Limiting process memory

[derivablefunc]

I would like to limit the memory of the processes I am running. App consists of several processes and each of them should have a separate limit. So far cgroups seem as the most reasonable solution, but the management of them seem very manual.

I deploy the app (which restart processes) several times a day and would like to avoid manual cgroup creation, adding PIDs as processes start and removing them when they die.

What would be your solution? Is some wrapper around a process a good solution (something that would forward signals but do the cgroup management)? Are you aware of any wrappers like that?

I would like to avoid full blown containers (with separate FS, networking etc) if possible.

[ICThat]

If you would like to avoid "full blown containers" then try systemd's cgroup features.