<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> </head> <body text="#000000" bgcolor="#FFFFFF"> Hi all, Does the PIDs running inside the systemd-nspawn slice inherit the cgroup/slice properties ? I am running a systemd-nspawn container with 2 firefox instances (two separate ones) and also a lot of other processes and I have given an option --property MemoryMax=10M. I can see that at the top-level systemd-spawn is showing this ... (started as systemd-nspawn --machine bcv.test --capability=CAP_IPC_LOCK -jbD /var/work/test/run --bind=/dev/net/tun --private-network --network-bridge=virt --bind /sys --bind-ro=/lib/modules/ --bind /dev/kmsg:/dev/kmsg --property MemoryMax=10M --slice=test.slice) <address><tt>Transient: yes</tt></address> <address><tt> Active: active (running) since Mon 2019-11-04 10:44:12 GMT; 21min ago</tt></address> <address><tt> Tasks: 0 (limit: 16384)</tt></address> <address><tt> Memory: 6.9M (max: 10.0M)</tt></address> Whereas I am struggling to believe that two firefox instances(with some tabs active on them) and a lot of processes (as reported in the tree under the systemctl status for that scope ) are only using 6.9M in total. How much ever processes I start, they do not seem to have any effect on the "Memory: 6.9M" Am I missing something ? Please correct me. Thanks. Regards Bhasker C V </body> </html>