Why you can't rely on system calls to obtain limits, when running an application in a container

from blog Kevin Boone's website, | ↗ original
The notion of resource limits (on memory, CPU, etc) has never been very well-defined, and the use of container-based deployment makes the situation worse. This article describes why, and what can be done about it.