How do you limit the resources consumed by a Docker container?

In Docker, limiting container resource consumption is crucial as it helps maintain system stability and prevents a single container from consuming excessive resources, which could affect other containers or the host system. Docker offers multiple ways to limit resource consumption, including CPU, memory, and disk I/O resources.

1. Limiting CPU Resources

Docker allows us to limit the number of CPUs a container can use via the --cpus parameter. For example, to restrict a container to use at most 1.5 CPU cores, run the following command:

bash
docker run --cpus=1.5 <image>

Additionally, the --cpu-shares parameter can be used to set the CPU weight. By default, each container has a weight of 1024. Adjusting this parameter affects the container's priority during CPU resource contention.

bash
docker run --cpu-shares=512 <image>

2. Limiting Memory Resources

For memory, use the --memory parameter to limit the maximum memory usage. For example, to restrict a container to use no more than 256MB of memory:

bash
docker run --memory=256m <image>

Furthermore, the --memory-swap parameter can be used to limit swap space usage, which is the sum of memory and swap space.

3. Limiting Disk I/O

Docker allows controlling the disk I/O priority of containers by setting the --blkio-weight parameter, which ranges from 10 to 1000. Higher values indicate higher priority.

bash
docker run --blkio-weight=300 <image>

4. Using cgroups for Limitation

Docker uses Linux cgroups (control groups) at the underlying level to limit resources. Advanced users can directly configure cgroups for finer-grained resource control, including CPU time, system memory, and network bandwidth.

5. Using Docker Compose

When using Docker Compose, you can specify resource limits for services in the docker-compose.yml file, for example:

yaml
version: '3'
services:
  app:
    image: my-app
    deploy:
      resources:
        limits:
          cpus: '0.50'
          memory: 50M
        reservations:
          cpus: '0.25'
          memory: 20M

This configuration allows setting both upper limits and reserved resources to ensure services have sufficient resources.

Conclusion

By appropriately limiting resource usage of Docker containers, system stability and efficiency can be improved. Docker's resource limitation features are highly flexible and can meet various scenario requirements. These limitations can be implemented via command-line tools or managed more conveniently using Docker Compose.