limit cpu usage of containers

README.md

@@ -9,6 +9,8 @@ This repository contains a remote code execution engine that allows users to sub
 - Supports both `x86_64` and `arm64` architecture machines.
 - Cleans up zombie containers to avoid memory leaks.
 - Provides a REST API for code submission and execution.
+- Restricts the usage of system resources (Memory, CPU, max processes, max files, max file size)
+- Kills a container if it is taking more than a minute to complete the execution.
 - Supports custom docker images and compilation commands for each programming language.
 
 ## Prerequisites

pkg/container/dockerclient.go

@@ -100,7 +100,8 @@ func (d *dockerClient) ExecuteCode(ctx context.Context, code *Code) (string, err
 		// Set the memory limit to 1GB
 		Resources: container.Resources{
 			// set 500 MB as the memory limit in bytes
-			Memory: 500 * 1024 * 1024,
+			Memory:   500 * 1024 * 1024,
+			NanoCPUs: 500000000, // 0.5 CPU
 			Ulimits: []*units.Ulimit{
 				{
 					Name: "nproc",