snapshot of https://github.com/ory/kratos.git (master, 2026-09-15; blobs > 131072B omitted)

oryx/jsonnetsecure/limit_unix.go

@@ -0,0 +1,29 @@
+// Copyright © 2025 Ory Corp
+// SPDX-License-Identifier: Apache-2.0
+
+//go:build !windows
+
+package jsonnetsecure
+
+import (
+	"fmt"
+	"runtime/debug"
+	"syscall"
+
+	"github.com/pkg/errors"
+)
+
+func SetVirtualMemoryLimit(limitBytes uint64) error {
+	// Tell the Go runtime about the limit.
+	debug.SetMemoryLimit(int64(limitBytes)) //nolint:gosec // The number is a compile-time constant.
+
+	lim := syscall.Rlimit{
+		Cur: limitBytes,
+		Max: limitBytes,
+	}
+	err := syscall.Setrlimit(syscall.RLIMIT_AS, &lim)
+	if err != nil {
+		return errors.WithStack(fmt.Errorf("failed to set virtual memory limit: %v", err))
+	}
+	return nil
+}