Docker - Java container doesn't respect memory limits

Question

I've been reading multiple posts regarding limiting the container's JVM memory, nothing has worked so far, I don't know where I am messing up.

I made a simple "Hello World" in Spring Boot, using a REST controller, it has nothing else.

Such app was exported as a WAR file, running it with the Tomcat JDK 11 image, I can also run it using the JDK image with a FatJar but the problem persists either way.

Expected

Have my Java container not take more than 25 MB memory (for the sake of a number, could be more)

Actual

Such a simple application is taking 200 - 250 MB memory in docker stats

Dockerfile

FROM tomcat:9.0.30-jdk11-corretto
COPY tomcat.war /usr/local/tomcat/webapps/ROOT.war
CMD ["catalina.sh","run"]

docker-compose.yml

version: '3.7'

services:
    hello:
        build:
            context: .
            dockerfile: Dockerfile
        image: app-test
        environment:
            - JVM_OPTS=-Xms13m -Xmx25m
        ports:
            - 8080:8080

I have tried

-Xms13m -Xmx25m

-XX:PermSize=13m -XX:MaxPermSize=25m

Among other flags that I already deleted and forgot about

`-Xms13m -Xmx25m` is only for JVM menory not for the container. — seenukarthi, Feb 03 '20 at 03:43
@KarthikeyanVaithilingam Oh, does that mean my flags are working but I also have to limit the container in another way? — Jsh0s, Feb 03 '20 at 03:45
I really doubt a standard JVM will start with such limited memory (unless you're using some micro edition). — Elliott Frisch, Feb 03 '20 at 04:00
@ElliottFrisch It was merely an example, isn't 250MB too much for a simple Hello World? I can't imagine setting up multiple microservices this way — Jsh0s, Feb 03 '20 at 04:02
Take a look at [GraalVM](https://www.graalvm.org/) (hence my *non-standard* comment). — Elliott Frisch, Feb 03 '20 at 04:19

score 5 · Accepted Answer · answered Feb 03 '20 at 04:38

5

To restrict memory for docker containers, you need to add following in your docker-compose.yml file

environment:
  - <name>=<value>
deploy:
  resources:
    memory: 256M

Once you add the above code, then containers would be restricted to given memory limit and you can see the result in docker stats output. For more details about the resource restriction refer this docker documentation.

Note: If the container crosses the given memory limit, the kernel will kill the container.

answered Feb 03 '20 at 04:38

Nitish

597
1
4
9

That was it, I also changed the image to openjdk 11 slim, it actually made a difference, the Hello World is only taking 90M – Jsh0s Feb 03 '20 at 04:41
@Jouo I'm glad it helped. In docker, choosing base image wisely is important. – Nitish Feb 03 '20 at 04:48

score 2 · Answer 2 · answered Feb 03 '20 at 04:27

The environment variable that tomcat's catalina.sh script depends on for java options is : JAVA_OPTS. If you change the compose file to use the following env variable , it should work.

environment: - JAVA_OPTS=-Xmx128m -Xms128m

Apart from the fact that 25m seems a way too less memory for a JVM with tomcat running.

Juraj Martinka · Answer 3 · 2020-02-04T21:49:02.900

Regardless of how little memory you set for JVM heap (-Xmx) there are lots of other types of non-heap memory that JVM uses: Java using much more memory than heap size (or size correctly Docker memory limit) - you need to take that into account.

You can also avoid setting -Xmx altogether and instead leverage -XX:MaxRAMPercentage: Clarification of meaning new JVM memory parameters InitialRAMPercentage and MinRAMPercentage

Docker - Java container doesn't respect memory limits

3 Answers3