Ah yes, "cgroups", according to notable no-nonsense kernel hacker Al Viro:<p>"it's not just badly written kernel/cgroup.c - the interfaces on <i>both</i> sides (userland and the rest of kernel) are seriously misdesigned. As far as I'm concerned, configuring it out solves my problem nicely."<p>That was in 2011, so things might have improved. What remains however is that cgroups was added to the kernel, by Googlers, for easier maintenance, but with an implicit understanding that no sane person would actually make use of it to do something important.<p>... enter SystemD.