launching-containers: add a section on ulimits

also change the HTTP_PROXY thing to not suggest creating a new service
file.