Managing computing resource consumption of software applications using control groups to facilitate safety compliance

A method comprising:

• detecting, by a processing device, an interference event between a user application executing within a safety management system and a functional safety application executing within the safety management system, the interference event being associated with a system resource of the safety management system used by the functional safety application and the user application, the system resource of the safety management system comprising central processing unit (CPU), memory, and disk input/output (I/O) bandwidth;
• in response to detecting the interference event:
• determining, by the processing device, a first portion of the system resource required for executing the functional safety application, the first portion of the system resource comprising a first portion of the CPU, a first portion of the memory, and a first portion of the disk I/O bandwidth;
• determining, by the processing device, a second portion of the system resource that is separate from the first portion of the system resource, the second portion of the system resource comprising a second portion of the CPU, a second portion of the memory, and a second portion of the disk I/O bandwidth that are separate from the first portion of the CPU, the first portion of the memory, and the first portion of the disk I/O bandwidth;
• and
• generating, by the processing device, a control group for the user application, the control group being a kernel-level mechanism usable to associate the user application with the second portion of the system resource;
• and
• migrating, by the processing device, the user application to the control group, wherein migrating the user application to the control group allocates the second portion of the system resource to the user application and limits access by the user application to second portion of the system resource to prevent reoccurrence of the interference event.

A non-transitory computer-readable medium comprising instructions that are executable by a processing device for causing the processing device to perform operations comprising:

• detecting an interference event between a user application executing within a safety management system and a functional safety application executing within the safety management system, the interference event being associated with a system resource of the safety management system used by the functional safety application and the user application, the system resource of the safety management system comprising central processing unit (CPU), memory, and disk input/output (I/O) bandwidth;
• in response to detecting the interference event:
• determining a first portion of the system resource required for executing the functional safety application, the first portion of the system resource comprising a first portion of the CPU, a first portion of the memory, and a first portion of the disk I/O bandwidth;
• determining a second portion of the system resource that is separate from the first portion of the system resource, the second portion of the system resource comprising a second portion of the CPU, a second portion of the memory, and a second portion of the disk I/O bandwidth that are separate from the first portion of the CPU, the first portion of the memory, and the first portion of the disk I/O bandwidth;
• and
• generating a control group for the user application, the control group being a kernel-level mechanism usable to associate the user application with the second portion of the system resource;
• and
• migrating the user application to the control group, wherein migrating the user application to the control group allocates the second portion of the system resource to the user application and limits access by the user application to second portion of the system resource to prevent reoccurrence of the interference event.