I have 14939 users, and […] about 74695 rctl rules
g
/group
subjects. I gather your winbind users are members of a certain group?user
instead of group
.man rctl
says: subject defines the kind of entity the rule applies to. It can
be either process, user, loginclass, or jail.
# rctl -a group:studs:cputime:sigkill=3600/process
rctl: failed to add rule 'group:studs:cputime:sigkill=3600/process': Invalid argument
No, I am sorry. I got confused by dead code in the racct(8) tool implementation; I should have looked at the implementation of the rctl_add_rule(2) system call. Apparently there are (or were) intentions to addI'm sorry […] AFAIK rctl supports limits only for login classes, not groups.
group
support, but only low effort preparations were made.