Application-server container memory limits

README.md

@@ -221,6 +221,14 @@ To run and debug your app locally:
 
 5. **Access your app**: Once the container is running, you can access it at `localhost:<port>` where `<port>` is the port you specified in your configuration (e.g., `localhost:8888` for Jupyter, `localhost:7681` for ttyd)
 
+## Container Resource Limits
+
+Memory and shared memory limits are automatically configured to prevent OOM conditions on the host VM.
+
+**Memory Limit**: Reserves 10% of total memory for the host, floored at 1GB and capped at 4GB. Container gets the remainder.
+
+**Shared Memory**: Default is 64m. Override via `shm-size` metadata.
+
 ## How to use
 
 The `.devcontainer.json` file in the custom app folder (e.g. r-analysis/) contains the custom app configuration.

src/aou-sas/devcontainer-template.json

@@ -20,6 +20,11 @@
       "type": "string",
       "description": "Shared memory size for the application-server container",
       "default": "64m"
+    },
+    "memoryLimit": {
+      "type": "string",
+      "description": "Memory limit for the application-server container",
+      "default": "8192m"
     }
   }
 }

src/aou-sas/docker-compose.yaml

@@ -5,6 +5,7 @@ services:
   app:
     container_name: "application-server"
     shm_size: "${templateOption:shmSize}"
+    mem_limit: "${templateOption:memoryLimit}"
     build:
       context: .
       additional_contexts:

src/custom-workbench-jupyter-template/devcontainer-template.json

@@ -22,6 +22,11 @@
       "type": "string",
       "description": "Shared memory size for the application-server container",
       "default": "64m"
+    },
+    "memoryLimit": {
+      "type": "string",
+      "description": "Memory limit for the application-server container",
+      "default": "8192m"
     }
   },
   "platforms": ["Any"]

src/custom-workbench-jupyter-template/docker-compose.yaml

@@ -4,6 +4,7 @@ services:
   app:
     container_name: "application-server"
     shm_size: "${templateOption:shmSize}"
+    mem_limit: "${templateOption:memoryLimit}"
     build:
       context: .
       additional_contexts:

src/example/devcontainer-template.json

@@ -20,6 +20,11 @@
       "type": "string",
       "description": "Shared memory size for the application-server container",
       "default": "64m"
+    },
+    "memoryLimit": {
+      "type": "string",
+      "description": "Memory limit for the application-server container",
+      "default": "8192m"
     }
   }
 }

src/example/docker-compose.yaml

@@ -3,6 +3,7 @@ services:
     # The container name must be "application-server"
     container_name: "application-server"
     shm_size: "${templateOption:shmSize}"
+    mem_limit: "${templateOption:memoryLimit}"
     # This can be either a pre-existing image or built from a Dockerfile
     image: "quay.io/jupyter/base-notebook"
     # build:

src/jupyter-aou/devcontainer-template.json

@@ -22,6 +22,11 @@
       "type": "string",
       "description": "Shared memory size for the application-server container",
       "default": "64m"
+    },
+    "memoryLimit": {
+      "type": "string",
+      "description": "Memory limit for the application-server container",
+      "default": "8192m"
     }
   },
   "platforms": ["Any"]

src/jupyter-aou/docker-compose.yaml

@@ -5,6 +5,7 @@ services:
   app:
     container_name: "application-server"
     shm_size: "${templateOption:shmSize}"
+    mem_limit: "${templateOption:memoryLimit}"
     build:
       context: .
       additional_contexts:

src/jupyter-template/devcontainer-template.json

@@ -32,6 +32,11 @@
       "type": "string",
       "description": "Shared memory size for the application-server container",
       "default": "64m"
+    },
+    "memoryLimit": {
+      "type": "string",
+      "description": "Memory limit for the application-server container",
+      "default": "8192m"
     }
   },
   "platforms": ["Any"]

src/jupyter-template/docker-compose.yaml

@@ -3,6 +3,7 @@ services:
   app:
     container_name: "application-server"
     shm_size: "${templateOption:shmSize}"
+    mem_limit: "${templateOption:memoryLimit}"
     image: "${templateOption:containerImage}"
     user: "jupyter"
     restart: always

src/nemo_jupyter/devcontainer-template.json

@@ -22,6 +22,11 @@
       "type": "string",
       "description": "Shared memory size for the application-server container",
       "default": "64m"
+    },
+    "memoryLimit": {
+      "type": "string",
+      "description": "Memory limit for the application-server container",
+      "default": "8192m"
     }
   },
   "platforms": ["Any"]

src/nemo_jupyter/docker-compose.yaml

@@ -3,6 +3,7 @@ services:
   app:
     container_name: "application-server"
     shm_size: "${templateOption:shmSize}"
+    mem_limit: "${templateOption:memoryLimit}"
     build:
       context: .
       target: nemo

src/nemo_jupyter_aou/devcontainer-template.json

@@ -22,6 +22,11 @@
       "type": "string",
       "description": "Shared memory size for the application-server container",
       "default": "64m"
+    },
+    "memoryLimit": {
+      "type": "string",
+      "description": "Memory limit for the application-server container",
+      "default": "8192m"
     }
   },
   "platforms": ["Any"]

src/nemo_jupyter_aou/docker-compose.yaml

@@ -4,6 +4,7 @@ services:
   app:
     container_name: "application-server"
     shm_size: "${templateOption:shmSize}"
+    mem_limit: "${templateOption:memoryLimit}"
     build:
       context: ../nemo_jupyter
       additional_contexts:

src/pgweb/devcontainer-template.json

@@ -20,6 +20,11 @@
       "type": "string",
       "description": "Shared memory size for the application-server container",
       "default": "64m"
+    },
+    "memoryLimit": {
+      "type": "string",
+      "description": "Memory limit for the application-server container",
+      "default": "8192m"
     }
   }
 }

src/pgweb/docker-compose.yaml

@@ -3,6 +3,7 @@ services:
     # The container name must be "application-server"
     container_name: "application-server"
     shm_size: "${templateOption:shmSize}"
+    mem_limit: "${templateOption:memoryLimit}"
     # This can be either a pre-existing image or built from a Dockerfile
     build:
       context: .

src/playground/devcontainer-template.json

@@ -14,6 +14,11 @@
       "type": "string",
       "description": "Shared memory size for the application-server container",
       "default": "64m"
+    },
+    "memoryLimit": {
+      "type": "string",
+      "description": "Memory limit for the application-server container",
+      "default": "8192m"
     }
   }
 }

src/playground/docker-compose.yaml

@@ -3,6 +3,7 @@ services:
     # The container name must be "application-server"
     container_name: "application-server"
     shm_size: "${templateOption:shmSize}"
+    mem_limit: "${templateOption:memoryLimit}"
     image: "caddy:2.11-alpine"
     restart: always
     volumes:

src/r-analysis-aou/devcontainer-template.json

@@ -22,6 +22,11 @@
       "type": "string",
       "description": "Shared memory size for the application-server container",
       "default": "64m"
+    },
+    "memoryLimit": {
+      "type": "string",
+      "description": "Memory limit for the application-server container",
+      "default": "8192m"
     }
   },
   "platforms": ["Any"]

src/r-analysis-aou/docker-compose.yaml

@@ -4,6 +4,7 @@ services:
   app:
     container_name: "application-server"
     shm_size: "${templateOption:shmSize}"
+    mem_limit: "${templateOption:memoryLimit}"
     build:
       context: .
       additional_contexts:

src/r-analysis/devcontainer-template.json

@@ -22,6 +22,11 @@
       "type": "string",
       "description": "Shared memory size for the application-server container",
       "default": "64m"
+    },
+    "memoryLimit": {
+      "type": "string",
+      "description": "Memory limit for the application-server container",
+      "default": "8192m"
     }
   },
   "platforms": ["Any"]

src/r-analysis/docker-compose.yaml

@@ -2,6 +2,7 @@ services:
   app:
     container_name: "application-server"
     shm_size: "${templateOption:shmSize}"
+    mem_limit: "${templateOption:memoryLimit}"
     image: "ghcr.io/rocker-org/devcontainer/tidyverse@sha256:3a9ecbed900f17da528cdb17c3ddc43045fc9b4be7dbd8c61cb7b8a6439bfa6b"
     restart: always
     volumes:

src/test-app-secrets/devcontainer-template.json

@@ -6,7 +6,10 @@
   "options": {
     "cloud": {
       "type": "string",
-      "enum": ["gcp", "aws"],
+      "enum": [
+        "gcp",
+        "aws"
+      ],
       "default": "gcp",
       "description": "Cloud provider (gcp or aws)"
     },
@@ -20,6 +23,11 @@
       "type": "string",
       "description": "Shared memory size for the application-server container",
       "default": "64m"
+    },
+    "memoryLimit": {
+      "type": "string",
+      "description": "Memory limit for the application-server container",
+      "default": "8192m"
     }
   }
 }

src/test-app-secrets/docker-compose.yaml

@@ -4,6 +4,7 @@ services:
   app:
     container_name: "application-server"
     shm_size: "${templateOption:shmSize}"
+    mem_limit: "${templateOption:memoryLimit}"
     build:
       context: .
       additional_contexts:

src/test-app/devcontainer-template.json

@@ -20,6 +20,11 @@
       "type": "string",
       "description": "Shared memory size for the application-server container",
       "default": "64m"
+    },
+    "memoryLimit": {
+      "type": "string",
+      "description": "Memory limit for the application-server container",
+      "default": "8192m"
     }
   }
 }

src/test-app/docker-compose.yaml

@@ -3,6 +3,7 @@ services:
     # The container name must be "application-server"
     container_name: "application-server"
     shm_size: "${templateOption:shmSize}"
+    mem_limit: "${templateOption:memoryLimit}"
     # This can be either a pre-existing image or built from a Dockerfile
     image: "docker/getting-started"
     # build:

src/ubuntu-example/devcontainer-template.json

@@ -20,6 +20,11 @@
       "type": "string",
       "description": "Shared memory size for the application-server container",
       "default": "64m"
+    },
+    "memoryLimit": {
+      "type": "string",
+      "description": "Memory limit for the application-server container",
+      "default": "8192m"
     }
   }
 }

src/ubuntu-example/docker-compose.yaml

@@ -3,6 +3,7 @@ services:
     # The container name must be "application-server"
     container_name: "application-server"
     shm_size: "${templateOption:shmSize}"
+    mem_limit: "${templateOption:memoryLimit}"
     # This can be either a pre-existing image or built from a Dockerfile
     image: "mcr.microsoft.com/devcontainers/base:ubuntu-24.04"
     # build:

src/vscode-docker/devcontainer-template.json

@@ -22,6 +22,11 @@
       "type": "string",
       "description": "Shared memory size for the application-server container",
       "default": "64m"
+    },
+    "memoryLimit": {
+      "type": "string",
+      "description": "Memory limit for the application-server container",
+      "default": "8192m"
     }
   },
   "platforms": ["Any"]

src/vscode-docker/docker-compose.yaml

@@ -3,6 +3,7 @@ services:
   app:
     container_name: "application-server"
     shm_size: "${templateOption:shmSize}"
+    mem_limit: "${templateOption:memoryLimit}"
     build:
       context: .
       dockerfile: Dockerfile

src/vscode-with-llm/devcontainer-template.json

@@ -22,6 +22,11 @@
       "type": "string",
       "description": "Shared memory size for the application-server container",
       "default": "64m"
+    },
+    "memoryLimit": {
+      "type": "string",
+      "description": "Memory limit for the application-server container",
+      "default": "8192m"
     }
   },
   "platforms": ["Any"]

src/vscode-with-llm/docker-compose.yaml

@@ -3,6 +3,7 @@ services:
   app:
     container_name: "application-server"
     shm_size: "${templateOption:shmSize}"
+    mem_limit: "${templateOption:memoryLimit}"
     build:
       context: .
       dockerfile: Dockerfile

src/vscode/devcontainer-template.json

@@ -22,6 +22,11 @@
       "type": "string",
       "description": "Shared memory size for the application-server container",
       "default": "64m"
+    },
+    "memoryLimit": {
+      "type": "string",
+      "description": "Memory limit for the application-server container",
+      "default": "8192m"
     }
   },
   "platforms": ["Any"]

src/vscode/docker-compose.yaml

@@ -3,6 +3,7 @@ services:
   app:
     container_name: "application-server"
     shm_size: "${templateOption:shmSize}"
+    mem_limit: "${templateOption:memoryLimit}"
     build:
       context: .
       dockerfile: Dockerfile

src/workbench-jupyter-docker/devcontainer-template.json

@@ -22,6 +22,11 @@
       "type": "string",
       "description": "Shared memory size for the application-server container",
       "default": "64m"
+    },
+    "memoryLimit": {
+      "type": "string",
+      "description": "Memory limit for the application-server container",
+      "default": "8192m"
     }
   },
   "platforms": ["Any"]

src/workbench-jupyter-docker/docker-compose.yaml

@@ -3,6 +3,7 @@ services:
   app:
     container_name: "application-server"
     shm_size: "${templateOption:shmSize}"
+    mem_limit: "${templateOption:memoryLimit}"
     image: "us-central1-docker.pkg.dev/verily-workbench-public/apps/workbench-jupyter:latest"
     user: "jupyter:${DOCKER_GID}"
     restart: always

src/workbench-jupyter-parabricks-aou/devcontainer-template.json

@@ -22,6 +22,11 @@
       "type": "string",
       "description": "Shared memory size for the application-server container",
       "default": "64m"
+    },
+    "memoryLimit": {
+      "type": "string",
+      "description": "Memory limit for the application-server container",
+      "default": "8192m"
     }
   },
   "platforms": ["Any"]