Platform & DevOps·Packaging: containers and images
the process is capped at half a CPU and a gigabyte by the kernel, and it has no idea — it still reports the host's numbers.
cgroups
Also calledcontrol groups, cgroup v2
The kernel feature that accounts for and limits a group of processes' CPU, memory, IO and PIDs. It is the half of containerisation that does resource control, and it is what a memory limit and a CPU limit are actually implemented as. Its most expensive side effect is that many runtimes read the host's CPU count rather than the cgroup's, so thread pools and garbage collectors size themselves for a machine the container cannot use.