reza/devops-infrastructure
Watch
1
0
Fork
You've already forked devops-infrastructure
 0
Code Issues 22 Pull requests Projects Releases Packages Wiki Activity Actions

Resource limit & perlindungan container (caps, read-only, backoff) #14

New issue
Open
opened 2026-10-11 06:57:53 +00:00 by reza · 0 comments
reza commented 2026-10-11 06:57:53 +00:00
Owner
Copy link

Usulan: via Quadlet: MemoryMax, CPUQuota, restart backoff, NoNewPrivileges=true, drop capabilities, read-only rootfs bila memungkinkan, user non-root.

Selesai bila:

  • Limit mem/CPU tiap container
  • Hardening diterapkan & teruji
**Usulan:** via Quadlet: `MemoryMax`, `CPUQuota`, restart backoff, `NoNewPrivileges=true`, drop capabilities, read-only rootfs bila memungkinkan, user non-root. **Selesai bila:** - [ ] Limit mem/CPU tiap container - [ ] Hardening diterapkan & teruji
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
No results found.
Labels
Clear labels   
area/automation
IaC, CI/CD, provisioning

  
area/backup
Backup, retensi, restore, DR

  
area/governance
Dokumen, proses, review, runbook

  
area/observability
Metrik, log, alerting, uptime

  
area/reliability
HA, SPOF, healthcheck, resource limit

  
area/security
Hardening, secret, firewall, supply chain

  
priority/p0
Kritis — kerjakan segera

  
priority/p1
Penting — segera setelah p0

  
priority/p2
Nice to have / jangka panjang

No labels
area/automation
area/backup
area/governance
area/observability
area/reliability
area/security
priority/p0
priority/p1
priority/p2
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
reza/devops-infrastructure#14
No description provided.