Hacker News Reader

How does one do resource control with Landrun, e.g., CPU, memory, I/O..?

Not directly, but I think you can run it with systemd:

systemd-run --user --scope -p MemoryMax=1G,IOReadIOPSMax=8000,CPUQuota=20%,<...> landrun ...

You can't. It's only for filesystem and TCP sandboxing.

Exactly, for resource limits you can use setrlimit(2) or cgroups if needed.