Enforce slurm memory limits

[zagy]

(maybe this should be configurable …)

FC-35724
PL-132161

@flyingcircusio/release-managers

Release process

Impact:

Changelog:

• slurm: use task/cgroup to enforce memory limits on jobs (PL-132161, FC-35724).

PR release workflow (internal)

• PR has internal ticket
• internal issue ID (PL-…) part of branch name
• internal issue ID mentioned in PR description text
• ticket is on Platform agile board
• ticket state set to Pull request ready
• if ticket is more urgent than within the next few days, directly contact a member of the Platform team

Security implications

• Security requirements defined? (WHERE)
  • enforce memory limits for user-run slurm job to avoid nodes being unresponsive due to memory pressure/swapping
• Security requirements tested? (EVIDENCE)
  • checked on slurm test cluster that jobs can be run with the new setting