1M1kCMOAQ Lsz8KH5kv3cRenMB6SFfjND2JfAK61H5TtnPq3L8noS2ZykRYxq9Nm3X64O1tJojIKBoZFr8 AwYNCvqC6puUyGMuzHPh7jPof8glfrrEKIYUvNPGMDoVX3IGetxh/9l6NcxgFA4JGoR+LS3C zmeNrwlllAe3OEUfKoWVQ+pagpSdM+8hHolaSda4Ys66Z3fCR4ZvcTqfhTAVskpqdXa4isAk 7vTcXu3L499ttywEp7rJTbkCDQRhUnImARAAncUdVhmtRr59zqpTUppKroQYlzR0jv8oa7DG K4gakTAT2N7evnI9wpssmzyVk8VEiLzhnFQ/Ol3FRt6hZCXDJt0clyHOyTfvz/MNFttWuZTc mLpSvmRR6VRjAH+Tz3Eam2xUw3PGuH97BcXQ3NnX3msv1UDxtxxBu6e2YrdeOhrCUSgzokcJ 98ChUNy934cgepPybAI12lSWqVFQ1aG7jExZfiUk+333fPSDbpKoZbTW5YJLXbycmW/C1IWL qYQyNjRWKaGoJtUWFhhmNiOQct7n90aKivNVPavmN+UQ9LlMaINtf9T6XCzLfogCFsulDCDJ 0yNQLDTurHaB4E71xoctgXmLLq9z1RQ0W2XiVAAOZQj6K3+d0AOUjDhCQ2QW8dUSq0ckkZXV DKVJOGS8Nhf2eIWIqRnP3AcUiiaiFGqUaVUmUAZ6h/oJmgghEu/1S+pcuUKU5i69+XCZ3hH2 Jzwzbf7K+FAIkOhCfHncF8i1N1pk00pOVykNnqHTfFo3qFusHt0ZWgXVnnn4pYdXqZNoDhvF BRE5Vm4k/k96Pw8HRx6Os6eFSRrlqGzRgqsu86FekxusXB9UGv4lJhtU/J+8MRWsh22K718s DbQnABicGKFz1qQlWvcf59oTByhLINJCBt1WXl+TzJDXepr3QSkqmK41dO9Hob97C9dMiK8A EQEAAYkCNgQYAQgAIAIbDBYhBBIbWHTWu6/9Y1dzdDdGo6CJAfUbBQJhUnLyAAoJEDdGo6CJ AfUbVHIQAKSWw620vPhR3A/njU2z77F3z/Jk+HTKdE3fIyWSWdkYN7CBFL0NguOMP30WZ+qE sJhZu7T5hf251MwQUUt27xlfnKYOmQs7CqONlXuXlGZI6WufrUjxNcVz+5gJsqvUWuuJWsgg sDmE92IBnfG/f81fPHWQyfr/SF4wYDMyoFp5xCCQpp1zB63iuFvvrhxBkEHzmbRtVDOhl0Xp BVEDR1w3QRACw9QJD/KM05Czv9JNQYlwinWO/OaQ9cMlUpKLgswUPg9IZ5vucxScfuAUA5uC B1jlAQ8ZPlVukBmbEv5RGOv+lpuEbA3YDMVtEeH4YMFbjt/+vH3Cr2vTbp5JlpByLburJEH0 WXZLUawEfUsZvVwpOuJK75vaa2HYXee+Cb3iCIzwfIfctdlqzUcbGRczlRNM59hpvj4z29Gh 3kAxVHItAYq54ikxQ9l4hQ8s9sLYPbX/WtcBxNX8crBSw0FLnmzGleVEtBHyqtt5CLzQNgrj GYWl1vKDUmRPw1CdZ1c+fMN9CY11jOM5B5ZnqZWfDeVYO2iJ5SuvTycChexCb8WYn1bdCBIo bBtga2RBXbVt4Mh9E4owsszefn51MwfjXxB20Fc5k3GU1AVpTCMs3ayYCzo0b2pvEvdjtDcA CYLEFPWgaFX9iQAM/CDfKvTtvgGWpqtCL2raq/mQoJEU Message-ID: <5f412695-d234-4e7d-445b-94dc43e03a99@gmail.com> Date: Fri, 23 Aug 2024 19:42:05 -0500 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Firefox/91.0 SeaMonkey/2.53.18.1 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Archives-Salt: 1605ba2e-817c-442f-abf2-c1c70eb2f655 X-Archives-Hash: efbb8e1aac09b23e2eb162492ef24604 Matt Jolly wrote: > Hi, > > Cgroups are the answer. If you're on systemd you could try making a > `slice` for Firefox that might look a bit like this: > > /etc/systemd/system/user-firefox.slice > > ``` > [Unit] > Description=Firefox Slice > Before=slices.target > > [Slice] > MemoryAccounting=true > MemoryLimit=512M > ``` > > Then you can run  > > ``` > systemctl daemon-reload && systemctl restart user-firefox.slice > ``` > > Then launch Firefox in the slice like so > > ``` > systemd-run -q --user --scope --unit ff \ >   --slice user-firefox -- firefox --profile myprofile > ``` > > Which will apply the limits in the slice (check the docs, there's all > sorts) to anything running within it. You can enable the slice and run > Firefox (or anything else you want to limit, really). > > You may need to adapt these commands a little, I wrote this on mobile. :) > > I use slices on HPC to limit users from monopolising interactive > nodes, and our batch jobs kill anything that exceeds requested memory > (hope that wasn't 100h into a job!). I do this on login with user > slices but the concept is the same. > > Here's the docs on slice/scope settings: > https://www.freedesktop.org/software/systemd/man/latest/systemd.resource-control.html# > > You could also try something like this: > https://github.com/mk-fg/fgtk#cgrc > > You can directly do cgroups on openrc... Probably? I've never had to > worry about it. > > Cheers, > > Matt > I still use openrc.  I'll look around and see what I can find.  Now I know what to look for.  Thing is, not sure I use cgroups either, unless it is on by default.   o_O Dale :-)  :-)