B'mod default, il-kontejners jistgħu jużaw risos host illimitati — li jirraqqaq il-possibilità li kontejner wieħed iġib ħsara lill-oħrajn jew jaħtar l-host. Docker jippermettilek tistabbilixxi limiti ta' risos (CPU, memorja) biex tikkontrolla l-konsum, importanti għall-istabbiltà u għall-ġusta qsim tal-risos fil-produzzjoni.## Il-problema: użu ta' risos bla limititext BY DEFAULT a container can consume ALL available host CPU and memory: → a buggy/busy container (memory leak, runaway loop) can starve other containers or crash the entire host (out of memory) → In production (multiple containers per host), LIMIT resources to isolate them. ## Stabbilixxi limiti ta' memorja u CPU```bash
memory limits
docker run -m 512m myapp # hard limit: 512 MB (container killed if exceeded — OOM) docker run -m 512m --memory-reservation 256m myapp # soft limit + hard limit
