Sysctl

systemd in one container failed with "Too many open files", and Docker in another with "unable to create session key: disk quota exceeded". Neither was about files or disks: all the containers were spending the same per-user kernel quotas on the host.