Nitro Enclaves runs out of memory after a lot of traffic

[agraf]

After a lot of vsock traffic, an enclave may run out of memory and start killing processes.

[DJAndries]

hey @agraf , any luck on getting the patch accepted into kernel upstream?

[agraf]

The NSM driver is part of upstream Linux since v6.8. We are currently working on a reproducible build environment for the Linux kernel that will combine an update to the kernel binary with the ability for everyone to bit for bot reason about how we reached the artifact. It will be analogous to our LinuxKit update.

Reassigning to @foersleo to update this issue when the kernel update lands.