KVM + cgroups: Dom0 process best practice?

Solution 1:

I think you should consider this on a case by case basis (depending on services you are running on your server). For example I wouldn't put ntpd in a low prio group because you rely on it to set correct timing so any delay in executing ntpd code would result in time inaccuracy. Also ntpd has low resource usage so why worry about it?

But it makes sense to limit other processes like yum and other system non-critical processes you might be running like GUI environment, browser, whatever. These tend to be pretty resource hungry usually.