Add some ad-hoc cgroups we can throw a one-off process into if needed

profile/manifests/lydia.pp

@@ -36,6 +36,7 @@ class profile::lydia (
   include ::site_apache::php
   include ::site_apparmor
   include ::site_cgroups
+  include ::site_cgroups::adhoc
   include ::site_dovecot
   include ::site_imagemagick
   include ::site_kernelcare

site_cgroups/manifests/adhoc.pp

+# Class: site_cgroups::adhoc
+#
+# Create a few special cgroups that we can
+# assign a one-off process to when needed
+
+class site_cgroups::adhoc (
+  Array[Integer] $cpucaps = [1, 5, 10, 25, 50],
+) {
+  concat::fragment { 'cgroups_adhoc_cpucaps':
+    target  => '/etc/cgconfig.conf',
+    content => template('site_cgroups/adhoc.erb'),
+    order   => '04',
+  }
+}

site_cgroups/templates/adhoc.erb

+<% @cpucaps.each do |cap| %>
+group adhoc_cpu_<%= cap %> {
+  cpu {
+    cpu.cfs_period_us = 1000000;
+    cpu.cfs_quota_us  = <%= cap * 10000 %>;
+  }
+}
+<% end %>