[vmm]: support sandbox cgroup management in the host

fix: #51

reason:
1. limit the vm process resource usage in the specified cgroup dir
2. support pod_overhead conception actually, which limits the non-vcpu
type threads of vm process into pod_overhead cgroup dir and set the
pod_overhead resources limit in this cgroup dir.

Signed-off-by: flyflypeng <flyflyflypeng@gmail.com>

.github/workflows/ci.yml

@@ -63,5 +63,7 @@ jobs:
         if: ${{ matrix.wasmEdge }}
         run: curl -sSf https://raw.githubusercontent.com/WasmEdge/WasmEdge/master/utils/install.sh | bash -s -- -v ${{ matrix.wasmEdge }} >> /dev/null
       - name: Test
+        env:
+          RUST_BACKTRACE: full
         working-directory: ${{ matrix.directories }}
         run: sudo -E $(command -v cargo) test --all-features

vmm/sandbox/Cargo.toml

@@ -39,10 +39,12 @@ uuid = { version = "1.1.2", features = ["v4"] }
 unshare = { version = "0.7.0", optional = true }
 os_pipe = { version = "0.9.2", optional = true }
 qapi = { version = "0.8.0", features = ["qmp", "async-tokio-all"], optional = true }
+qapi-spec = {version = "0.3.1"}
 sandbox-derive = { path = "derive" }
 api_client = { git = "https://github.com/cloud-hypervisor/cloud-hypervisor.git", optional = true }
 rtnetlink = "0.12"
 netlink-packet-route = "0.15"
 netlink-packet-core = "0.5.0"
 ttrpc = { version = "0.7", features = ["async"] }
 protobuf = "3.2"
+cgroups-rs = "0.3.2"