Thanks for this. We resorted to setting ram thresholds in systemd.

Is earlyoom a better solution than that to prevent an erratic process from making an instance unresposnsive?