What methods can be used to limit resource usage inside a Linux container?

Resource limitations within a Linux container can be implemented using the following methods:

1. Using cgroups (control groups) — a Linux kernel mechanism for limiting and isolating resources (CPU, memory, disk, network). Docker containers and others use cgroups to manage resources.

2. Container run parameters — for example, in Docker, you can set limits:

   • --memory — memory limit
   • --cpus — CPU limit
   • --blkio-weight — disk I/O weight

3. Namespaces — isolate process space, network, filesystem, which indirectly helps manage resources.

4. Limit ranges and Resource quotas in Kubernetes — limits and resource requests can be set for containers in a cluster.

Example of running a Docker container with memory and CPU limits:

docker run --memory=512m --cpus=1.5 myimage

This will limit the container to 512 MB of RAM and 1.5 CPUs.