cmc/gallery

Container resource limits and user #5

closed cmc opened this on 2026-09-26 00:28 UTC

Discussion

cmc 2026-09-26 00:28 UTC
  • render.New(*cache, runtime.NumCPU()) ignores container CPU quotas; use runtime.GOMAXPROCS(0).
  • Concurrent magick runs on large sources have no -limit memory / -limit map; can OOM a small host.
  • The image runs as root, so ./cache on the host is root-owned. Add a non-root user and document the UID for the volume.

closed by cmc in commit 2893c158e9: Fix v1 follow-ups (!3)

2026-09-26 19:08 UTC