Hi,

That's my first post

I would like to run several processes in a Ubuntu server but they should be isolated because each process will be an app server running a Ruby app:

/app1/rails_app/thin start

I will have around 20 to 40 thin server running on different ports. I do not need new IPs, so I do not need new virtual machines. I would like to provide security using LXC, probably lxc-execute. I guess I could use:

lxc-execute -n app1 '/app1/rails_app/thin start' -f file.conf

In file.conf I would like CPU, memory and network limit, to avoid that a bad behaving app will interfere with the others. I found little documentation on the parameters to put on the config file (mainly using man lxc.conf). I understand I should use this formant:

lxc.cgroup.[subsystem name]

But where do it find [subsystem name]? Should I just read the kernel source code? I would need something like:

lxc.cgroup.cpus = 1 # 1 virtual cpu
lxc.cgroup.memory = 512 # 512mb memory limit
lxc.cgroup.network = 1000000 # 1mbit