Am 12.12.23 um 12:55 schrieb Thomas Lamprecht: > Meh, I think the application that actually can use many FDs, which are not > *that* many, should just raise it to the highest limit possible, so I'd > rather do this inside QEMU. > Doing such stuff from the outside is almost always a bit more maintenance > burden, e.g., cue to our various hacks over multiple releases for correctly > waiting for the VMID scope to exit. > > We can just patch it in for now downstream while checking if upstream would > accept that, IMO in modern times FD limits are not much a protection, > especially if raised from 1024 to a few hundreds of thousands, especially > as in QEMU the amount isn't really controllable via the guest (i.e., > unprivileged code).
Okay, then I'll prepare a QEMU patch and also ask upstream. _______________________________________________ pve-devel mailing list [email protected] https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-devel
