os.totalmem() lies inside containers — built a library to read the real limits from cgroups