openshift/origin-server — pull request #611 by markllama (2012-10-08 17:06:49+00:00)
Title: Origin server us2698 - node cgroup containment

This update adds cgroup containment to Openshift Origin nodes.

* create cgroup and configure for each gear as it is created
* confine gear processes as the gear services are started.
* update rules to confine new child processes as they start
* confine incoming shells in the oo-trap-user script

* Requires configuration of underlying cgroups.
* startup scripts use