code: func (task *Task) overrideCgroupParent(hostConfig *dockercontainer.HostConfig) error {
  	task.lock.RLock()
  	defer task.lock.RUnlock()
  	if task.MemoryCPULimitsEnabled {
  		cgroupRoot, err := task.BuildCgroupRoot()
  		if err != nil {
  			return errors.Wrapf(err, "task cgroup override: unable to obtain cgroup root for task: %s", task.Arn)
  		}
  		hostConfig.CgroupParent = cgroupRoot
  	}
  	return nil
  }
docs: // overrideCgroupParent updates hostconfig with cgroup parent when task cgroups
  // are enabled