Docker uses control groups (cgroups) to limit resources.

 It's definitely a good idea to limit memory and CPU while running applications in containers — it prevents an application from using the whole available memory and/or CPU, which makes other containers running on the same system unresponsive. Limiting resources improves reliability and stability of applications. It also allows to plan for the hardware capacity.