2026-07-11 19:07:24 +00:00
1 changed files with 5 additions and 0 deletions
@@ -133,6 +133,11 @@ impl SandboxDriver for DockerDriver {
            memory: Some(spec.memory_bytes),
            nano_cpus: Some(spec.nano_cpus),
            pids_limit: Some(spec.pids_limit),
+            // Run tini as PID 1 so it reaps re-parented children (Chromium
+            // spawns short-lived helper/crashpad processes). `sleep infinity`
+            // never wait()s, so without this they accumulate as zombies and
+            // eventually exhaust `pids_limit` in long-lived browser sandboxes.
+            init: Some(true),
            ..Default::default()
        };
        let body = ContainerCreateBody {