apply_rlimits

Run commands and agent-written programs inside an operating-system boundary. See the guide.

zett_agent.sandbox.resources.apply_rlimits(steps)

Apply the steps. Runs in the child before exec, so it never raises.

The plan was made by the parent from this kernel’s own answers, so a failure here means the limit is gone in a way the parent cannot report through an exception. Nothing is raised into the child: the command has to start, and capabilities() already told the caller what this machine can do.

Parameters:

steps (tuple[RlimitStep, ...])

Return type:

None