Add docker-compose CPU limits

OWASP · Feb 14, 2024 · 2e3586d · 2e3586d
1 parent 6665f35
commit 2e3586d
Show file tree

Hide file tree

Showing 4 changed files with 80 additions and 0 deletions.
diff --git a/docker-compose.insecureinc.yml b/docker-compose.insecureinc.yml
@@ -3,6 +3,14 @@ version: "3.7"
 services:
   insecureinc:
     image: securecodingdojo/insecure.inc
+    deploy:
+      resources:
+        limits:
+          cpus: "0.9"
+          memory: 512M
+        reservations:
+          cpus: "0.9"
+          memory: 512M
     build:
       context: ./insecureinc
       dockerfile: Dockerfile.insecureinc

diff --git a/docker-compose.trainingportal.yml b/docker-compose.trainingportal.yml
@@ -3,6 +3,14 @@ version: "3.7"
 services:
   trainingportal:
     image: securecodingdojo/trainingportal
+    deploy:
+      resources:
+        limits:
+          cpus: "0.9"
+          memory: 512M
+        reservations:
+          cpus: "0.9"
+          memory: 512M
     restart: "always" #change to always if you want the image to auto start
     build:
       context: ./trainingportal

diff --git a/docker-compose.yml b/docker-compose.yml
@@ -3,6 +3,14 @@ version: "3.7"
 services:
   insecureinc:
     image: securecodingdojo/insecure.inc
+    deploy:
+      resources:
+        limits:
+          cpus: "0.3"
+          memory: 256M
+        reservations:
+          cpus: "0.3"
+          memory: 256M
     build:
       context: ./insecureinc
       dockerfile: Dockerfile.insecureinc
@@ -16,6 +24,14 @@ services:
 
   trainingportal:
     image: securecodingdojo/trainingportal
+    deploy:
+      resources:
+        limits:
+          cpus: "0.3"
+          memory: 256M
+        reservations:
+          cpus: "0.3"
+          memory: 256M
     restart: "always" #change to always if you want the image to auto start
     build:
       context: ./trainingportal
@@ -34,6 +50,14 @@ services:
 
   host1:
     image: securecodingdojo/hackerden-host1
+    deploy:
+      resources:
+        limits:
+          cpus: "0.1"
+          memory: 128M
+        reservations:
+          cpus: "0.1"
+          memory: 128M
     build:
       context: ./hackerden
       dockerfile: Dockerfile.host1
@@ -47,6 +71,14 @@ services:
 
   host2:
     image: securecodingdojo/hackerden-host2
+    deploy:
+      resources:
+        limits:
+          cpus: "0.1"
+          memory: 128M
+        reservations:
+          cpus: "0.1"
+          memory: 128M
     build:
       context: ./hackerden
       dockerfile: Dockerfile.host2
@@ -60,6 +92,14 @@ services:
 
   front:
     image: securecodingdojo/hackerden-front
+    deploy:
+      resources:
+        limits:
+          cpus: "0.2"
+          memory: 128M
+        reservations:
+          cpus: "0.2"
+          memory: 128M
     build:
       context: ./hackerden
       dockerfile: Dockerfile.front

diff --git a/hackerden/docker-compose.yml b/hackerden/docker-compose.yml
@@ -6,6 +6,14 @@ version: "3.8"
 services:
   host1:
     image: securecodingdojo/hackerden-host1
+    deploy:
+      resources:
+        limits:
+          cpus: "0.2"
+          memory: 128M
+        reservations:
+          cpus: "0.2"
+          memory: 128M
     build:
       context: .
       dockerfile: Dockerfile.host1
@@ -19,6 +27,14 @@ services:
 
   host2:
     image: securecodingdojo/hackerden-host2
+    deploy:
+      resources:
+        limits:
+          cpus: "0.2"
+          memory: 128M
+        reservations:
+          cpus: "0.2"
+          memory: 128M
     build:
       context: .
       dockerfile: Dockerfile.host2
@@ -34,6 +50,14 @@ services:
 
   front:
     image: securecodingdojo/hackerden-front
+    deploy:
+      resources:
+        limits:
+          cpus: "0.6"
+          memory: 256M
+        reservations:
+          cpus: "0.6"
+          memory: 256M    
     build:
       context: .
       dockerfile: Dockerfile.front