Apple quietly makes running Linux containers easier on Macs
Cgroups: accounting is not securityCgroups (control groups) limit and account for resource usage: CPU, memory, disk I/O, number of processes. They prevent a container from consuming all available memory or spinning up thousands of processes.
。关于这个话题，服务器推荐提供了深入分析
FirstFT: the day's biggest stories
process(chunk);